./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5fbdf5bf Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 166d50f854e9d57ec06fdf30b85b3272203a25d5 ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-wip.dd.seqcomp-5fbdf5b [2021-08-29 16:15:14,145 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-08-29 16:15:14,148 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-08-29 16:15:14,185 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-08-29 16:15:14,185 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-08-29 16:15:14,200 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-08-29 16:15:14,203 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-08-29 16:15:14,208 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-08-29 16:15:14,216 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-08-29 16:15:14,222 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-08-29 16:15:14,223 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-08-29 16:15:14,227 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-08-29 16:15:14,228 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-08-29 16:15:14,231 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-08-29 16:15:14,233 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-08-29 16:15:14,235 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-08-29 16:15:14,236 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-08-29 16:15:14,237 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-08-29 16:15:14,242 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-08-29 16:15:14,248 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-08-29 16:15:14,250 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-08-29 16:15:14,251 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-08-29 16:15:14,252 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-08-29 16:15:14,254 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-08-29 16:15:14,262 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-08-29 16:15:14,262 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-08-29 16:15:14,263 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-08-29 16:15:14,264 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-08-29 16:15:14,265 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-08-29 16:15:14,266 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-08-29 16:15:14,266 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-08-29 16:15:14,267 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-08-29 16:15:14,268 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-08-29 16:15:14,269 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-08-29 16:15:14,270 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-08-29 16:15:14,270 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-08-29 16:15:14,271 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-08-29 16:15:14,271 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-08-29 16:15:14,272 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-08-29 16:15:14,273 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-08-29 16:15:14,274 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-08-29 16:15:14,278 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-08-29 16:15:14,315 INFO L113 SettingsManager]: Loading preferences was successful [2021-08-29 16:15:14,316 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-08-29 16:15:14,317 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-08-29 16:15:14,317 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-08-29 16:15:14,319 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-08-29 16:15:14,320 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-08-29 16:15:14,320 INFO L138 SettingsManager]: * Use SBE=true [2021-08-29 16:15:14,320 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-08-29 16:15:14,321 INFO L138 SettingsManager]: * sizeof long=4 [2021-08-29 16:15:14,321 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-08-29 16:15:14,322 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-08-29 16:15:14,322 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-08-29 16:15:14,322 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-08-29 16:15:14,322 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-08-29 16:15:14,322 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-08-29 16:15:14,322 INFO L138 SettingsManager]: * sizeof long double=12 [2021-08-29 16:15:14,323 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-08-29 16:15:14,323 INFO L138 SettingsManager]: * Use constant arrays=true [2021-08-29 16:15:14,323 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-08-29 16:15:14,323 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-08-29 16:15:14,323 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-08-29 16:15:14,324 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-08-29 16:15:14,324 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-08-29 16:15:14,324 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-08-29 16:15:14,324 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-08-29 16:15:14,324 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-08-29 16:15:14,325 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-08-29 16:15:14,325 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-08-29 16:15:14,325 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-08-29 16:15:14,325 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-08-29 16:15:14,325 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 166d50f854e9d57ec06fdf30b85b3272203a25d5 [2021-08-29 16:15:14,656 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-08-29 16:15:14,674 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-08-29 16:15:14,676 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-08-29 16:15:14,677 INFO L271 PluginConnector]: Initializing CDTParser... [2021-08-29 16:15:14,689 INFO L275 PluginConnector]: CDTParser initialized [2021-08-29 16:15:14,691 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2021-08-29 16:15:14,760 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ffd0112e8/2d24a95744594487a1a54f6e49b182e1/FLAG292e352c8 [2021-08-29 16:15:15,332 INFO L306 CDTParser]: Found 1 translation units. [2021-08-29 16:15:15,335 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2021-08-29 16:15:15,349 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ffd0112e8/2d24a95744594487a1a54f6e49b182e1/FLAG292e352c8 [2021-08-29 16:15:15,750 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ffd0112e8/2d24a95744594487a1a54f6e49b182e1 [2021-08-29 16:15:15,753 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-08-29 16:15:15,754 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-08-29 16:15:15,756 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-08-29 16:15:15,756 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-08-29 16:15:15,759 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-08-29 16:15:15,760 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.08 04:15:15" (1/1) ... [2021-08-29 16:15:15,761 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3ecfe748 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:15, skipping insertion in model container [2021-08-29 16:15:15,761 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.08 04:15:15" (1/1) ... [2021-08-29 16:15:15,773 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-08-29 16:15:15,817 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-08-29 16:15:16,005 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2661,2674] [2021-08-29 16:15:16,132 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-08-29 16:15:16,140 INFO L203 MainTranslator]: Completed pre-run [2021-08-29 16:15:16,153 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2661,2674] [2021-08-29 16:15:16,185 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-08-29 16:15:16,200 INFO L208 MainTranslator]: Completed translation [2021-08-29 16:15:16,201 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16 WrapperNode [2021-08-29 16:15:16,201 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-08-29 16:15:16,202 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-08-29 16:15:16,202 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-08-29 16:15:16,202 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-08-29 16:15:16,208 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16" (1/1) ... [2021-08-29 16:15:16,221 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16" (1/1) ... [2021-08-29 16:15:16,267 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-08-29 16:15:16,279 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-08-29 16:15:16,279 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-08-29 16:15:16,279 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-08-29 16:15:16,286 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16" (1/1) ... [2021-08-29 16:15:16,286 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16" (1/1) ... [2021-08-29 16:15:16,312 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16" (1/1) ... [2021-08-29 16:15:16,313 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16" (1/1) ... [2021-08-29 16:15:16,329 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16" (1/1) ... [2021-08-29 16:15:16,353 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16" (1/1) ... [2021-08-29 16:15:16,356 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16" (1/1) ... [2021-08-29 16:15:16,370 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-08-29 16:15:16,371 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-08-29 16:15:16,371 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-08-29 16:15:16,371 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-08-29 16:15:16,372 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16" (1/1) ... [2021-08-29 16:15:16,381 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-08-29 16:15:16,391 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-08-29 16:15:16,406 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-08-29 16:15:16,433 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-08-29 16:15:16,448 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-08-29 16:15:16,448 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-08-29 16:15:16,449 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-08-29 16:15:16,449 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-08-29 16:15:17,043 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-08-29 16:15:17,043 INFO L299 CfgBuilder]: Removed 354 assume(true) statements. [2021-08-29 16:15:17,046 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.08 04:15:17 BoogieIcfgContainer [2021-08-29 16:15:17,046 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-08-29 16:15:17,049 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-08-29 16:15:17,049 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-08-29 16:15:17,051 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-08-29 16:15:17,052 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.08 04:15:15" (1/3) ... [2021-08-29 16:15:17,052 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1f7c88a1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.08 04:15:17, skipping insertion in model container [2021-08-29 16:15:17,053 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:16" (2/3) ... [2021-08-29 16:15:17,053 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1f7c88a1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.08 04:15:17, skipping insertion in model container [2021-08-29 16:15:17,054 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.08 04:15:17" (3/3) ... [2021-08-29 16:15:17,057 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product63.cil.c [2021-08-29 16:15:17,062 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-08-29 16:15:17,062 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2021-08-29 16:15:17,116 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-08-29 16:15:17,123 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-08-29 16:15:17,124 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2021-08-29 16:15:17,145 INFO L276 IsEmpty]: Start isEmpty. Operand has 231 states, 227 states have (on average 1.524229074889868) internal successors, (346), 230 states have internal predecessors, (346), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:17,156 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2021-08-29 16:15:17,156 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:17,157 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:17,158 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:17,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:17,169 INFO L82 PathProgramCache]: Analyzing trace with hash 720129344, now seen corresponding path program 1 times [2021-08-29 16:15:17,177 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:17,177 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [493096597] [2021-08-29 16:15:17,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:17,178 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:17,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:17,451 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:17,452 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:17,452 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [493096597] [2021-08-29 16:15:17,453 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [493096597] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:17,453 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:17,453 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-08-29 16:15:17,455 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [817866375] [2021-08-29 16:15:17,459 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-08-29 16:15:17,459 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:17,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-08-29 