./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5fbdf5bf Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 115416f6b9263aced1374dbb9cce15bd25dca014 ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-wip.dd.seqcomp-5fbdf5b [2021-08-29 16:15:45,977 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-08-29 16:15:45,979 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-08-29 16:15:46,012 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-08-29 16:15:46,012 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-08-29 16:15:46,015 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-08-29 16:15:46,016 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-08-29 16:15:46,020 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-08-29 16:15:46,022 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-08-29 16:15:46,029 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-08-29 16:15:46,030 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-08-29 16:15:46,033 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-08-29 16:15:46,033 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-08-29 16:15:46,035 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-08-29 16:15:46,036 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-08-29 16:15:46,039 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-08-29 16:15:46,040 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-08-29 16:15:46,040 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-08-29 16:15:46,042 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-08-29 16:15:46,045 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-08-29 16:15:46,047 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-08-29 16:15:46,047 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-08-29 16:15:46,048 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-08-29 16:15:46,049 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-08-29 16:15:46,053 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-08-29 16:15:46,053 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-08-29 16:15:46,053 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-08-29 16:15:46,054 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-08-29 16:15:46,054 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-08-29 16:15:46,055 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-08-29 16:15:46,055 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-08-29 16:15:46,056 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-08-29 16:15:46,057 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-08-29 16:15:46,057 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-08-29 16:15:46,058 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-08-29 16:15:46,059 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-08-29 16:15:46,059 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-08-29 16:15:46,059 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-08-29 16:15:46,060 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-08-29 16:15:46,061 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-08-29 16:15:46,061 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-08-29 16:15:46,062 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-08-29 16:15:46,092 INFO L113 SettingsManager]: Loading preferences was successful [2021-08-29 16:15:46,092 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-08-29 16:15:46,093 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-08-29 16:15:46,093 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-08-29 16:15:46,095 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-08-29 16:15:46,095 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-08-29 16:15:46,095 INFO L138 SettingsManager]: * Use SBE=true [2021-08-29 16:15:46,095 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-08-29 16:15:46,095 INFO L138 SettingsManager]: * sizeof long=4 [2021-08-29 16:15:46,095 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-08-29 16:15:46,096 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-08-29 16:15:46,096 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-08-29 16:15:46,096 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-08-29 16:15:46,096 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-08-29 16:15:46,096 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-08-29 16:15:46,097 INFO L138 SettingsManager]: * sizeof long double=12 [2021-08-29 16:15:46,097 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-08-29 16:15:46,097 INFO L138 SettingsManager]: * Use constant arrays=true [2021-08-29 16:15:46,097 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-08-29 16:15:46,097 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-08-29 16:15:46,097 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-08-29 16:15:46,097 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-08-29 16:15:46,098 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-08-29 16:15:46,098 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-08-29 16:15:46,098 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-08-29 16:15:46,098 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-08-29 16:15:46,098 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-08-29 16:15:46,098 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-08-29 16:15:46,098 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-08-29 16:15:46,099 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-08-29 16:15:46,099 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 115416f6b9263aced1374dbb9cce15bd25dca014 [2021-08-29 16:15:46,479 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-08-29 16:15:46,503 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-08-29 16:15:46,505 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-08-29 16:15:46,506 INFO L271 PluginConnector]: Initializing CDTParser... [2021-08-29 16:15:46,506 INFO L275 PluginConnector]: CDTParser initialized [2021-08-29 16:15:46,507 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c [2021-08-29 16:15:46,549 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3622d13f8/50cf97d7038a4c8e9559cddc943d7406/FLAG4dc810236 [2021-08-29 16:15:46,907 INFO L306 CDTParser]: Found 1 translation units. [2021-08-29 16:15:46,907 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c [2021-08-29 16:15:46,931 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3622d13f8/50cf97d7038a4c8e9559cddc943d7406/FLAG4dc810236 [2021-08-29 16:15:47,287 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3622d13f8/50cf97d7038a4c8e9559cddc943d7406 [2021-08-29 16:15:47,289 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-08-29 16:15:47,290 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-08-29 16:15:47,291 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-08-29 16:15:47,291 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-08-29 16:15:47,294 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-08-29 16:15:47,295 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,296 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6fb4fb8a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47, skipping insertion in model container [2021-08-29 16:15:47,296 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,301 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-08-29 16:15:47,329 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-08-29 16:15:47,449 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c[8293,8306] [2021-08-29 16:15:47,521 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-08-29 16:15:47,527 INFO L203 MainTranslator]: Completed pre-run [2021-08-29 16:15:47,550 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c[8293,8306] [2021-08-29 16:15:47,570 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-08-29 16:15:47,587 INFO L208 MainTranslator]: Completed translation [2021-08-29 16:15:47,588 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47 WrapperNode [2021-08-29 16:15:47,588 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-08-29 16:15:47,589 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-08-29 16:15:47,589 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-08-29 16:15:47,589 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-08-29 16:15:47,594 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,603 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,647 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-08-29 16:15:47,648 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-08-29 16:15:47,648 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-08-29 16:15:47,648 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-08-29 16:15:47,662 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,662 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,668 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,668 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,680 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,696 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,698 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,701 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-08-29 16:15:47,701 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-08-29 16:15:47,701 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-08-29 16:15:47,702 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-08-29 16:15:47,702 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47" (1/1) ... [2021-08-29 16:15:47,706 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-08-29 16:15:47,713 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-08-29 16:15:47,725 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-08-29 16:15:47,749 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-08-29 16:15:47,769 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-08-29 16:15:47,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-08-29 16:15:47,771 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-08-29 16:15:47,771 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-08-29 16:15:48,170 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-08-29 16:15:48,171 INFO L299 CfgBuilder]: Removed 198 assume(true) statements. [2021-08-29 16:15:48,172 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.08 04:15:48 BoogieIcfgContainer [2021-08-29 16:15:48,172 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-08-29 16:15:48,173 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-08-29 16:15:48,173 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-08-29 16:15:48,175 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-08-29 16:15:48,175 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.08 04:15:47" (1/3) ... [2021-08-29 16:15:48,175 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@46f08cd0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.08 04:15:48, skipping insertion in model container [2021-08-29 16:15:48,176 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:47" (2/3) ... [2021-08-29 16:15:48,176 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@46f08cd0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.08 04:15:48, skipping insertion in model container [2021-08-29 16:15:48,176 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.08 04:15:48" (3/3) ... [2021-08-29 16:15:48,177 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product45.cil.c [2021-08-29 16:15:48,180 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-08-29 16:15:48,180 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2021-08-29 16:15:48,209 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-08-29 16:15:48,213 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-08-29 16:15:48,214 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2021-08-29 16:15:48,229 INFO L276 IsEmpty]: Start isEmpty. Operand has 135 states, 131 states have (on average 1.534351145038168) internal successors, (201), 134 states have internal predecessors, (201), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:48,233 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2021-08-29 16:15:48,233 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:48,234 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:48,234 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:48,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:48,238 INFO L82 PathProgramCache]: Analyzing trace with hash 1981233963, now seen corresponding path program 1 times [2021-08-29 16:15:48,243 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:48,244 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1829347514] [2021-08-29 