16:15:17,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-08-29 16:15:17,491 INFO L87 Difference]: Start difference. First operand has 231 states, 227 states have (on average 1.524229074889868) internal successors, (346), 230 states have internal predecessors, (346), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:17,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:17,929 INFO L93 Difference]: Finished difference Result 455 states and 684 transitions. [2021-08-29 16:15:17,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-08-29 16:15:17,933 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2021-08-29 16:15:17,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:17,948 INFO L225 Difference]: With dead ends: 455 [2021-08-29 16:15:17,948 INFO L226 Difference]: Without dead ends: 227 [2021-08-29 16:15:17,952 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.06ms TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-08-29 16:15:17,956 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 339 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 273.31ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 339 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.55ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 339 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 372.93ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:17,957 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 0 Invalid, 339 Unknown, 0 Unchecked, 2.55ms Time], IncrementalHoareTripleChecker [0 Valid, 339 Invalid, 0 Unknown, 0 Unchecked, 372.93ms Time] [2021-08-29 16:15:17,973 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2021-08-29 16:15:18,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 227. [2021-08-29 16:15:18,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 224 states have (on average 1.4910714285714286) internal successors, (334), 226 states have internal predecessors, (334), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:18,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 334 transitions. [2021-08-29 16:15:18,026 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 334 transitions. Word has length 18 [2021-08-29 16:15:18,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:18,027 INFO L470 AbstractCegarLoop]: Abstraction has 227 states and 334 transitions. [2021-08-29 16:15:18,027 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:18,027 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 334 transitions. [2021-08-29 16:15:18,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-08-29 16:15:18,029 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:18,029 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:18,029 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-08-29 16:15:18,030 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:18,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:18,031 INFO L82 PathProgramCache]: Analyzing trace with hash -1224858909, now seen corresponding path program 1 times [2021-08-29 16:15:18,031 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:18,031 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [30825587] [2021-08-29 16:15:18,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:18,032 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:18,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:18,174 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:18,175 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:18,175 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [30825587] [2021-08-29 16:15:18,176 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [30825587] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:18,176 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:18,176 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-29 16:15:18,177 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [715244661] [2021-08-29 16:15:18,178 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-29 16:15:18,178 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:18,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-29 16:15:18,179 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:15:18,180 INFO L87 Difference]: Start difference. First operand 227 states and 334 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:18,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:18,363 INFO L93 Difference]: Finished difference Result 227 states and 334 transitions. [2021-08-29 16:15:18,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-29 16:15:18,364 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-08-29 16:15:18,364 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:18,366 INFO L225 Difference]: With dead ends: 227 [2021-08-29 16:15:18,367 INFO L226 Difference]: Without dead ends: 87 [2021-08-29 16:15:18,368 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 3.15ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:15:18,370 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 119 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 123.70ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 119 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.11ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 168.78ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:18,372 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [119 Valid, 0 Invalid, 133 Unknown, 0 Unchecked, 1.11ms Time], IncrementalHoareTripleChecker [0 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 168.78ms Time] [2021-08-29 16:15:18,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2021-08-29 16:15:18,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 87. [2021-08-29 16:15:18,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 86 states have (on average 1.4767441860465116) internal successors, (127), 86 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:18,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 127 transitions. [2021-08-29 16:15:18,382 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 127 transitions. Word has length 19 [2021-08-29 16:15:18,382 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:18,382 INFO L470 AbstractCegarLoop]: Abstraction has 87 states and 127 transitions. [2021-08-29 16:15:18,383 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:18,383 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 127 transitions. [2021-08-29 16:15:18,384 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-08-29 16:15:18,384 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:18,385 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:18,385 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-08-29 16:15:18,386 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:18,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:18,387 INFO L82 PathProgramCache]: Analyzing trace with hash 1431011903, now seen corresponding path program 1 times [2021-08-29 16:15:18,387 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:18,387 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [757042856] [2021-08-29 16:15:18,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:18,387 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:18,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:18,452 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:18,452 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:18,452 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [757042856] [2021-08-29 16:15:18,452 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [757042856] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:18,452 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:18,452 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:15:18,453 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1975713132] [2021-08-29 16:15:18,453 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-29 16:15:18,453 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:18,454 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-29 16:15:18,454 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-08-29 16:15:18,454 INFO L87 Difference]: Start difference. First operand 87 states and 127 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:18,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:18,934 INFO L93 Difference]: Finished difference Result 271 states and 403 transitions. [2021-08-29 16:15:18,934 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-08-29 16:15:18,935 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-08-29 16:15:18,935 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:18,936 INFO L225 Difference]: With dead ends: 271 [2021-08-29 16:15:18,936 INFO L226 Difference]: Without dead ends: 191 [2021-08-29 16:15:18,937 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 23.68ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:15:18,938 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 586 mSDsluCounter, 452 mSDsCounter, 0 mSdLazyCounter, 604 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 340.50ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 586 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 606 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 5.09ms SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 604 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 433.43ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:18,938 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [586 Valid, 0 Invalid, 606 Unknown, 0 Unchecked, 5.09ms Time], IncrementalHoareTripleChecker [2 Valid, 604 Invalid, 0 Unknown, 0 Unchecked, 433.43ms Time] [2021-08-29 16:15:18,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2021-08-29 16:15:18,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 107. [2021-08-29 16:15:18,947 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 107 states, 106 states have (on average 1.490566037735849) internal successors, (158), 106 states have internal predecessors, (158), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:18,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107 states to 107 states and 158 transitions. [2021-08-29 16:15:18,948 INFO L78 Accepts]: Start accepts. Automaton has 107 states and 158 transitions. Word has length 24 [2021-08-29 16:15:18,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:18,949 INFO L470 AbstractCegarLoop]: Abstraction has 107 states and 158 transitions. [2021-08-29 16:15:18,949 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:18,949 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 158 transitions. [2021-08-29 16:15:18,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-08-29 16:15:18,950 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:18,950 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:18,950 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-08-29 16:15:18,951 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:18,951 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:18,951 INFO L82 PathProgramCache]: Analyzing trace with hash -1446560635, now seen corresponding path program 1 times [2021-08-29 16:15:18,951 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:18,952 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1195614518] [2021-08-29 16:15:18,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:18,952 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:18,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:18,991 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:18,991 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:18,992 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1195614518] [2021-08-29 16:15:18,992 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1195614518] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:18,992 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:18,992 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-08-29 16:15:18,992 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [388484831] [2021-08-29 16:15:18,993 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-29 16:15:18,993 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:18,994 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-29 16:15:18,994 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:15:18,994 INFO L87 Difference]: Start difference. First operand 107 states and 158 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:19,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:19,169 INFO L93 Difference]: Finished difference Result 214 states and 319 transitions. [2021-08-29 16:15:19,170 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-29 16:15:19,170 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2021-08-29 16:15:19,170 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:19,171 INFO L225 Difference]: With dead ends: 214 [2021-08-29 16:15:19,171 INFO L226 Difference]: Without dead ends: 114 [2021-08-29 16:15:19,173 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 1.84ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:15:19,180 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 63 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 124.18ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 161 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.03ms SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 158.64ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:19,182 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [63 Valid, 0 Invalid, 161 Unknown, 0 Unchecked, 1.03ms Time], IncrementalHoareTripleChecker [13 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 158.64ms Time] [2021-08-29 16:15:19,183 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2021-08-29 16:15:19,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 112. [2021-08-29 16:15:19,196 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 111 states have (on average 1.4414414414414414) internal successors, (160), 111 states have internal