16:15:48,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:48,244 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:48,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:48,431 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:48,432 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:48,432 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1829347514] [2021-08-29 16:15:48,432 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1829347514] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:48,433 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:48,433 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-08-29 16:15:48,434 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [924319329] [2021-08-29 16:15:48,437 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-08-29 16:15:48,437 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:48,452 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-08-29 16:15:48,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-08-29 16:15:48,455 INFO L87 Difference]: Start difference. First operand has 135 states, 131 states have (on average 1.534351145038168) internal successors, (201), 134 states have internal predecessors, (201), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:48,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:48,728 INFO L93 Difference]: Finished difference Result 264 states and 395 transitions. [2021-08-29 16:15:48,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-08-29 16:15:48,730 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2021-08-29 16:15:48,730 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:48,740 INFO L225 Difference]: With dead ends: 264 [2021-08-29 16:15:48,741 INFO L226 Difference]: Without dead ends: 131 [2021-08-29 16:15:48,743 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.03ms TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-08-29 16:15:48,747 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 165.74ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 194 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.81ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 219.37ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:48,748 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 0 Invalid, 194 Unknown, 0 Unchecked, 1.81ms Time], IncrementalHoareTripleChecker [0 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 219.37ms Time] [2021-08-29 16:15:48,759 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 131 states. [2021-08-29 16:15:48,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 131 to 131. [2021-08-29 16:15:48,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 131 states, 128 states have (on average 1.4765625) internal successors, (189), 130 states have internal predecessors, (189), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:48,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 131 states to 131 states and 189 transitions. [2021-08-29 16:15:48,794 INFO L78 Accepts]: Start accepts. Automaton has 131 states and 189 transitions. Word has length 18 [2021-08-29 16:15:48,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:48,795 INFO L470 AbstractCegarLoop]: Abstraction has 131 states and 189 transitions. [2021-08-29 16:15:48,795 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:48,795 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 189 transitions. [2021-08-29 16:15:48,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-08-29 16:15:48,796 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:48,797 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:48,797 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-08-29 16:15:48,797 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:48,799 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:48,800 INFO L82 PathProgramCache]: Analyzing trace with hash 1070203210, now seen corresponding path program 1 times [2021-08-29 16:15:48,800 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:48,800 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [627996033] [2021-08-29 16:15:48,800 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:48,800 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:48,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:48,878 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:48,878 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:48,878 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [627996033] [2021-08-29 16:15:48,878 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [627996033] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:48,878 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:48,879 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-29 16:15:48,879 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [313753623] [2021-08-29 16:15:48,879 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-29 16:15:48,880 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:48,880 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-29 16:15:48,881 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:15:48,881 INFO L87 Difference]: Start difference. First operand 131 states and 189 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:48,981 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:48,981 INFO L93 Difference]: Finished difference Result 131 states and 189 transitions. [2021-08-29 16:15:48,981 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-29 16:15:48,982 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-08-29 16:15:48,982 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:48,982 INFO L225 Difference]: With dead ends: 131 [2021-08-29 16:15:48,982 INFO L226 Difference]: Without dead ends: 53 [2021-08-29 16:15:48,983 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.48ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:15:48,983 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 69 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 81 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 66.60ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.00ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 81 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 85.77ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:48,984 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [69 Valid, 0 Invalid, 81 Unknown, 0 Unchecked, 1.00ms Time], IncrementalHoareTripleChecker [0 Valid, 81 Invalid, 0 Unknown, 0 Unchecked, 85.77ms Time] [2021-08-29 16:15:48,984 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2021-08-29 16:15:48,986 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2021-08-29 16:15:48,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 52 states have (on average 1.4615384615384615) internal successors, (76), 52 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:48,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 76 transitions. [2021-08-29 16:15:48,987 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 76 transitions. Word has length 19 [2021-08-29 16:15:48,987 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:48,987 INFO L470 AbstractCegarLoop]: Abstraction has 53 states and 76 transitions. [2021-08-29 16:15:48,987 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:48,987 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 76 transitions. [2021-08-29 16:15:48,988 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-08-29 16:15:48,988 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:48,988 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:48,988 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-08-29 16:15:48,988 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:48,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:48,988 INFO L82 PathProgramCache]: Analyzing trace with hash 1049766460, now seen corresponding path program 1 times [2021-08-29 16:15:48,989 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:48,989 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [181424553] [2021-08-29 16:15:48,989 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:48,989 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:49,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:49,078 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:49,078 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:49,078 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [181424553] [2021-08-29 16:15:49,079 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [181424553] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:49,079 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:49,079 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:15:49,079 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [619323243] [2021-08-29 16:15:49,079 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-29 16:15:49,079 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:49,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-29 16:15:49,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-08-29 16:15:49,080 INFO L87 Difference]: Start difference. First operand 53 states and 76 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:49,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:49,191 INFO L93 Difference]: Finished difference Result 100 states and 146 transitions. [2021-08-29 16:15:49,191 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-29 16:15:49,191 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-08-29 16:15:49,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:49,191 INFO L225 Difference]: With dead ends: 100 [2021-08-29 16:15:49,191 INFO L226 Difference]: Without dead ends: 53 [2021-08-29 16:15:49,192 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 20.73ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:15:49,193 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 217 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 66.10ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 217 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.89ms SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 88.88ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:49,193 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [217 Valid, 0 Invalid, 81 Unknown, 0 Unchecked, 1.89ms Time], IncrementalHoareTripleChecker [1 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 88.88ms Time] [2021-08-29 16:15:49,194 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2021-08-29 16:15:49,197 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2021-08-29 16:15:49,197 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 52 states have (on average 1.4423076923076923) internal successors, (75), 52 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:49,197 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 75 transitions. [2021-08-29 16:15:49,197 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 75 transitions. Word has length 24 [2021-08-29 16:15:49,198 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:49,198 INFO L470 AbstractCegarLoop]: Abstraction has 53 states and 75 transitions. [2021-08-29 16:15:49,198 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:49,198 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 75 transitions. [2021-08-29 16:15:49,198 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-08-29 16:15:49,198 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:49,198 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:49,198 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-08-29 16:15:49,199 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:49,199 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:49,199 INFO L82 PathProgramCache]: Analyzing trace with hash -927374502, now seen corresponding path program 1 times [2021-08-29 16:15:49,199 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:49,199 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [707725377] [2021-08-29 16:15:49,199 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:49,199 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:49,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:49,235 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:49,235 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:49,235 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [707725377] [2021-08-29 16:15:49,235 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [707725377] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:49,235 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:49,235 