predecessors, (160), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:19,197 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 160 transitions. [2021-08-29 16:15:19,197 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 160 transitions. Word has length 27 [2021-08-29 16:15:19,198 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:19,198 INFO L470 AbstractCegarLoop]: Abstraction has 112 states and 160 transitions. [2021-08-29 16:15:19,198 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:19,198 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 160 transitions. [2021-08-29 16:15:19,199 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-08-29 16:15:19,199 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:19,199 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:19,200 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-08-29 16:15:19,200 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:19,201 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:19,201 INFO L82 PathProgramCache]: Analyzing trace with hash 1752519880, now seen corresponding path program 1 times [2021-08-29 16:15:19,201 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:19,201 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [36030905] [2021-08-29 16:15:19,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:19,202 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:19,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:19,288 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:19,288 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:19,289 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [36030905] [2021-08-29 16:15:19,289 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [36030905] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:19,289 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:19,289 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-29 16:15:19,289 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1500729217] [2021-08-29 16:15:19,290 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:15:19,290 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:19,290 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:15:19,291 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:15:19,292 INFO L87 Difference]: Start difference. First operand 112 states and 160 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:19,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:19,922 INFO L93 Difference]: Finished difference Result 534 states and 773 transitions. [2021-08-29 16:15:19,922 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-08-29 16:15:19,922 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2021-08-29 16:15:19,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:19,925 INFO L225 Difference]: With dead ends: 534 [2021-08-29 16:15:19,925 INFO L226 Difference]: Without dead ends: 429 [2021-08-29 16:15:19,926 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 27.14ms TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-08-29 16:15:19,926 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 431 mSDsluCounter, 425 mSDsCounter, 0 mSdLazyCounter, 609 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 448.62ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 431 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 632 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 3.86ms SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 609 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 557.45ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:19,927 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [431 Valid, 0 Invalid, 632 Unknown, 0 Unchecked, 3.86ms Time], IncrementalHoareTripleChecker [23 Valid, 609 Invalid, 0 Unknown, 0 Unchecked, 557.45ms Time] [2021-08-29 16:15:19,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 429 states. [2021-08-29 16:15:19,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 429 to 206. [2021-08-29 16:15:19,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 206 states, 205 states have (on average 1.4195121951219511) internal successors, (291), 205 states have internal predecessors, (291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:19,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206 states to 206 states and 291 transitions. [2021-08-29 16:15:19,944 INFO L78 Accepts]: Start accepts. Automaton has 206 states and 291 transitions. Word has length 27 [2021-08-29 16:15:19,944 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:19,944 INFO L470 AbstractCegarLoop]: Abstraction has 206 states and 291 transitions. [2021-08-29 16:15:19,944 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:19,945 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 291 transitions. [2021-08-29 16:15:19,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2021-08-29 16:15:19,945 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:19,946 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:19,946 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-08-29 16:15:19,946 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:19,947 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:19,947 INFO L82 PathProgramCache]: Analyzing trace with hash 318374720, now seen corresponding path program 1 times [2021-08-29 16:15:19,947 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:19,947 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [22511114] [2021-08-29 16:15:19,947 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:19,947 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:19,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:20,015 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:20,015 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:20,016 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [22511114] [2021-08-29 16:15:20,016 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [22511114] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:20,016 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:20,016 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-29 16:15:20,016 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [28088377] [2021-08-29 16:15:20,016 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:15:20,017 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:20,017 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:15:20,017 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:15:20,017 INFO L87 Difference]: Start difference. First operand 206 states and 291 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:20,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:20,712 INFO L93 Difference]: Finished difference Result 781 states and 1107 transitions. [2021-08-29 16:15:20,712 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-08-29 16:15:20,713 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2021-08-29 16:15:20,713 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:20,715 INFO L225 Difference]: With dead ends: 781 [2021-08-29 16:15:20,715 INFO L226 Difference]: Without dead ends: 582 [2021-08-29 16:15:20,716 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 28.02ms TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-08-29 16:15:20,716 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 332 mSDsluCounter, 447 mSDsCounter, 0 mSdLazyCounter, 739 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 424.87ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 332 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 748 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 7.11ms SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 739 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 578.57ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:20,717 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [332 Valid, 0 Invalid, 748 Unknown, 0 Unchecked, 7.11ms Time], IncrementalHoareTripleChecker [9 Valid, 739 Invalid, 0 Unknown, 0 Unchecked, 578.57ms Time] [2021-08-29 16:15:20,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 582 states. [2021-08-29 16:15:20,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 582 to 204. [2021-08-29 16:15:20,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 203 states have (on average 1.4039408866995073) internal successors, (285), 203 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:20,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 285 transitions. [2021-08-29 16:15:20,740 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 285 transitions. Word has length 28 [2021-08-29 16:15:20,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:20,741 INFO L470 AbstractCegarLoop]: Abstraction has 204 states and 285 transitions. [2021-08-29 16:15:20,741 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:20,741 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 285 transitions. [2021-08-29 16:15:20,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-08-29 16:15:20,742 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:20,745 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:20,745 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-08-29 16:15:20,745 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:20,746 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:20,746 INFO L82 PathProgramCache]: Analyzing trace with hash -1977068216, now seen corresponding path program 1 times [2021-08-29 16:15:20,746 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:20,746 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1321378482] [2021-08-29 16:15:20,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:20,746 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:20,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:20,788 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:20,789 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:20,789 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1321378482] [2021-08-29 16:15:20,789 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1321378482] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:20,789 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:20,789 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:15:20,789 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1490765395] [2021-08-29 16:15:20,790 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:15:20,790 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:20,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:15:20,790 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:15:20,790 INFO L87 Difference]: Start difference. First operand 204 states and 285 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:21,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:21,181 INFO L93 Difference]: Finished difference Result 573 states and 793 transitions. [2021-08-29 16:15:21,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-08-29 16:15:21,182 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2021-08-29 16:15:21,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:21,183 INFO L225 Difference]: With dead ends: 573 [2021-08-29 16:15:21,183 INFO L226 Difference]: Without dead ends: 376 [2021-08-29 16:15:21,184 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 16.53ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-08-29 16:15:21,185 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 136 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 497 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 259.32ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 508 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 3.55ms SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 497 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 329.19ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:21,185 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [136 Valid, 0 Invalid, 508 Unknown, 0 Unchecked, 3.55ms Time], IncrementalHoareTripleChecker [11 Valid, 497 Invalid, 0 Unknown, 0 Unchecked, 329.19ms Time] [2021-08-29 16:15:21,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 376 states. [2021-08-29 16:15:21,199 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 376 to 222. [2021-08-29 16:15:21,200 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 222 states, 221 states have (on average 1.3710407239819005) internal successors, (303), 221 states have internal predecessors, (303), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:21,201 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 222 states to 222 states and 303 transitions. [2021-08-29 16:15:21,201 INFO L78 Accepts]: Start accepts. Automaton has 222 states and 303 transitions. Word has length 37 [2021-08-29 16:15:21,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:21,201 INFO L470 AbstractCegarLoop]: Abstraction has 222 states and 303 transitions. [2021-08-29 16:15:21,201 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:21,202 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 303 transitions. [2021-08-29 16:15:21,202 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-08-29 16:15:21,202 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:21,202 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:21,203 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-08-29 16:15:21,203 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:21,203 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:21,203 INFO L82 PathProgramCache]: Analyzing trace with hash 1306781830, now seen corresponding path program 1 times [2021-08-29 16:15:21,203 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:21,203 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [867877394] [2021-08-29 16:15:21,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:21,204 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:21,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:21,250 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:21,250 