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-08-29 16:15:49,236 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [119395607] [2021-08-29 16:15:49,236 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-29 16:15:49,236 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:49,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-29 16:15:49,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:15:49,236 INFO L87 Difference]: Start difference. First operand 53 states and 75 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:49,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:49,394 INFO L93 Difference]: Finished difference Result 123 states and 177 transitions. [2021-08-29 16:15:49,394 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-29 16:15:49,394 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2021-08-29 16:15:49,394 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:49,396 INFO L225 Difference]: With dead ends: 123 [2021-08-29 16:15:49,396 INFO L226 Difference]: Without dead ends: 76 [2021-08-29 16:15:49,396 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 1.40ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:15:49,405 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 45 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 111.08ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.09ms SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 148.53ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:49,406 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [45 Valid, 0 Invalid, 119 Unknown, 0 Unchecked, 1.09ms Time], IncrementalHoareTripleChecker [6 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 148.53ms Time] [2021-08-29 16:15:49,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2021-08-29 16:15:49,414 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 74. [2021-08-29 16:15:49,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 73 states have (on average 1.4246575342465753) internal successors, (104), 73 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:49,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 104 transitions. [2021-08-29 16:15:49,414 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 104 transitions. Word has length 26 [2021-08-29 16:15:49,414 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:49,415 INFO L470 AbstractCegarLoop]: Abstraction has 74 states and 104 transitions. [2021-08-29 16:15:49,415 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:49,415 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 104 transitions. [2021-08-29 16:15:49,415 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-08-29 16:15:49,415 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:49,415 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:49,415 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-08-29 16:15:49,416 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:49,416 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:49,416 INFO L82 PathProgramCache]: Analyzing trace with hash -44236562, now seen corresponding path program 1 times [2021-08-29 16:15:49,416 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:49,416 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [121446505] [2021-08-29 16:15:49,416 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:49,416 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:49,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:49,491 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:49,491 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:49,491 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [121446505] [2021-08-29 16:15:49,492 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [121446505] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:49,492 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:49,492 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-29 16:15:49,492 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1684629622] [2021-08-29 16:15:49,492 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:15:49,493 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:49,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:15:49,494 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:15:49,494 INFO L87 Difference]: Start difference. First operand 74 states and 104 transitions. Second operand has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:49,827 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:49,827 INFO L93 Difference]: Finished difference Result 373 states and 541 transitions. [2021-08-29 16:15:49,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-29 16:15:49,828 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-08-29 16:15:49,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:49,829 INFO L225 Difference]: With dead ends: 373 [2021-08-29 16:15:49,829 INFO L226 Difference]: Without dead ends: 305 [2021-08-29 16:15:49,830 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 17.43ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:15:49,830 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 280 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 476 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 217.80ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 280 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 484 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.75ms SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 476 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 296.96ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:49,830 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [280 Valid, 0 Invalid, 484 Unknown, 0 Unchecked, 2.75ms Time], IncrementalHoareTripleChecker [8 Valid, 476 Invalid, 0 Unknown, 0 Unchecked, 296.96ms Time] [2021-08-29 16:15:49,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2021-08-29 16:15:49,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 121. [2021-08-29 16:15:49,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 121 states, 120 states have (on average 1.3916666666666666) internal successors, (167), 120 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:49,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 121 states to 121 states and 167 transitions. [2021-08-29 16:15:49,839 INFO L78 Accepts]: Start accepts. Automaton has 121 states and 167 transitions. Word has length 32 [2021-08-29 16:15:49,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:49,840 INFO L470 AbstractCegarLoop]: Abstraction has 121 states and 167 transitions. [2021-08-29 16:15:49,840 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:49,840 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 167 transitions. [2021-08-29 16:15:49,840 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-08-29 16:15:49,840 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:49,841 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:49,841 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-08-29 16:15:49,841 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:49,841 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:49,841 INFO L82 PathProgramCache]: Analyzing trace with hash -1115283092, now seen corresponding path program 1 times [2021-08-29 16:15:49,841 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:49,841 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1938177901] [2021-08-29 16:15:49,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:49,842 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:49,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:49,874 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:49,874 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:49,875 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1938177901] [2021-08-29 16:15:49,875 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1938177901] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:49,875 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:49,875 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-29 16:15:49,875 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792700316] [2021-08-29 16:15:49,875 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-08-29 16:15:49,875 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:49,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-08-29 16:15:49,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-29 16:15:49,876 INFO L87 Difference]: Start difference. First operand 121 states and 167 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:50,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:50,038 INFO L93 Difference]: Finished difference Result 250 states and 352 transitions. [2021-08-29 16:15:50,038 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-08-29 16:15:50,038 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2021-08-29 16:15:50,039 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:50,039 INFO L225 Difference]: With dead ends: 250 [2021-08-29 16:15:50,039 INFO L226 Difference]: Without dead ends: 182 [2021-08-29 16:15:50,041 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 3.05ms TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-29 16:15:50,042 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 81 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 275 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 109.23ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 280 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.57ms SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 275 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 145.30ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:50,043 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [81 Valid, 0 Invalid, 280 Unknown, 0 Unchecked, 1.57ms Time], IncrementalHoareTripleChecker [5 Valid, 275 Invalid, 0 Unknown, 0 Unchecked, 145.30ms Time] [2021-08-29 16:15:50,045 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2021-08-29 16:15:50,061 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 179. [2021-08-29 16:15:50,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 178 states have (on average 1.3932584269662922) internal successors, (248), 178 states have internal predecessors, (248), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:50,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 248 transitions. [2021-08-29 16:15:50,062 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 248 transitions. Word has length 33 [2021-08-29 16:15:50,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:50,062 INFO L470 AbstractCegarLoop]: Abstraction has 179 states and 248 transitions. [2021-08-29 16:15:50,062 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:50,063 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 248 transitions. [2021-08-29 16:15:50,067 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-08-29 16:15:50,067 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:50,068 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:50,068 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-08-29 16:15:50,068 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:50,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:50,069 INFO L82 PathProgramCache]: Analyzing trace with hash -2126400342, now seen corresponding path program 1 times [2021-08-29 16:15:50,069 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:50,069 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [827795120] [2021-08-29 16:15:50,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:50,070 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:50,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:50,136 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:50,137 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:50,137 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [827795120] [2021-08-29 16:15:50,137 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [827795120] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:50,137 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:50,137 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-29 16:15:50,137 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1713315028] [2021-08-29 16:15:50,138 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-08-29 16:15:50,138 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:50,138 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-08-29 16:15:50,138 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-29 16:15:50,139 INFO L87 Difference]: Start difference. First operand 179 states and 248 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:50,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:50,372 INFO L93 Difference]: Finished difference Result 497 states and 700 transitions. [2021-08-29 16:15:50,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-29 16:15:50,373 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2021-08-29 16:15:50,373 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:50,374 INFO L225 Difference]: With dead ends: 497 [2021-08-29 16:15:50,374 INFO L226 Difference]: Without dead ends: 370 [2021-08-29 16:15:50,374 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 6.22ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:15:50,375 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 122 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 374 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 166.04ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 379 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.21ms SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 374 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 207.86ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:50,375 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [122 Valid, 0 Invalid, 379 Unknown, 0 Unchecked, 1.21ms Time], IncrementalHoareTripleChecker [5 Valid, 374 Invalid, 0 Unknown, 0 Unchecked, 207.86ms Time] [2021-08-29 16:15:50,375 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370 states. [2021-08-29 16:15:50,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370 to 179. [2021-08-29 16:15:50,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 178 states have (on average 1.3820224719101124) internal successors, (246), 178 states have internal predecessors, (246), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:50,383 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 246 transitions. [2021-08-29 16:15:50,383 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 246 transitions. Word has length 33 [2021-08-29 16:15:50,383 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:50,384 INFO L470 AbstractCegarLoop]: Abstraction has 179 states and 246 transitions. [2021-08-29 16:15:50,384 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:50,384 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 246 transitions. [2021-08-29 16:15:50,384 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-08-29 16:15:50,384 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:50,384 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:50,384 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-08-29 16:15:50,384 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:50,385 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:50,385 INFO L82 PathProgramCache]: Analyzing trace with hash -1868234904, now seen corresponding path program 1 times [2021-08-29 16:15:50,385 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:50,385 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [764085539] [2021-08-29 16:15:50,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:50,385 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:50,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:50,416 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:50,417 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:50,417 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [764085539] [2021-08-29 16:15:50,417 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [764085539] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:50,417 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:50,417 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:15:50,417 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [187277085] [2021-08-29 16:15:50,417 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:15:50,417 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:50,417 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:15:50,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:15:50,418 INFO L87 Difference]: Start difference. First operand 179 states and 246 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:50,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:50,681 INFO L93 Difference]: Finished difference Result 540 states and 754 transitions. [2021-08-29 16:15:50,682 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-29 16:15:50,682 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2021-08-29 16:15:50,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:50,683 INFO L225 Difference]: With dead ends: 540 [2021-08-29 16:15:50,683 INFO L226 Difference]: Without dead ends: 367 [2021-08-29 16:15:50,683 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 11.95ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-08-29 16:15:50,684 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 229 mSDsluCounter, 239 mSDsCounter, 0 mSdLazyCounter, 385 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 176.57ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 389 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.41ms SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 385 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 227.28ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:50,684 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [229 Valid, 0 Invalid, 389 Unknown, 0 Unchecked, 1.41ms Time], IncrementalHoareTripleChecker [4 Valid, 385 Invalid, 0 Unknown, 0 Unchecked, 227.28ms Time] [2021-08-29 16:15:50,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 367 states. [2021-08-29 16:15:50,693 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 367 to 188. [2021-08-29 16:15:50,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 187 states have (on average 1.3529411764705883) internal successors, (253), 187 states have internal predecessors, (253), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:50,694 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 253 transitions. [2021-08-29 16:15:50,694 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 253 transitions. Word has length 33 [2021-08-29 16:15:50,694 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:50,694 INFO L470 AbstractCegarLoop]: Abstraction has 188 states and 253 transitions. [2021-08-29 16:15:50,694 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:50,694 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 253 transitions. [2021-08-29 16:15:50,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-08-29 16:15:50,694 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:50,694 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:50,695 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-08-29 16:15:50,695 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:50,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:50,695 INFO L82 PathProgramCache]: Analyzing trace with hash 941421312, now seen corresponding path program 1 times [2021-08-29 16:15:50,695 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:50,695 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2083756613] [2021-08-29 16:15:50,695 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:50,695 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:50,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:50,730 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:50,730 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:50,730 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2083756613] [2021-08-29 16:15:50,730 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2083756613] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:50,730 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:50,730 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:15:50,730 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [400577275] [2021-08-29 16:15:50,730 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-29 16:15:50,730 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:50,731 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-29 16:15:50,731 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-08-29 16:15:50,731 INFO L87 Difference]: Start difference. First operand 188 states and 253 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:51,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:51,247 INFO L93 Difference]: Finished difference Result 1177 states and 1553 transitions. [2021-08-29 16:15:51,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-08-29 16:15:51,248 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2021-08-29 16:15:51,248 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:51,250 INFO L225 Difference]: With dead ends: 1177 [2021-08-29 16:15:51,250 INFO L226 Difference]: Without dead ends: 995 [2021-08-29 16:15:51,251 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 48.93ms TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-08-29 16:15:51,252 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 405 mSDsluCounter, 573 mSDsCounter, 0 mSdLazyCounter, 774 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 331.22ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 405 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 794 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.80ms SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 774 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 415.63ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:51,252 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [405 Valid, 0 Invalid, 794 Unknown, 0 Unchecked, 2.80ms Time], IncrementalHoareTripleChecker [20 Valid, 774 Invalid, 0 Unknown, 0 Unchecked, 415.63ms Time] [2021-08-29 16:15:51,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 995 states. [2021-08-29 16:15:51,273 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 995 to 356. [2021-08-29 16:15:51,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 356 states, 355 states have (on average 1.3295774647887324) internal successors, (472), 355 states have internal predecessors, (472), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:51,275 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 472 transitions. [2021-08-29 16:15:51,275 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 472 transitions. Word has length 36 [2021-08-29 16:15:51,276 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:51,276 INFO L470 AbstractCegarLoop]: Abstraction has 356 states and 472 transitions. [2021-08-29 16:15:51,276 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:51,276 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 472 transitions. [2021-08-29 16:15:51,277 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-08-29 16:15:51,277 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:51,278 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:51,278 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-08-29 16:15:51,279 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:51,279 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:51,279 INFO L82 PathProgramCache]: Analyzing trace with hash 1621479682, now seen corresponding path program 1 times [2021-08-29 16:15:51,279 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:51,279 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [453762163] [2021-08-29 16:15:51,279 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:51,279 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:51,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:51,341 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:51,341 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:51,341 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [453762163] [2021-08-29 16:15:51,341 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [453762163] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:51,341 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:51,341 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:15:51,341 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [248418118] [2021-08-29 16:15:51,342 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:15:51,342 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:51,343 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:15:51,343 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:15:51,343 INFO L87 Difference]: Start difference. First operand 356 states and 472 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:51,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:51,664 INFO L93 Difference]: Finished difference Result 930 states and 1259 transitions. [2021-08-29 