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:21,250 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [867877394] [2021-08-29 16:15:21,250 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [867877394] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:21,250 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:21,251 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-08-29 16:15:21,251 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [539337912] [2021-08-29 16:15:21,251 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-29 16:15:21,251 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:21,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-29 16:15:21,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-08-29 16:15:21,252 INFO L87 Difference]: Start difference. First operand 222 states and 303 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:21,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:21,628 INFO L93 Difference]: Finished difference Result 623 states and 843 transitions. [2021-08-29 16:15:21,628 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-29 16:15:21,628 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2021-08-29 16:15:21,629 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:21,630 INFO L225 Difference]: With dead ends: 623 [2021-08-29 16:15:21,630 INFO L226 Difference]: Without dead ends: 408 [2021-08-29 16:15:21,630 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 34.82ms TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2021-08-29 16:15:21,631 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 371 mSDsluCounter, 210 mSDsCounter, 0 mSdLazyCounter, 368 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 229.45ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 371 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 377 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.79ms SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 368 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 304.75ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:21,631 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [371 Valid, 0 Invalid, 377 Unknown, 0 Unchecked, 2.79ms Time], IncrementalHoareTripleChecker [9 Valid, 368 Invalid, 0 Unknown, 0 Unchecked, 304.75ms Time] [2021-08-29 16:15:21,632 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 408 states. [2021-08-29 16:15:21,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 408 to 234. [2021-08-29 16:15:21,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 234 states, 233 states have (on average 1.351931330472103) internal successors, (315), 233 states have internal predecessors, (315), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:21,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 315 transitions. [2021-08-29 16:15:21,649 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 315 transitions. Word has length 37 [2021-08-29 16:15:21,649 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:21,649 INFO L470 AbstractCegarLoop]: Abstraction has 234 states and 315 transitions. [2021-08-29 16:15:21,649 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:21,649 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 315 transitions. [2021-08-29 16:15:21,650 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-08-29 16:15:21,650 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:21,650 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:21,650 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-08-29 16:15:21,651 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:21,651 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:21,651 INFO L82 PathProgramCache]: Analyzing trace with hash 285713476, now seen corresponding path program 1 times [2021-08-29 16:15:21,651 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:21,651 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [795143215] [2021-08-29 16:15:21,651 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:21,652 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:21,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:21,682 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:21,683 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:21,683 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [795143215] [2021-08-29 16:15:21,683 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [795143215] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:21,683 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:21,683 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-08-29 16:15:21,683 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1709120804] [2021-08-29 16:15:21,683 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-29 16:15:21,684 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:21,684 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-29 16:15:21,684 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:15:21,684 INFO L87 Difference]: Start difference. First operand 234 states and 315 transitions. Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 2 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:21,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:21,868 INFO L93 Difference]: Finished difference Result 551 states and 741 transitions. [2021-08-29 16:15:21,868 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-29 16:15:21,868 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 2 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2021-08-29 16:15:21,869 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:21,870 INFO L225 Difference]: With dead ends: 551 [2021-08-29 16:15:21,870 INFO L226 Difference]: Without dead ends: 324 [2021-08-29 16:15:21,871 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 1.94ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:15:21,871 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 21 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 197 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 118.63ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 198 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.61ms SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 197 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 150.97ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:21,871 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 0 Invalid, 198 Unknown, 0 Unchecked, 0.61ms Time], IncrementalHoareTripleChecker [1 Valid, 197 Invalid, 0 Unknown, 0 Unchecked, 150.97ms Time] [2021-08-29 16:15:21,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2021-08-29 16:15:21,892 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 324. [2021-08-29 16:15:21,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 324 states, 323 states have (on average 1.3219814241486068) internal successors, (427), 323 states have internal predecessors, (427), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:21,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 324 states to 324 states and 427 transitions. [2021-08-29 16:15:21,894 INFO L78 Accepts]: Start accepts. Automaton has 324 states and 427 transitions. Word has length 37 [2021-08-29 16:15:21,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:21,895 INFO L470 AbstractCegarLoop]: Abstraction has 324 states and 427 transitions. [2021-08-29 16:15:21,895 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 2 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:21,895 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 427 transitions. [2021-08-29 16:15:21,895 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-08-29 16:15:21,896 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:21,896 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:21,896 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-08-29 16:15:21,896 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:21,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:21,896 INFO L82 PathProgramCache]: Analyzing trace with hash 1821511428, now seen corresponding path program 1 times [2021-08-29 16:15:21,896 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:21,897 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [376029624] [2021-08-29 16:15:21,897 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:21,897 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:21,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:21,951 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:21,952 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:21,952 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [376029624] [2021-08-29 16:15:21,952 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [376029624] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:21,952 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:21,952 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-08-29 16:15:21,952 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [604932942] [2021-08-29 16:15:21,952 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-29 16:15:21,952 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:21,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-29 16:15:21,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-08-29 16:15:21,953 INFO L87 Difference]: Start difference. First operand 324 states and 427 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:22,732 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:22,732 INFO L93 Difference]: Finished difference Result 1071 states and 1411 transitions. [2021-08-29 16:15:22,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-08-29 16:15:22,733 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2021-08-29 16:15:22,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:22,736 INFO L225 Difference]: With dead ends: 1071 [2021-08-29 16:15:22,736 INFO L226 Difference]: Without dead ends: 754 [2021-08-29 16:15:22,737 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 60.89ms TimeCoverageRelationStatistics Valid=60, Invalid=122, Unknown=0, NotChecked=0, Total=182 [2021-08-29 16:15:22,737 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 517 mSDsluCounter, 666 mSDsCounter, 0 mSdLazyCounter, 1001 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 498.91ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 517 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 1022 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 5.55ms SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 1001 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 627.32ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:22,737 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [517 Valid, 0 Invalid, 1022 Unknown, 0 Unchecked, 5.55ms Time], IncrementalHoareTripleChecker [21 Valid, 1001 Invalid, 0 Unknown, 0 Unchecked, 627.32ms Time] [2021-08-29 16:15:22,738 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 754 states. [2021-08-29 16:15:22,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 754 to 324. [2021-08-29 16:15:22,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 324 states, 323 states have (on average 1.2972136222910218) internal successors, (419), 323 states have internal predecessors, (419), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:22,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 324 states to 324 states and 419 transitions. [2021-08-29 16:15:22,771 INFO L78 Accepts]: Start accepts. Automaton has 324 states and 419 transitions. Word has length 38 [2021-08-29 16:15:22,771 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:22,771 INFO L470 AbstractCegarLoop]: Abstraction has 324 states and 419 transitions. [2021-08-29 16:15:22,771 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:22,771 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 419 transitions. [2021-08-29 16:15:22,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-08-29 16:15:22,772 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:22,773 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:22,773 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-08-29 16:15:22,773 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:22,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:22,774 INFO L82 PathProgramCache]: Analyzing trace with hash -1572853591, now seen corresponding path program 1 times [2021-08-29 16:15:22,774 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:22,774 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1907805017] [2021-08-29 16:15:22,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:22,774 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:22,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:22,827 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-08-29 16:15:22,827 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:22,827 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1907805017] [2021-08-29 16:15:22,828 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1907805017] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:22,828 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:22,828 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-08-29 16:15:22,828 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [447903045] [2021-08-29 16:15:22,828 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-29 16:15:22,828 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:22,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-29 16:15:22,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-08-29 16:15:22,829 INFO L87 Difference]: Start difference. First operand 324 states and 419 transitions. Second operand has 6 states, 6 states have (on average 9.833333333333334) internal successors, (59), 6 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:23,571 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:23,571 INFO L93 Difference]: Finished difference Result 834 states and 1088 transitions. [2021-08-29 16:15:23,571 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-08-29 16:15:23,572 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 9.833333333333334) internal successors, (59), 6 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2021-08-29 16:15:23,572 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:23,572 INFO L225 Difference]: With dead ends: 834 [2021-08-29 16:15:23,572 INFO L226 Difference]: Without dead ends: 0 [2021-08-29 16:15:23,573 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 59.76ms TimeCoverageRelationStatistics Valid=60, Invalid=122, Unknown=0, NotChecked=0, Total=182 [2021-08-29 16:15:23,574 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 262 mSDsluCounter, 684 mSDsCounter, 0 mSdLazyCounter, 990 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 480.98ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 262 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 998 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 4.32ms SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 990 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 609.17ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:23,574 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [262 Valid, 0 Invalid, 998 Unknown, 0 Unchecked, 4.32ms Time], IncrementalHoareTripleChecker [8 Valid, 990 Invalid, 0 Unknown, 0 Unchecked, 609.17ms Time] [2021-08-29 16:15:23,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-08-29 16:15:23,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-08-29 16:15:23,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:23,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-08-29 16:15:23,575 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 63 [2021-08-29 16:15:23,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:23,575 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-08-29 16:15:23,575 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 9.833333333333334) internal successors, (59), 6 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:23,575 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-08-29 16:15:23,575 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-08-29 16:15:23,578 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2021-08-29 16:15:23,578 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2021-08-29 16:15:23,578 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2021-08-29 16:15:23,578 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-08-29 16:15:23,580 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-08-29 16:15:23,585 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,588 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,588 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,630 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,632 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,632 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,633 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,633 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,634 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,738 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,739 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,739 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,740 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,740 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,745 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,746 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,747 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,747 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,863 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,865 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,869 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,872 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,873 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,877 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,878 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,886 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,886 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,909 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,910 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,911 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,915 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,916 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,916 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,917 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,921 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,922 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:23,922 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,036 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,312 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,313 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,313 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,326 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,326 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,327 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,327 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,328 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,329 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,329 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,330 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,330 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,330 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,331 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,492 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,493 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,494 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,494 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,494 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,498 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,583 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,583 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,584 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,585 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,585 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,591 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,592 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,595 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,596 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,597 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,597 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,597 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,598 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,600 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,600 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,601 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,601 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,605 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,606 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,839 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,840 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,845 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,845 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:24,846 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:25,064 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:25,065 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:25,071 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:25,072 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:25,077 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:25,077 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:25,078 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:25,088 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:25,323 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:25,374 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:25,374 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:29,767 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 152) no Hoare annotation was computed. [2021-08-29 16:15:29,767 INFO L854 garLoopResultBuilder]: At program point L301(lines 296 304) the Hoare annotation is: (and (= ULTIMATE.start_main_~tmp~0 1) (= ULTIMATE.start_test_~splverifierCounter~0 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| 1) (not (= 0 ~systemActive~0))) [2021-08-29 16:15:29,767 INFO L854 garLoopResultBuilder]: At program point L301-1(lines 296 304) the Hoare annotation is: false [2021-08-29 16:15:29,767 INFO L854 garLoopResultBuilder]: At program point L301-2(lines 296 304) the Hoare annotation is: false [2021-08-29 16:15:29,767 INFO L854 garLoopResultBuilder]: At program point L301-3(lines 296 304) the Hoare annotation is: false [2021-08-29 16:15:29,767 INFO L854 garLoopResultBuilder]: At program point L301-4(lines 296 304) the Hoare annotation is: false [2021-08-29 16:15:29,768 INFO L854 garLoopResultBuilder]: At program point L301-5(lines 296 304) the Hoare annotation is: false [2021-08-29 16:15:29,768 INFO L854 garLoopResultBuilder]: At program point L105(lines 101 107) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res| 1) (= ~waterLevel~0 1) (= ULTIMATE.start_main_~tmp~0 ~systemActive~0)) [2021-08-29 16:15:29,768 INFO L858 garLoopResultBuilder]: For program point L503(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,768 INFO L858 garLoopResultBuilder]: For program point L503-2(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,768 INFO L858 garLoopResultBuilder]: For program point L503-4(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,768 INFO L858 garLoopResultBuilder]: For program point L503-6(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,768 INFO L858 garLoopResultBuilder]: For program point L503-8(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,769 INFO L858 garLoopResultBuilder]: For program point L503-10(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,769 INFO L858 garLoopResultBuilder]: For program point L503-12(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,769 INFO L858 garLoopResultBuilder]: For program point L503-14(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,769 INFO L858 garLoopResultBuilder]: For program point L503-16(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,769 INFO L858 garLoopResultBuilder]: For program point L503-18(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,769 INFO L858 garLoopResultBuilder]: For program point L503-20(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,769 INFO L858 garLoopResultBuilder]: For program point L503-22(lines 503 509) no Hoare annotation was computed. [2021-08-29 16:15:29,770 INFO L858 garLoopResultBuilder]: For program point L176(lines 176 193) no Hoare annotation was computed. [2021-08-29 16:15:29,770 INFO L854 garLoopResultBuilder]: At program point L176-1(lines 1 1030) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse4 (= ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1 0)) (.cse5 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 1) .cse3 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse3) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse7) (and .cse0 .cse1 .cse4 .cse5 .cse6 .cse3 .cse7))) [2021-08-29 16:15:29,770 INFO L858 garLoopResultBuilder]: For program point L176-2(lines 176 193) no Hoare annotation was computed. [2021-08-29 16:15:29,770 INFO L854 garLoopResultBuilder]: At program point L176-3(lines 1 1030) the Hoare annotation is: false [2021-08-29 16:15:29,770 INFO L858 garLoopResultBuilder]: For program point L176-4(lines 176 193) no Hoare annotation was computed. [2021-08-29 16:15:29,770 INFO L854 garLoopResultBuilder]: At program point L176-5(lines 1 1030) the Hoare annotation is: false [2021-08-29 16:15:29,770 INFO L858 garLoopResultBuilder]: For program point L441(lines 441 458) no Hoare annotation was computed. [2021-08-29 16:15:29,771 INFO L858 garLoopResultBuilder]: For program point L441-1(lines 441 458) no Hoare annotation was computed. [2021-08-29 16:15:29,771 INFO L858 garLoopResultBuilder]: For program point L441-2(lines 441 458) no Hoare annotation was computed. [2021-08-29 16:15:29,771 INFO L858 garLoopResultBuilder]: For program point L441-3(lines 441 458) no Hoare annotation was computed. [2021-08-29 16:15:29,771 INFO L858 garLoopResultBuilder]: For program point L441-4(lines 441 458) no Hoare annotation was computed. [2021-08-29 16:15:29,771 INFO L858 garLoopResultBuilder]: For program point L441-5(lines 441 458) no Hoare annotation was computed. [2021-08-29 16:15:29,771 INFO L854 garLoopResultBuilder]: At program point L246(lines 241 249) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 1) .cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse3) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 .cse3))) [2021-08-29 16:15:29,772 INFO L854 garLoopResultBuilder]: At program point L246-1(lines 241 249) the Hoare annotation is: (and (= ULTIMATE.start_main_~tmp~0 1) (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ~pumpRunning~0 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| 1) (not (= 0 ~systemActive~0))) [2021-08-29 16:15:29,772 INFO L854 garLoopResultBuilder]: At program point L246-2(lines 241 249) the Hoare annotation is: (and (= ULTIMATE.start_main_~tmp~0 1) (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ~pumpRunning~0 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| 1) (not (= 0 ~systemActive~0))) [2021-08-29 16:15:29,772 INFO L858 garLoopResultBuilder]: For program point L180(lines 180 190) no Hoare annotation was computed. [2021-08-29 16:15:29,772 INFO L854 garLoopResultBuilder]: At program point L246-3(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,772 INFO L854 garLoopResultBuilder]: At program point L246-4(lines 241 249) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 1) .cse3 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse4) (and .cse0 .cse1 .cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse3 .cse4))) [2021-08-29 16:15:29,772 INFO L858 garLoopResultBuilder]: For program point L180-2(lines 180 190) no Hoare annotation was computed. [2021-08-29 16:15:29,773 INFO L854 garLoopResultBuilder]: At program point L246-5(lines 241 249) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1))) (or (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 1) .cse3 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 .cse4 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse3))) [2021-08-29 16:15:29,773 INFO L854 garLoopResultBuilder]: At program point L246-6(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,773 INFO L858 garLoopResultBuilder]: For program point L180-4(lines 180 190) no Hoare annotation was computed. [2021-08-29 16:15:29,773 INFO L854 garLoopResultBuilder]: At program point L246-7(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,773 INFO L854 garLoopResultBuilder]: At program point L246-8(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,773 INFO L854 garLoopResultBuilder]: At program point L246-9(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,773 INFO L854 garLoopResultBuilder]: At program point L246-10(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,774 INFO L854 garLoopResultBuilder]: At program point L246-11(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,774 INFO L854 garLoopResultBuilder]: At program point L246-12(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,774 INFO L854 garLoopResultBuilder]: At program point L246-13(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,774 INFO L854 garLoopResultBuilder]: At program point L246-14(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,774 INFO L854 garLoopResultBuilder]: At program point L246-15(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,774 INFO L854 garLoopResultBuilder]: At program point L246-16(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,774 INFO L854 garLoopResultBuilder]: At program point L246-17(lines 241 249) the Hoare annotation is: false [2021-08-29 16:15:29,775 INFO L858 garLoopResultBuilder]: For program point L445(lines 445 453) no Hoare annotation was computed. [2021-08-29 16:15:29,775 INFO L858 garLoopResultBuilder]: For program point L445-1(lines 445 453) no Hoare annotation was computed. [2021-08-29 16:15:29,775 INFO L858 garLoopResultBuilder]: For program point L445-2(lines 445 453) no Hoare annotation was computed. [2021-08-29 16:15:29,775 INFO L858 garLoopResultBuilder]: For program point L445-3(lines 445 453) no Hoare annotation was computed. [2021-08-29 16:15:29,775 INFO L858 garLoopResultBuilder]: For program point L445-4(lines 445 453) no Hoare annotation was computed. [2021-08-29 16:15:29,775 INFO L858 garLoopResultBuilder]: For program point L445-5(lines 445 453) no Hoare annotation was computed. [2021-08-29 16:15:29,775 INFO L858 garLoopResultBuilder]: For program point L181(lines 181 187) no Hoare annotation was computed. [2021-08-29 16:15:29,776 INFO L858 garLoopResultBuilder]: For program point L181-2(lines 181 187) no Hoare annotation was computed. [2021-08-29 16:15:29,776 INFO L858 garLoopResultBuilder]: For program point L181-4(lines 181 187) no Hoare annotation was computed. [2021-08-29 16:15:29,776 INFO L854 garLoopResultBuilder]: At program point L383(lines 382 401) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse6 .cse3) (and .cse0 .cse1 .cse6 .cse3 .cse4))) [2021-08-29 16:15:29,776 INFO L858 garLoopResultBuilder]: For program point L383-1(lines 383 389) no Hoare annotation was computed. [2021-08-29 16:15:29,776 INFO L854 garLoopResultBuilder]: At program point L383-2(lines 382 401) the Hoare annotation is: false [2021-08-29 16:15:29,776 INFO L854 garLoopResultBuilder]: At program point L383-3(lines 382 401) the Hoare annotation is: false [2021-08-29 16:15:29,776 INFO L858 garLoopResultBuilder]: For program point L318(lines 317 364) no Hoare annotation was computed. [2021-08-29 16:15:29,777 INFO L854 garLoopResultBuilder]: At program point L54-2(lines 54 68) the Hoare annotation is: false [2021-08-29 16:15:29,777 INFO L858 garLoopResultBuilder]: For program point L319(lines 319 323) no Hoare annotation was computed. [2021-08-29 16:15:29,777 INFO L858 garLoopResultBuilder]: For program point L55(line 55) no Hoare annotation was computed. [2021-08-29 16:15:29,777 INFO L858 garLoopResultBuilder]: For program point L586(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,777 INFO L858 garLoopResultBuilder]: For program point L586-2(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,777 INFO L858 garLoopResultBuilder]: For program point L586-3(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,777 INFO L858 garLoopResultBuilder]: For program point L586-5(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,777 INFO L858 garLoopResultBuilder]: For program point L586-6(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,778 INFO L858 garLoopResultBuilder]: For program point L586-8(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,778 INFO L858 garLoopResultBuilder]: For program point L586-9(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,778 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-08-29 16:15:29,778 INFO L858 garLoopResultBuilder]: For program point L586-11(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,778 INFO L858 garLoopResultBuilder]: For program point L586-12(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,778 INFO L858 garLoopResultBuilder]: For program point L586-14(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,778 INFO L858 garLoopResultBuilder]: For program point L586-15(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,778 INFO L858 garLoopResultBuilder]: For program point L58(lines 58 62) no Hoare annotation was computed. [2021-08-29 16:15:29,779 INFO L858 garLoopResultBuilder]: For program point L586-17(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,779 INFO L858 garLoopResultBuilder]: For program point L58-1(lines 383 389) no Hoare annotation was computed. [2021-08-29 16:15:29,779 INFO L858 garLoopResultBuilder]: For program point L586-18(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,779 INFO L858 garLoopResultBuilder]: For program point L586-20(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,779 INFO L858 garLoopResultBuilder]: For program point L586-21(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,779 INFO L858 garLoopResultBuilder]: For program point L586-23(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,779 INFO L858 garLoopResultBuilder]: For program point L586-24(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,780 INFO L858 garLoopResultBuilder]: For program point L586-26(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,780 INFO L858 garLoopResultBuilder]: For program point L586-27(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,780 INFO L854 garLoopResultBuilder]: At program point L653(lines 1 1030) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-08-29 16:15:29,780 INFO L858 garLoopResultBuilder]: For program point L586-29(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,780 INFO L858 garLoopResultBuilder]: For program point L586-30(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,780 INFO L858 garLoopResultBuilder]: For program point L586-32(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,780 INFO L858 garLoopResultBuilder]: For program point L586-33(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,781 INFO L858 garLoopResultBuilder]: For program point L586-35(lines 586 590) no Hoare annotation was computed. [2021-08-29 16:15:29,781 INFO L854 garLoopResultBuilder]: At program point L390(lines 390 396) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse3 .cse4 (not (= 0 ~systemActive~0))) (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 1) .cse4))) [2021-08-29 16:15:29,781 INFO L854 garLoopResultBuilder]: At program point L390-1(lines 390 396) the Hoare annotation is: false [2021-08-29 16:15:29,781 INFO L854 garLoopResultBuilder]: At program point L390-2(lines 390 396) the Hoare annotation is: false [2021-08-29 16:15:29,781 INFO L858 garLoopResultBuilder]: For program point L327(lines 327 333) no Hoare annotation was computed. [2021-08-29 16:15:29,781 INFO L854 garLoopResultBuilder]: At program point L327-1(lines 327 333) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse4 (= ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1 0)) (.cse5 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 1) .cse3 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse3) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse7) (and .cse0 .cse1 .cse4 .cse5 .cse6 .cse3 .cse7))) [2021-08-29 16:15:29,782 INFO L854 garLoopResultBuilder]: At program point L592(lines 577 595) the Hoare annotation is: (and (= ULTIMATE.start_main_~tmp~0 1) (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ~pumpRunning~0 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| 1) (not (= 0 ~systemActive~0))) [2021-08-29 16:15:29,782 INFO L854 garLoopResultBuilder]: At program point L592-1(lines 577 595) the Hoare annotation is: (and (= ULTIMATE.start_main_~tmp~0 1) (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ~pumpRunning~0 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| 1) (not (= 0 ~systemActive~0))) [2021-08-29 16:15:29,782 INFO L854 garLoopResultBuilder]: At program point L592-2(lines 577 595) the Hoare annotation is: false [2021-08-29 16:15:29,782 INFO L854 garLoopResultBuilder]: At program point L592-3(lines 577 595) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 1) .cse3 .cse4) (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 0) .cse3 .cse4))) [2021-08-29 16:15:29,782 INFO L854 garLoopResultBuilder]: At program point L592-4(lines 577 595) the Hoare annotation is: false [2021-08-29 16:15:29,782 INFO L854 garLoopResultBuilder]: At program point L592-5(lines 577 595) the Hoare annotation is: false [2021-08-29 16:15:29,782 INFO L854 garLoopResultBuilder]: At program point L592-6(lines 577 595) the Hoare annotation is: false [2021-08-29 16:15:29,783 INFO L854 garLoopResultBuilder]: At program point L592-7(lines 577 595) the Hoare annotation is: false [2021-08-29 16:15:29,783 INFO L854 garLoopResultBuilder]: At program point L592-8(lines 577 595) the Hoare annotation is: false [2021-08-29 16:15:29,783 INFO L854 garLoopResultBuilder]: At program point L592-9(lines 577 595) the Hoare annotation is: false [2021-08-29 16:15:29,783 INFO L854 garLoopResultBuilder]: At program point L592-10(lines 577 595) the Hoare annotation is: false [2021-08-29 16:15:29,783 INFO L854 garLoopResultBuilder]: At program point L592-11(lines 577 595) the Hoare annotation is: false [2021-08-29 16:15:29,783 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-08-29 16:15:29,783 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 152) no Hoare annotation was computed. [2021-08-29 16:15:29,784 INFO L854 garLoopResultBuilder]: At program point L528(lines 521 531) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 .cse3) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneAlarm_#res| 1) (= ~methaneLevelCritical~0 1) .cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse3))) [2021-08-29 16:15:29,784 INFO L854 garLoopResultBuilder]: At program point L528-1(lines 521 531) the Hoare annotation is: (and (= ULTIMATE.start_main_~tmp~0 1) (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ~pumpRunning~0 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| 1) (not (= 0 ~systemActive~0))) [2021-08-29 16:15:29,784 INFO L854 garLoopResultBuilder]: At program point L528-2(lines 521 531) the Hoare annotation is: (and (= ULTIMATE.start_main_~tmp~0 1) (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ~pumpRunning~0 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| 1) (not (= 0 ~systemActive~0))) [2021-08-29 16:15:29,784 INFO L854 garLoopResultBuilder]: At program point L528-3(lines 521 531) the Hoare annotation is: false [2021-08-29 16:15:29,784 INFO L854 garLoopResultBuilder]: At program point L528-4(lines 521 531) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse3 .cse4) (and .cse0 .cse1 .cse2 (= |ULTIMATE.start_isMethaneAlarm_#res| 1) (= ~methaneLevelCritical~0 1) .cse3 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse4))) [2021-08-29 16:15:29,784 INFO L854 garLoopResultBuilder]: At program point L528-5(lines 521 531) the Hoare annotation is: false [2021-08-29 16:15:29,785 INFO L854 garLoopResultBuilder]: At program point L528-6(lines 521 531) the Hoare annotation is: false [2021-08-29 16:15:29,785 INFO L854 garLoopResultBuilder]: At program point L528-7(lines 521 531) the Hoare annotation is: false [2021-08-29 16:15:29,785 INFO L854 garLoopResultBuilder]: At program point L528-8(lines 521 531) the Hoare annotation is: false [2021-08-29 16:15:29,785 INFO L854 garLoopResultBuilder]: At program point L528-9(lines 521 531) the Hoare annotation is: false [2021-08-29 16:15:29,785 INFO L854 garLoopResultBuilder]: At program point L528-10(lines 521 531) the Hoare annotation is: false [2021-08-29 16:15:29,785 INFO L854 garLoopResultBuilder]: At program point L528-11(lines 521 531) the Hoare annotation is: false [2021-08-29 16:15:29,785 INFO L854 garLoopResultBuilder]: At program point L528-12(lines 521 531) the Hoare annotation is: false [2021-08-29 16:15:29,786 INFO L854 garLoopResultBuilder]: At program point L528-13(lines 521 531) the Hoare annotation is: false [2021-08-29 16:15:29,786 INFO L854 garLoopResultBuilder]: At program point L528-14(lines 521 531) the Hoare annotation is: false [2021-08-29 16:15:29,786 INFO L854 garLoopResultBuilder]: At program point L661(lines 656 664) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res| 1) (= ~waterLevel~0 1)) [2021-08-29 16:15:29,786 INFO L858 garLoopResultBuilder]: For program point L134(lines 134 141) no Hoare annotation was