16:15:51,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-29 16:15:51,665 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2021-08-29 16:15:51,665 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:51,666 INFO L225 Difference]: With dead ends: 930 [2021-08-29 16:15:51,666 INFO L226 Difference]: Without dead ends: 580 [2021-08-29 16:15:51,667 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 25.54ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:15:51,667 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 137 mSDsluCounter, 302 mSDsCounter, 0 mSdLazyCounter, 475 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 199.63ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 478 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.36ms SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 475 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 261.41ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:51,668 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [137 Valid, 0 Invalid, 478 Unknown, 0 Unchecked, 1.36ms Time], IncrementalHoareTripleChecker [3 Valid, 475 Invalid, 0 Unknown, 0 Unchecked, 261.41ms Time] [2021-08-29 16:15:51,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 580 states. [2021-08-29 16:15:51,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 580 to 302. [2021-08-29 16:15:51,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 302 states, 301 states have (on average 1.2923588039867109) internal successors, (389), 301 states have internal predecessors, (389), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:51,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 302 states to 302 states and 389 transitions. [2021-08-29 16:15:51,699 INFO L78 Accepts]: Start accepts. Automaton has 302 states and 389 transitions. Word has length 36 [2021-08-29 16:15:51,699 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:51,699 INFO L470 AbstractCegarLoop]: Abstraction has 302 states and 389 transitions. [2021-08-29 16:15:51,700 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:51,700 INFO L276 IsEmpty]: Start isEmpty. Operand 302 states and 389 transitions. [2021-08-29 16:15:51,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-08-29 16:15:51,700 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:51,700 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:51,700 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-08-29 16:15:51,700 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:51,701 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:51,701 INFO L82 PathProgramCache]: Analyzing trace with hash 886341574, now seen corresponding path program 1 times [2021-08-29 16:15:51,701 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:51,701 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1595348374] [2021-08-29 16:15:51,701 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:51,701 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:51,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:51,740 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:51,741 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:51,741 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1595348374] [2021-08-29 16:15:51,741 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1595348374] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:51,741 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:51,741 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-08-29 16:15:51,741 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1348193653] [2021-08-29 16:15:51,741 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-08-29 16:15:51,741 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:51,742 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-08-29 16:15:51,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-08-29 16:15:51,742 INFO L87 Difference]: Start difference. First operand 302 states and 389 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 7 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:52,189 INFO L93 Difference]: Finished difference Result 889 states and 1138 transitions. [2021-08-29 16:15:52,189 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-08-29 16:15:52,190 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 7 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2021-08-29 16:15:52,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:52,191 INFO L225 Difference]: With dead ends: 889 [2021-08-29 16:15:52,191 INFO L226 Difference]: Without dead ends: 593 [2021-08-29 16:15:52,192 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 71.59ms TimeCoverageRelationStatistics Valid=65, Invalid=117, Unknown=0, NotChecked=0, Total=182 [2021-08-29 16:15:52,192 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 277 mSDsluCounter, 299 mSDsCounter, 0 mSdLazyCounter, 522 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 259.15ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 277 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 531 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.02ms SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 522 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 340.76ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:52,192 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [277 Valid, 0 Invalid, 531 Unknown, 0 Unchecked, 2.02ms Time], IncrementalHoareTripleChecker [9 Valid, 522 Invalid, 0 Unknown, 0 Unchecked, 340.76ms Time] [2021-08-29 16:15:52,193 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 593 states. [2021-08-29 16:15:52,208 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 593 to 282. [2021-08-29 16:15:52,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 282 states, 281 states have (on average 1.2526690391459074) internal successors, (352), 281 states have internal predecessors, (352), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 352 transitions. [2021-08-29 16:15:52,209 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 352 transitions. Word has length 37 [2021-08-29 16:15:52,209 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:52,209 INFO L470 AbstractCegarLoop]: Abstraction has 282 states and 352 transitions. [2021-08-29 16:15:52,210 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 7 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,210 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 352 transitions. [2021-08-29 16:15:52,210 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-08-29 16:15:52,210 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:52,210 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:52,210 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-08-29 16:15:52,210 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:52,211 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:52,211 INFO L82 PathProgramCache]: Analyzing trace with hash 2123545264, now seen corresponding path program 1 times [2021-08-29 16:15:52,211 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:52,211 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1841281075] [2021-08-29 16:15:52,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:52,211 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:52,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:52,239 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-08-29 16:15:52,240 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:52,240 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1841281075] [2021-08-29 16:15:52,240 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1841281075] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:52,240 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:52,240 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:15:52,240 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [791204941] [2021-08-29 16:15:52,240 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:15:52,240 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:52,240 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:15:52,240 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:15:52,241 INFO L87 Difference]: Start difference. First operand 282 states and 352 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 5 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,446 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:52,446 INFO L93 Difference]: Finished difference Result 653 states and 819 transitions. [2021-08-29 16:15:52,446 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-29 16:15:52,446 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 5 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2021-08-29 16:15:52,447 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:52,448 INFO L225 Difference]: With dead ends: 653 [2021-08-29 16:15:52,448 INFO L226 Difference]: Without dead ends: 377 [2021-08-29 16:15:52,448 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 27.23ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-08-29 16:15:52,449 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 98 mSDsluCounter, 166 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 124.83ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.78ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 158.13ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:52,449 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [98 Valid, 0 Invalid, 265 Unknown, 0 Unchecked, 0.78ms Time], IncrementalHoareTripleChecker [0 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 158.13ms Time] [2021-08-29 16:15:52,449 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 377 states. [2021-08-29 16:15:52,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 377 to 282. [2021-08-29 16:15:52,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 282 states, 281 states have (on average 1.2384341637010676) internal successors, (348), 281 states have internal predecessors, (348), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,465 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 348 transitions. [2021-08-29 16:15:52,465 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 348 transitions. Word has length 53 [2021-08-29 16:15:52,465 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:52,465 INFO L470 AbstractCegarLoop]: Abstraction has 282 states and 348 transitions. [2021-08-29 16:15:52,465 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 5 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,465 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 348 transitions. [2021-08-29 16:15:52,466 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-08-29 16:15:52,466 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:52,466 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:52,466 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-08-29 16:15:52,466 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:52,466 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:52,466 INFO L82 PathProgramCache]: Analyzing trace with hash 2051158706, now seen corresponding path program 1 times [2021-08-29 16:15:52,467 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:52,467 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [614609167] [2021-08-29 16:15:52,467 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:52,467 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:52,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:52,489 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-08-29 16:15:52,489 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:52,489 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [614609167] [2021-08-29 16:15:52,489 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [614609167] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:52,489 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:52,489 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-29 16:15:52,489 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1560587771] [2021-08-29 16:15:52,490 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-08-29 16:15:52,490 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:52,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-08-29 16:15:52,490 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-29 16:15:52,490 INFO L87 Difference]: Start difference. First operand 282 states and 348 transitions. Second operand has 4 states, 4 states have (on average 12.75) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:52,639 INFO L93 Difference]: Finished difference Result 600 states and 751 transitions. [2021-08-29 