computed. [2021-08-29 16:15:29,786 INFO L861 garLoopResultBuilder]: At program point L134-1(lines 134 141) the Hoare annotation is: true [2021-08-29 16:15:29,786 INFO L858 garLoopResultBuilder]: For program point L467(lines 467 484) no Hoare annotation was computed. [2021-08-29 16:15:29,786 INFO L858 garLoopResultBuilder]: For program point L467-1(lines 467 484) no Hoare annotation was computed. [2021-08-29 16:15:29,786 INFO L858 garLoopResultBuilder]: For program point L467-2(lines 467 484) no Hoare annotation was computed. [2021-08-29 16:15:29,787 INFO L858 garLoopResultBuilder]: For program point L337(lines 337 343) no Hoare annotation was computed. [2021-08-29 16:15:29,787 INFO L854 garLoopResultBuilder]: At program point L337-1(lines 337 343) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse6 .cse3) (and .cse0 .cse1 .cse6 .cse3 .cse4))) [2021-08-29 16:15:29,787 INFO L854 garLoopResultBuilder]: At program point L537(lines 532 540) the Hoare annotation is: (and (= ULTIMATE.start_main_~tmp~0 1) (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ~pumpRunning~0 0) (= |ULTIMATE.start_isPumpRunning_#res| 0) (= ~methaneLevelCritical~0 1) (= |ULTIMATE.start_valid_product_#res| 1) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) [2021-08-29 16:15:29,787 INFO L854 garLoopResultBuilder]: At program point L537-1(lines 532 540) the Hoare annotation is: false [2021-08-29 16:15:29,787 INFO L858 garLoopResultBuilder]: For program point L471(lines 471 479) no Hoare annotation was computed. [2021-08-29 16:15:29,787 INFO L854 garLoopResultBuilder]: At program point L537-2(lines 532 540) the Hoare annotation is: false [2021-08-29 16:15:29,788 INFO L858 garLoopResultBuilder]: For program point L471-1(lines 471 479) no Hoare annotation was computed. [2021-08-29 16:15:29,788 INFO L858 garLoopResultBuilder]: For program point L471-2(lines 471 479) no Hoare annotation was computed. [2021-08-29 16:15:29,788 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 152) no Hoare annotation was computed. [2021-08-29 16:15:29,788 INFO L858 garLoopResultBuilder]: For program point L605(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,788 INFO L858 garLoopResultBuilder]: For program point L605-2(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,788 INFO L858 garLoopResultBuilder]: For program point L605-3(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,788 INFO L858 garLoopResultBuilder]: For program point L605-5(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,789 INFO L858 garLoopResultBuilder]: For program point L605-6(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,789 INFO L858 garLoopResultBuilder]: For program point L605-8(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,789 INFO L858 garLoopResultBuilder]: For program point L605-9(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,789 INFO L858 garLoopResultBuilder]: For program point L605-11(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,789 INFO L858 garLoopResultBuilder]: For program point L209(lines 209 213) no Hoare annotation was computed. [2021-08-29 16:15:29,789 INFO L858 garLoopResultBuilder]: For program point L605-12(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,789 INFO L858 garLoopResultBuilder]: For program point L605-14(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,789 INFO L861 garLoopResultBuilder]: At program point L143(lines 124 146) the Hoare annotation is: true [2021-08-29 16:15:29,790 INFO L858 garLoopResultBuilder]: For program point L209-3(lines 209 213) no Hoare annotation was computed. [2021-08-29 16:15:29,790 INFO L858 garLoopResultBuilder]: For program point L605-15(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,790 INFO L858 garLoopResultBuilder]: For program point L605-17(lines 605 609) no Hoare annotation was computed. [2021-08-29 16:15:29,790 INFO L858 garLoopResultBuilder]: For program point L209-6(lines 209 213) no Hoare annotation was computed. [2021-08-29 16:15:29,790 INFO L854 garLoopResultBuilder]: At program point L611(lines 596 614) the Hoare annotation is: (and (= ULTIMATE.start_main_~tmp~0 1) (= ULTIMATE.start_test_~splverifierCounter~0 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| 1) (not (= 0 ~systemActive~0))) [2021-08-29 16:15:29,790 INFO L854 garLoopResultBuilder]: At program point L611-1(lines 596 614) the Hoare annotation is: false [2021-08-29 16:15:29,791 INFO L854 garLoopResultBuilder]: At program point L611-2(lines 596 614) the Hoare annotation is: false [2021-08-29 16:15:29,791 INFO L854 garLoopResultBuilder]: At program point L611-3(lines 596 614) the Hoare annotation is: false [2021-08-29 16:15:29,791 INFO L854 garLoopResultBuilder]: At program point L611-4(lines 596 614) the Hoare annotation is: false [2021-08-29 16:15:29,791 INFO L854 garLoopResultBuilder]: At program point L611-5(lines 596 614) the Hoare annotation is: false [2021-08-29 16:15:29,791 INFO L858 garLoopResultBuilder]: For program point L347(lines 347 360) no Hoare annotation was computed. [2021-08-29 16:15:29,791 INFO L858 garLoopResultBuilder]: For program point L415(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,791 INFO L858 garLoopResultBuilder]: For program point L415-1(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,792 INFO L858 garLoopResultBuilder]: For program point L415-2(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,792 INFO L858 garLoopResultBuilder]: For program point L415-3(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,792 INFO L858 garLoopResultBuilder]: For program point L415-4(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,792 INFO L858 garLoopResultBuilder]: For program point L415-5(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,792 INFO L858 garLoopResultBuilder]: For program point L415-6(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,792 INFO L858 garLoopResultBuilder]: For program point L415-7(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,792 INFO L858 garLoopResultBuilder]: For program point L415-8(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,793 INFO L858 garLoopResultBuilder]: For program point L415-9(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,793 INFO L858 garLoopResultBuilder]: For program point L415-10(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,793 INFO L858 garLoopResultBuilder]: For program point L415-11(lines 415 432) no Hoare annotation was computed. [2021-08-29 16:15:29,793 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-08-29 16:15:29,793 INFO L858 garLoopResultBuilder]: For program point L152(line 152) no Hoare annotation was computed. [2021-08-29 16:15:29,793 INFO L858 garLoopResultBuilder]: For program point L152-1(line 152) no Hoare annotation was computed. [2021-08-29 16:15:29,793 INFO L858 garLoopResultBuilder]: For program point L152-2(line 152) no Hoare annotation was computed. [2021-08-29 16:15:29,793 INFO L858 garLoopResultBuilder]: For program point L286(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,794 INFO L858 garLoopResultBuilder]: For program point L286-1(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,794 INFO L858 garLoopResultBuilder]: For program point L286-2(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,794 INFO L858 garLoopResultBuilder]: For program point L286-3(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,794 INFO L858 garLoopResultBuilder]: For program point L286-4(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,794 INFO L858 garLoopResultBuilder]: For program point L286-5(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,794 INFO L858 garLoopResultBuilder]: For program point L286-6(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,794 INFO L858 garLoopResultBuilder]: For program point L286-7(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,795 INFO L858 garLoopResultBuilder]: For program point L286-8(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,795 INFO L858 garLoopResultBuilder]: For program point L286-9(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,795 INFO L858 garLoopResultBuilder]: For program point L286-10(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,795 INFO L858 garLoopResultBuilder]: For program point L286-11(lines 286 292) no Hoare annotation was computed. [2021-08-29 16:15:29,795 INFO L858 garLoopResultBuilder]: For program point L419(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,795 INFO L858 garLoopResultBuilder]: For program point L419-1(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,795 INFO L858 garLoopResultBuilder]: For program point L353(lines 353 359) no Hoare annotation was computed. [2021-08-29 16:15:29,795 INFO L858 garLoopResultBuilder]: For program point L419-2(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,796 INFO L854 garLoopResultBuilder]: At program point L353-1(lines 383 389) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse6 .cse3) (and .cse0 .cse1 .cse6 .cse3 .cse4))) [2021-08-29 16:15:29,796 INFO L858 garLoopResultBuilder]: For program point L419-3(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,796 INFO L858 garLoopResultBuilder]: For program point L419-4(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,796 INFO L858 garLoopResultBuilder]: For program point L419-5(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,796 INFO L858 garLoopResultBuilder]: For program point L221(lines 221 225) no Hoare annotation was computed. [2021-08-29 16:15:29,796 INFO L858 garLoopResultBuilder]: For program point L419-6(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,796 INFO L858 garLoopResultBuilder]: For program point L419-7(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,797 INFO L858 garLoopResultBuilder]: For program point L419-8(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,797 INFO L858 garLoopResultBuilder]: For program point L419-9(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,797 INFO L858 garLoopResultBuilder]: For program point L419-10(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,797 INFO L858 garLoopResultBuilder]: For program point L419-11(lines 419 427) no Hoare annotation was computed. [2021-08-29 16:15:29,797 INFO L858 garLoopResultBuilder]: For program point L619(lines 619 625) no Hoare annotation was computed. [2021-08-29 16:15:29,797 INFO L854 garLoopResultBuilder]: At program point L619-1(lines 619 625) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1))) (or (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 0) .cse3) (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 1) .cse3))) [2021-08-29 16:15:29,797 INFO L854 garLoopResultBuilder]: At program point L291(lines 282 295) the Hoare annotation is: (and (= ULTIMATE.start_main_~tmp~0 1) (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ~pumpRunning~0 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| 1) (not (= 0 ~systemActive~0))) [2021-08-29 16:15:29,797 INFO L854 garLoopResultBuilder]: At program point L291-1(lines 282 295) the Hoare annotation is: (and (= ULTIMATE.start_main_~tmp~0 1) (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ~pumpRunning~0 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| 1) (not (= 0 ~systemActive~0))) [2021-08-29 16:15:29,797 INFO L854 garLoopResultBuilder]: At program point L291-2(lines 282 295) the Hoare annotation is: false [2021-08-29 16:15:29,798 INFO L854 garLoopResultBuilder]: At program point L291-3(lines 282 295) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_main_~tmp~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 1) .cse3 .cse4) (and .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 0) .cse3 .cse4))) [2021-08-29 16:15:29,798 INFO L854 garLoopResultBuilder]: At program point L291-4(lines 282 295) the Hoare annotation is: false [2021-08-29 16:15:29,798 INFO L854 garLoopResultBuilder]: At program point L291-5(lines 282 295) the Hoare annotation is: false [2021-08-29 16:15:29,798 INFO L854 garLoopResultBuilder]: At program point L291-6(lines 282 295) the Hoare annotation is: false [2021-08-29 16:15:29,798 INFO L854 garLoopResultBuilder]: At program point L291-7(lines 282 295) the Hoare annotation is: false [2021-08-29 16:15:29,798 INFO L854 garLoopResultBuilder]: At program point L291-8(lines 282 295) the Hoare annotation is: false [2021-08-29 16:15:29,798 INFO L854 garLoopResultBuilder]: At program point L291-9(lines 282 295) the Hoare annotation is: false [2021-08-29 16:15:29,798 INFO L854 garLoopResultBuilder]: At program point L291-10(lines 282 295) the Hoare annotation is: false [2021-08-29 16:15:29,798 INFO L854 garLoopResultBuilder]: At program point L291-11(lines 282 295) the Hoare annotation is: false [2021-08-29 16:15:29,798 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-08-29 16:15:29,798 INFO L854 garLoopResultBuilder]: At program point L165(lines 160 167) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res| 1) (= ~waterLevel~0 1) (= ULTIMATE.start_main_~tmp~0 ~systemActive~0)) [2021-08-29 16:15:29,798 INFO L854 garLoopResultBuilder]: At program point L365(lines 316 366) the Hoare annotation is: false [2021-08-29 16:15:29,798 INFO L858 garLoopResultBuilder]: For program point L233(lines 233 237) no Hoare annotation was computed. [2021-08-29 16:15:29,802 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-08-29 16:15:29,829 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.08 04:15:29 BoogieIcfgContainer [2021-08-29 16:15:29,829 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-08-29 16:15:29,830 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-08-29 16:15:29,830 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-08-29 16:15:29,830 INFO L275 PluginConnector]: Witness Printer initialized [2021-08-29 16:15:29,830 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.08 04:15:17" (3/4) ... [2021-08-29 16:15:29,833 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-08-29 16:15:29,855 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 41 nodes and edges [2021-08-29 16:15:29,857 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2021-08-29 16:15:29,858 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2021-08-29 16:15:29,860 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-08-29 16:15:29,861 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-08-29 16:15:29,862 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-08-29 16:15:29,864 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-08-29 16:15:29,884 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1 [2021-08-29 16:15:29,884 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1) && tmp == systemActive [2021-08-29 16:15:29,885 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1) && tmp == systemActive [2021-08-29 16:15:29,885 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1) || ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1)) || (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive))) || ((((((tmp == 1 && splverifierCounter == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) [2021-08-29 16:15:29,885 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1) || ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1)) || (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive))) || ((((((tmp == 1 && splverifierCounter == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) [2021-08-29 16:15:29,886 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 1) && \result == 1) && !(0 == systemActive)) [2021-08-29 16:15:29,887 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 1) && \result == 1) && !(0 == systemActive)) [2021-08-29 16:15:29,887 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 1) && \result == 1) && !(0 == systemActive)) [2021-08-29 16:15:29,887 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) || (((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive))) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) [2021-08-29 16:15:29,888 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) [2021-08-29 16:15:29,889 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1) || (((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive))) || (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) [2021-08-29 16:15:29,891 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1) && !(0 == systemActive)) || (((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) [2021-08-29 16:15:29,897 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) || ((((((tmp == 1 && splverifierCounter == 0) && \result == 1) && methaneLevelCritical == 1) && \result == 1) && \result == 1) && !(0 == systemActive)) [2021-08-29 16:15:29,897 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1 [2021-08-29 16:15:29,898 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && !(0 == systemActive)) || (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) [2021-08-29 16:15:29,900 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && !(0 == systemActive)) || (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) [2021-08-29 16:15:29,901 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) [2021-08-29 16:15:29,901 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) [2021-08-29 16:15:29,901 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) [2021-08-29 16:15:29,902 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1) && !(0 == systemActive)) || ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) [2021-08-29 16:15:29,902 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) [2021-08-29 16:15:29,902 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) || (((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 1) && methaneLevelCritical == 1) && \result == 1) && \result == 1) && !(0 == systemActive)) [2021-08-29 16:15:29,903 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) [2021-08-29 16:15:29,903 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) [2021-08-29 16:15:29,903 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) [2021-08-29 16:15:29,903 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) [2021-08-29 16:15:29,904 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) [2021-08-29 16:15:29,904 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) [2021-08-29 16:15:29,979 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-08-29 16:15:29,979 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-08-29 16:15:29,979 INFO L158 Benchmark]: Toolchain (without parser) took 14225.34ms. Allocated memory was 54.5MB in the beginning and 184.5MB in the end (delta: 130.0MB). Free memory was 31.7MB in the beginning and 65.4MB in the end (delta: -33.7MB). Peak memory consumption was 97.7MB. Max. memory is 16.1GB. [2021-08-29 16:15:29,979 INFO L158 Benchmark]: CDTParser took 0.42ms. Allocated memory is still 54.5MB. Free memory was 36.1MB in the beginning and 36.1MB in the end (delta: 81.6kB). There was no memory consumed. Max. memory is 16.1GB. [2021-08-29 16:15:29,980 INFO L158 Benchmark]: CACSL2BoogieTranslator took 445.48ms. Allocated memory is still 54.5MB. Free memory was 31.5MB in the beginning and 28.4MB in the end (delta: 3.1MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2021-08-29 16:15:29,980 INFO L158 Benchmark]: Boogie Procedure Inliner took 76.49ms. Allocated memory is still 54.5MB. Free memory was 28.2MB in the beginning and 22.3MB in the end (delta: 5.9MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-08-29 16:15:29,981 INFO L158 Benchmark]: Boogie Preprocessor took 91.52ms. Allocated memory was 54.5MB in the beginning and 67.1MB in the end (delta: 12.6MB). Free memory was 22.3MB in the beginning and 45.0MB in the end (delta: -22.6MB). Peak memory consumption was 6.7MB. Max. memory is 16.1GB. [2021-08-29 16:15:29,981 INFO L158 Benchmark]: RCFGBuilder took 675.22ms. Allocated memory is still 67.1MB. Free memory was 45.0MB in the beginning and 32.5MB in the end (delta: 12.5MB). Peak memory consumption was 22.4MB. Max. memory is 16.1GB. [2021-08-29 16:15:29,981 INFO L158 Benchmark]: TraceAbstraction took 12780.51ms. Allocated memory was 67.1MB in the beginning and 184.5MB in the end (delta: 117.4MB). Free memory was 32.1MB in the beginning and 85.5MB in the end (delta: -53.4MB). Peak memory consumption was 98.0MB. Max. memory is 16.1GB. [2021-08-29 16:15:29,981 INFO L158 Benchmark]: Witness Printer took 149.31ms. Allocated memory is still 184.5MB. Free memory was 85.5MB in the beginning and 65.4MB in the end (delta: 20.1MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2021-08-29 16:15:29,983 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.42ms. Allocated memory is still 54.5MB. Free memory was 36.1MB in the beginning and 36.1MB in the end (delta: 81.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 445.48ms. Allocated memory is still 54.5MB. Free memory was 31.5MB in the beginning and 28.4MB in the end (delta: 3.1MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 76.49ms. Allocated memory is still 54.5MB. Free memory was 28.2MB in the beginning and 22.3MB in the end (delta: 5.9MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 91.52ms. Allocated memory was 54.5MB in the beginning and 67.1MB in the end (delta: 12.6MB). Free memory was 22.3MB in the beginning and 45.0MB in the end (delta: -22.6MB). Peak memory consumption was 6.7MB. Max. memory is 16.1GB. * RCFGBuilder took 675.22ms. Allocated memory is still 67.1MB. Free memory was 45.0MB in the beginning and 32.5MB in the end (delta: 12.5MB). Peak memory consumption was 22.4MB. Max. memory is 16.1GB. * TraceAbstraction took 12780.51ms. Allocated memory was 67.1MB in the beginning and 184.5MB in the end (delta: 117.4MB). Free memory was 32.1MB in the beginning and 85.5MB in the end (delta: -53.4MB). Peak memory consumption was 98.0MB. Max. memory is 16.1GB. * Witness Printer took 149.31ms. Allocated memory is still 184.5MB. Free memory was 85.5MB in the beginning and 65.4MB in the end (delta: 20.1MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.00ms ErrorAutomatonConstructionTimeTotal, 0.00ms FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.00ms ErrorAutomatonConstructionTimeAvg, 0.00ms ErrorAutomatonDifferenceTimeAvg, 0.00ms ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 152]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 152]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 152]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 231 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 12687.19ms, OverallIterations: 11, TraceHistogramMax: 2, EmptinessCheckTime: 26.21ms, AutomataDifference: 5203.50ms, DeadEndRemovalTime: 0.00ms, HoareAnnotationTime: 6187.74ms, InitialAbstractionConstructionTime: 16.11ms, PartialOrderReductionTime: 0.00ms, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2838 SdHoareTripleChecker+Valid, 4291.20ms IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2838 mSDsluCounter, 0 SdHoareTripleChecker+Invalid, 3322.48ms Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3343 mSDsCounter, 97 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5625 IncrementalHoareTripleChecker+Invalid, 5722 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 97 mSolverCounterUnsat, 0 mSDtfsCounter, 5625 mSolverCounterSat, 37.58ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 95 GetRequests, 35 SyntacticMatches, 0 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 61 ImplicationChecksByTransitivity, 257.82ms Time, 0.00ms BasicInterpolantAutomatonTime, BiggestAbstraction: size=324occurred in iteration=9, InterpolantAutomatonStates: 73, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.00ms DumpTime, AutomataMinimizationStatistics: 215.98ms AutomataMinimizationTime, 11 MinimizatonAttempts, 1445 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.00ms HoareAnnotationTime, 93 LocationsWithAnnotation, 93 PreInvPairs, 355 NumberOfFragments, 1157 HoareAnnotationTreeSize, 93 FomulaSimplifications, 957371 FormulaSimplificationTreeSizeReduction, 1789.45ms HoareSimplificationTime, 93 FomulaSimplificationsInter, 957735 FormulaSimplificationTreeSizeReductionInter, 4376.88ms HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 39.23ms SsaConstructionTime, 244.60ms SatisfiabilityAnalysisTime, 529.71ms InterpolantComputationTime, 355 NumberOfCodeBlocks, 355 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 344 ConstructedInterpolants, 0 QuantifiedInterpolants, 626 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 11 InterpolantComputations, 11 PerfectInterpolantSequences, 14/14 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) || (((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 1) && methaneLevelCritical == 1) && \result == 1) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 619]: Loop Invariant Derived loop invariant: ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 596]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && !(0 == systemActive)) || (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 596]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 532]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 532]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: ((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 382]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1) || ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1)) || (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive))) || ((((((tmp == 1 && splverifierCounter == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) || (((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive))) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 596]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1) && !(0 == systemActive)) || ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 596]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 532]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 124]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 382]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && !(0 == systemActive)) || (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) - InvariantResult [Line: 327]: Loop Invariant Derived loop invariant: (((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1) || ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1)) || (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive))) || ((((((tmp == 1 && splverifierCounter == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) || ((((((tmp == 1 && splverifierCounter == 0) && \result == 1) && methaneLevelCritical == 1) && \result == 1) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 596]: Loop Invariant Derived loop invariant: ((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 596]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 382]: Loop Invariant Derived loop invariant: ((((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 1) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 383]: Loop Invariant Derived loop invariant: ((((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 1) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive) - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: (((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1) && !(0 == systemActive)) || (((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 337]: Loop Invariant Derived loop invariant: ((((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1)) || ((((tmp == 1 && splverifierCounter == 0) && methaneLevelCritical == 1) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: ((((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 1) && \result == 1) && \result == 1) || (((((tmp == 1 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) && !(0 == systemActive))) || (((((tmp == 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && \result == 1) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2021-08-29 16:15:30,032 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...