16:15:52,639 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-08-29 16:15:52,639 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 12.75) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2021-08-29 16:15:52,639 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:52,640 INFO L225 Difference]: With dead ends: 600 [2021-08-29 16:15:52,640 INFO L226 Difference]: Without dead ends: 324 [2021-08-29 16:15:52,641 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 6.05ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:15:52,641 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 71 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 202 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 91.20ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.62ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 202 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 118.66ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:52,641 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [71 Valid, 0 Invalid, 202 Unknown, 0 Unchecked, 0.62ms Time], IncrementalHoareTripleChecker [0 Valid, 202 Invalid, 0 Unknown, 0 Unchecked, 118.66ms Time] [2021-08-29 16:15:52,642 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2021-08-29 16:15:52,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 240. [2021-08-29 16:15:52,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 239 states have (on average 1.2426778242677825) internal successors, (297), 239 states have internal predecessors, (297), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 297 transitions. [2021-08-29 16:15:52,661 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 297 transitions. Word has length 53 [2021-08-29 16:15:52,661 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:52,661 INFO L470 AbstractCegarLoop]: Abstraction has 240 states and 297 transitions. [2021-08-29 16:15:52,661 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 12.75) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,661 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 297 transitions. [2021-08-29 16:15:52,661 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-08-29 16:15:52,661 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:52,662 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:52,662 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-08-29 16:15:52,662 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:52,662 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:52,662 INFO L82 PathProgramCache]: Analyzing trace with hash 1485859958, now seen corresponding path program 1 times [2021-08-29 16:15:52,662 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:52,662 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [501370034] [2021-08-29 16:15:52,662 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:52,662 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:52,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:52,688 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:15:52,688 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:52,688 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [501370034] [2021-08-29 16:15:52,689 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [501370034] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:52,689 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:52,689 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-29 16:15:52,689 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [465582773] [2021-08-29 16:15:52,689 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:15:52,689 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:52,689 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:15:52,689 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:15:52,689 INFO L87 Difference]: Start difference. First operand 240 states and 297 transitions. Second operand has 5 states, 5 states have (on average 10.8) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,901 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:52,901 INFO L93 Difference]: Finished difference Result 612 states and 756 transitions. [2021-08-29 16:15:52,901 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-29 16:15:52,901 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2021-08-29 16:15:52,902 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:52,903 INFO L225 Difference]: With dead ends: 612 [2021-08-29 16:15:52,903 INFO L226 Difference]: Without dead ends: 378 [2021-08-29 16:15:52,903 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 19.46ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:15:52,903 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 184 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 313 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 131.23ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 184 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 322 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.11ms SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 313 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 168.41ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:52,903 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [184 Valid, 0 Invalid, 322 Unknown, 0 Unchecked, 1.11ms Time], IncrementalHoareTripleChecker [9 Valid, 313 Invalid, 0 Unknown, 0 Unchecked, 168.41ms Time] [2021-08-29 16:15:52,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 378 states. [2021-08-29 16:15:52,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 378 to 240. [2021-08-29 16:15:52,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 239 states have (on average 1.2259414225941423) internal successors, (293), 239 states have internal predecessors, (293), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 293 transitions. [2021-08-29 16:15:52,925 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 293 transitions. Word has length 54 [2021-08-29 16:15:52,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:52,925 INFO L470 AbstractCegarLoop]: Abstraction has 240 states and 293 transitions. [2021-08-29 16:15:52,925 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.8) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:52,925 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 293 transitions. [2021-08-29 16:15:52,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-08-29 16:15:52,926 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:52,926 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:52,926 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-08-29 16:15:52,926 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:52,926 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:52,926 INFO L82 PathProgramCache]: Analyzing trace with hash 675182755, now seen corresponding path program 1 times [2021-08-29 16:15:52,926 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:52,926 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1779777424] [2021-08-29 16:15:52,926 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:52,926 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:52,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:52,960 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-08-29 16:15:52,961 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:52,961 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1779777424] [2021-08-29 16:15:52,961 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1779777424] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:52,961 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:52,961 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:15:52,961 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [949208849] [2021-08-29 16:15:52,961 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-29 16:15:52,961 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:52,961 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-29 16:15:52,961 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-08-29 16:15:52,962 INFO L87 Difference]: Start difference. First operand 240 states and 293 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:53,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:53,326 INFO L93 Difference]: Finished difference Result 571 states and 706 transitions. [2021-08-29 16:15:53,326 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-08-29 16:15:53,326 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2021-08-29 16:15:53,326 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:53,327 INFO L225 Difference]: With dead ends: 571 [2021-08-29 16:15:53,327 INFO L226 Difference]: Without dead ends: 387 [2021-08-29 16:15:53,328 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 32.65ms TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2021-08-29 16:15:53,328 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 162 mSDsluCounter, 374 mSDsCounter, 0 mSdLazyCounter, 606 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 219.77ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 616 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.49ms SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 606 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 303.19ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:53,328 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [162 Valid, 0 Invalid, 616 Unknown, 0 Unchecked, 2.49ms Time], IncrementalHoareTripleChecker [10 Valid, 606 Invalid, 0 Unknown, 0 Unchecked, 303.19ms Time] [2021-08-29 16:15:53,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 387 states. [2021-08-29 16:15:53,343 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 387 to 240. [2021-08-29 16:15:53,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 239 states have (on average 1.2217573221757323) internal successors, (292), 239 states have internal predecessors, (292), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:53,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 292 transitions. [2021-08-29 16:15:53,344 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 292 transitions. Word has length 56 [2021-08-29 16:15:53,344 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:53,344 INFO L470 AbstractCegarLoop]: Abstraction has 240 states and 292 transitions. [2021-08-29 16:15:53,344 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:53,345 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 292 transitions. [2021-08-29 16:15:53,345 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2021-08-29 16:15:53,345 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:53,345 INFO L513 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:53,345 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-08-29 16:15:53,346 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:53,346 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:53,346 INFO L82 PathProgramCache]: Analyzing trace with hash 666594362, now seen corresponding path program 1 times [2021-08-29 16:15:53,346 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:53,346 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1972288787] [2021-08-29 16:15:53,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:53,347 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:53,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:53,406 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2021-08-29 16:15:53,406 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:53,406 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1972288787] [2021-08-29 16:15:53,408 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1972288787] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:53,408 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:53,408 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-08-29 16:15:53,408 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1683613817] [2021-08-29 16:15:53,408 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-08-29 16:15:53,408 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:53,409 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-08-29 16:15:53,409 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:15:53,409 INFO L87 Difference]: Start difference. First operand 240 states and 292 transitions. Second operand has 8 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:53,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:53,963 INFO L93 Difference]: Finished difference Result 609 states and 743 transitions. [2021-08-29 16:15:53,964 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-08-29 16:15:53,964 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 77 [2021-08-29 16:15:53,964 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:53,965 INFO L225 Difference]: With dead ends: 609 [2021-08-29 16:15:53,965 INFO L226 Difference]: Without dead ends: 425 [2021-08-29 16:15:53,966 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 31 ImplicationChecksByTransitivity, 92.29ms TimeCoverageRelationStatistics Valid=104, Invalid=202, Unknown=0, NotChecked=0, Total=306 [2021-08-29 16:15:53,966 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 386 mSDsluCounter, 456 mSDsCounter, 0 mSdLazyCounter, 678 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 336.29ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 386 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 690 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.75ms SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 678 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 436.39ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:53,966 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [386 Valid, 0 Invalid, 690 Unknown, 0 Unchecked, 2.75ms Time], IncrementalHoareTripleChecker [12 Valid, 678 Invalid, 0 Unknown, 0 Unchecked, 436.39ms Time] [2021-08-29 16:15:53,967 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425 states. [2021-08-29 16:15:53,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425 to 232. [2021-08-29 16:15:53,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 231 states have (on average 1.2207792207792207) internal successors, (282), 231 states have internal predecessors, (282), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:53,982 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 282 transitions. [2021-08-29 16:15:53,982 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 282 transitions. Word has length 77 [2021-08-29 16:15:53,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:53,982 INFO L470 AbstractCegarLoop]: Abstraction has 232 states and 282 transitions. [2021-08-29 16:15:53,982 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.0) internal successors, (64), 8 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:53,982 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 282 transitions. [2021-08-29 16:15:53,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2021-08-29 16:15:53,983 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:15:53,983 INFO L513 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:15:53,984 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2021-08-29 16:15:53,984 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:15:53,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:15:53,984 INFO L82 PathProgramCache]: Analyzing trace with hash 1176968629, now seen corresponding path program 1 times [2021-08-29 16:15:53,984 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:15:53,984 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [149549625] [2021-08-29 16:15:53,985 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:15:53,985 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:15:54,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:15:54,025 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2021-08-29 16:15:54,026 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:15:54,026 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [149549625] [2021-08-29 16:15:54,026 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [149549625] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:15:54,026 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:15:54,026 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:15:54,026 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1406320551] [2021-08-29 16:15:54,026 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:15:54,027 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:15:54,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:15:54,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:15:54,027 INFO L87 Difference]: Start difference. First operand 232 states and 282 transitions. Second operand has 5 states, 5 states have (on average 11.6) internal successors, (58), 5 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:54,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:15:54,311 INFO L93 Difference]: Finished difference Result 887 states and 1096 transitions. [2021-08-29 16:15:54,312 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-29 16:15:54,312 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.6) internal successors, (58), 5 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 79 [2021-08-29 16:15:54,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:15:54,312 INFO L225 Difference]: With dead ends: 887 [2021-08-29 16:15:54,312 INFO L226 Difference]: Without dead ends: 0 [2021-08-29 16:15:54,313 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 16.38ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:15:54,313 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 248 mSDsluCounter, 240 mSDsCounter, 0 mSdLazyCounter, 386 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 170.93ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 248 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 397 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.30ms SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 386 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 218.78ms IncrementalHoareTripleChecker+Time [2021-08-29 16:15:54,314 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [248 Valid, 0 Invalid, 397 Unknown, 0 Unchecked, 1.30ms Time], IncrementalHoareTripleChecker [11 Valid, 386 Invalid, 0 Unknown, 0 Unchecked, 218.78ms Time] [2021-08-29 16:15:54,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-08-29 16:15:54,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-08-29 16:15:54,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:54,314 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-08-29 16:15:54,314 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 79 [2021-08-29 16:15:54,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:15:54,315 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-08-29 16:15:54,315 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.6) internal successors, (58), 5 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:15:54,315 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-08-29 16:15:54,315 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-08-29 16:15:54,317 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2021-08-29 16:15:54,317 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2021-08-29 16:15:54,317 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2021-08-29 16:15:54,317 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-08-29 16:15:54,319 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-08-29 16:15:54,322 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,323 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,323 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,324 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,324 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,324 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,325 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,325 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,325 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,326 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,326 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,326 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,326 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,327 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,327 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,327 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,328 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,343 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,343 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,344 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,381 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,381 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,382 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,382 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,410 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,663 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,663 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,664 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,664 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:54,666 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,342 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,343 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,592 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,593 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,593 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,593 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,594 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,594 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,594 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,595 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,595 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,595 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,595 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,673 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:55,822 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,032 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,032 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,109 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,109 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,136 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,136 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,136 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,137 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,162 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,535 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,545 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:15:56,545 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:03,367 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 582) no Hoare annotation was computed. [2021-08-29 16:16:03,368 INFO L858 garLoopResultBuilder]: For program point L498(lines 498 504) no Hoare annotation was computed. [2021-08-29 16:16:03,368 INFO L854 garLoopResultBuilder]: At program point L498-1(lines 498 504) the Hoare annotation is: (let ((.cse8 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0 0)) (.cse7 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse19 (= |ULTIMATE.start_isMethaneAlarm_#res| 0))) (let ((.cse12 (= ~waterLevel~0 1)) (.cse13 (= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse9 (not .cse19)) (.cse16 (not .cse3)) (.cse10 (= ULTIMATE.start_main_~tmp~1 1)) (.cse11 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse18 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse14 (= ~pumpRunning~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse4 (= ULTIMATE.start_main_~tmp~1 ~systemActive~0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse15 (not .cse7)) (.cse6 (= 1 ~systemActive~0)) (.cse17 (not .cse8))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and (<= |ULTIMATE.start_getWaterLevel_#res| 1) .cse0 .cse1 .cse7 .cse3 .cse8 .cse9 .cse6 .cse10 .cse11 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse12) (and (or (and .cse13 .cse0 .cse6 .cse12 .cse14) (and .cse13 .cse0 .cse5 .cse6 .cse14)) .cse9 .cse15 .cse16 .cse10 .cse11 .cse17) (and .cse0 .cse1 .cse9 .cse15 .cse6 .cse16 .cse10 .cse11 .cse17) (and .cse0 .cse1 .cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 1) .cse4 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1) .cse15 .cse6 .cse12 .cse17) (and .cse13 .cse0 .cse7 .cse3 .cse8 .cse6 .cse10 .cse11 .cse18 .cse19 .cse14) (and .cse8 (or (and .cse13 .cse0 .cse7 .cse3 .cse6 .cse12 .cse14) (and .cse13 .cse0 .cse7 .cse3 .cse5 .cse6 .cse14)) .cse10 .cse11 .cse19) (and .cse13 .cse0 .cse9 .cse15 .cse6 .cse16 .cse10 .cse11 .cse18 .cse17 .cse14) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse15 .cse6 .cse17)))) [2021-08-29 16:16:03,368 INFO L858 garLoopResultBuilder]: For program point L267(lines 267 274) no Hoare annotation was computed. [2021-08-29 16:16:03,368 INFO L861 garLoopResultBuilder]: At program point L267-1(lines 267 274) the Hoare annotation is: true [2021-08-29 16:16:03,368 INFO L858 garLoopResultBuilder]: For program point L168(lines 168 174) no Hoare annotation was computed. [2021-08-29 16:16:03,368 INFO L858 garLoopResultBuilder]: For program point L168-1(lines 168 174) no Hoare annotation was computed. [2021-08-29 16:16:03,368 INFO L858 garLoopResultBuilder]: For program point L168-2(lines 168 174) no Hoare annotation was computed. [2021-08-29 16:16:03,368 INFO L858 garLoopResultBuilder]: For program point L168-3(lines 168 174) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L168-4(lines 168 174) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L168-5(lines 168 174) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L854 garLoopResultBuilder]: At program point L565(lines 1 951) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L103(lines 103 107) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467-2(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467-3(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467-5(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467-6(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467-8(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467-9(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467-11(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467-12(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467-14(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467-15(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L858 garLoopResultBuilder]: For program point L467-17(lines 467 471) no Hoare annotation was computed. [2021-08-29 16:16:03,369 INFO L854 garLoopResultBuilder]: At program point L534(lines 487 535) the Hoare annotation is: false [2021-08-29 16:16:03,369 INFO L854 garLoopResultBuilder]: At program point L173(lines 164 177) the Hoare annotation is: false [2021-08-29 16:16:03,369 INFO L854 garLoopResultBuilder]: At program point L173-1(lines 164 177) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= ULTIMATE.start_main_~tmp~1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1)) (.cse5 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) (not (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) .cse4 .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse5 (= ULTIMATE.start_main_~tmp~1 1) (= |ULTIMATE.start_valid_product_#res| 1) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1)))) [2021-08-29 16:16:03,369 INFO L854 garLoopResultBuilder]: At program point L173-2(lines 164 177) the Hoare annotation is: false [2021-08-29 16:16:03,369 INFO L854 garLoopResultBuilder]: At program point L173-3(lines 164 177) the Hoare annotation is: false [2021-08-29 16:16:03,369 INFO L854 garLoopResultBuilder]: At program point L173-4(lines 164 177) the Hoare annotation is: false [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L173-5(lines 164 177) the Hoare annotation is: false [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L240(lines 236 242) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ULTIMATE.start_main_~tmp~1 1) (= |ULTIMATE.start_valid_product_#res| 1) (= ~waterLevel~0 1)) [2021-08-29 16:16:03,370 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 582) no Hoare annotation was computed. [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L473(lines 458 476) the Hoare annotation is: false [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L473-1(lines 458 476) the Hoare annotation is: (let ((.cse1 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 0)) (.cse3 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 1)) (.cse4 (= |ULTIMATE.start_isHighWaterLevel_#res| 0)) (.cse5 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse8 (= ULTIMATE.start_main_~tmp~1 1)) (.cse7 (= |ULTIMATE.start_valid_product_#res| 1))) (or (and .cse0 .cse1 .cse2 .cse3 (= ULTIMATE.start_main_~tmp~1 ~systemActive~0) .cse4 .cse5 .cse6 .cse7 (= ~waterLevel~0 1)) (and .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) (not (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) .cse4 .cse5 .cse6 .cse8 .cse7) (and .cse0 .cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) (<= 2 ~waterLevel~0) .cse6 .cse8 .cse7 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)))) [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L473-2(lines 458 476) the Hoare annotation is: false [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L473-3(lines 458 476) the Hoare annotation is: false [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L473-4(lines 458 476) the Hoare annotation is: false [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L473-5(lines 458 476) the Hoare annotation is: false [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L573(lines 568 576) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res| 1) (= ~waterLevel~0 1)) [2021-08-29 16:16:03,370 INFO L861 garLoopResultBuilder]: At program point L276(lines 257 279) the Hoare annotation is: true [2021-08-29 16:16:03,370 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 514) no Hoare annotation was computed. [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L508-1(lines 508 514) the Hoare annotation is: (let ((.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= ULTIMATE.start_main_~tmp~1 ~systemActive~0)) (.cse5 (= ~waterLevel~0 1)) (.cse6 (= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ~pumpRunning~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse4 (= 1 ~systemActive~0)) (.cse9 (= ULTIMATE.start_main_~tmp~1 1)) (.cse10 (= |ULTIMATE.start_valid_product_#res| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse2 .cse3 .cse4 (= ULTIMATE.start_processEnvironment_~tmp~3 0) .cse7) (and .cse0 .cse1 .cse2 .cse3 (not (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) .cse4) (and (or (and .cse6 .cse0 .cse4 .cse5 .cse7) (and .cse6 .cse0 .cse8 .cse4 .cse7)) .cse9 .cse10) (and .cse0 .cse1 .cse8 .cse4 .cse9 .cse10))) [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L409(lines 402 412) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse3 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse6 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse2 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse7 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= ULTIMATE.start_main_~tmp~1 ~systemActive~0) (not .cse2) (not .cse3) .cse4 (not .cse5) .cse6 .cse7) (and .cse0 .cse1 .cse3 .cse5 .cse4 (= ULTIMATE.start_main_~tmp~1 1) .cse6 .cse2 .cse7))) [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L409-1(lines 402 412) the Hoare annotation is: false [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L409-2(lines 402 412) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse4 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 1)) (.cse13 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse5 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse8 (= 1 ~systemActive~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse9 (= ULTIMATE.start_main_~tmp~1 1)) (.cse10 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse11 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse12 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 (not .cse13) .cse7 (not .cse5) .cse8 (not .cse6) .cse9 .cse10 .cse11 .cse12))) [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L409-3(lines 402 412) the Hoare annotation is: false [2021-08-29 16:16:03,370 INFO L854 garLoopResultBuilder]: At program point L409-4(lines 402 412) the Hoare annotation is: false [2021-08-29 16:16:03,371 INFO L854 garLoopResultBuilder]: At program point L409-5(lines 402 412) the Hoare annotation is: false [2021-08-29 16:16:03,371 INFO L854 garLoopResultBuilder]: At program point L409-6(lines 402 412) the Hoare annotation is: false [2021-08-29 16:16:03,371 INFO L854 garLoopResultBuilder]: At program point L409-7(lines 402 412) the Hoare annotation is: false [2021-08-29 16:16:03,371 INFO L854 garLoopResultBuilder]: At program point L409-8(lines 402 412) the Hoare annotation is: false [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L115(lines 115 119) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L348(lines 348 365) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L348-1(lines 348 365) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L348-2(lines 348 365) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L582(line 582) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L582-1(line 582) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L582-2(line 582) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L384(lines 384 390) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L384-2(lines 384 390) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L384-4(lines 384 390) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L384-6(lines 384 390) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L384-8(lines 384 390) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L384-10(lines 384 390) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L854 garLoopResultBuilder]: At program point L418(lines 413 421) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse4 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse6 (= ULTIMATE.start_main_~tmp~1 1)) (.cse7 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse8 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse9 (= |ULTIMATE.start_isPumpRunning_#res| 1)) (.cse10 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_processEnvironment_~tmp~3 0) .cse8 .cse9 .cse10) (and .cse0 .cse1 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 1) .cse2 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6 .cse7 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) .cse8 .cse9 .cse10))) [2021-08-29 16:16:03,371 INFO L854 garLoopResultBuilder]: At program point L418-1(lines 413 421) the Hoare annotation is: false [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L352(lines 352 360) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L854 garLoopResultBuilder]: At program point L418-2(lines 413 421) the Hoare annotation is: false [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L352-1(lines 352 360) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L352-2(lines 352 360) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L55(lines 55 75) no Hoare annotation was computed. [2021-08-29 16:16:03,371 INFO L858 garLoopResultBuilder]: For program point L55-2(lines 55 75) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L55-4(lines 55 75) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L518(lines 518 529) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L322(lines 322 339) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L322-1(lines 322 339) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L322-2(lines 322 339) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L322-3(lines 322 339) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L322-4(lines 322 339) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L322-5(lines 322 339) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L91(lines 91 95) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L91-3(lines 91 95) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L91-6(lines 91 95) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L854 garLoopResultBuilder]: At program point L290(lines 289 308) the Hoare annotation is: (let ((.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= ULTIMATE.start_main_~tmp~1 ~systemActive~0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (= ULTIMATE.start_main_~tmp~1 1)) (.cse6 (= |ULTIMATE.start_valid_product_#res| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse1 .cse2 .cse3 (not (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) .cse4) (and (= ULTIMATE.start_activatePump_~tmp~4 0) .cse0 .cse4 .cse5 .cse6 (= ~pumpRunning~0 1)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse4 .cse5 .cse6))) [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L290-1(lines 290 296) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L854 garLoopResultBuilder]: At program point L290-2(lines 289 308) the Hoare annotation is: false [2021-08-29 16:16:03,372 INFO L854 garLoopResultBuilder]: At program point L290-3(lines 289 308) the Hoare annotation is: false [2021-08-29 16:16:03,372 INFO L854 garLoopResultBuilder]: At program point L191-2(lines 191 205) the Hoare annotation is: false [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L489(lines 488 533) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L192(line 192) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L490(lines 490 494) no Hoare annotation was computed. [2021-08-29 16:16:03,372 INFO L854 garLoopResultBuilder]: At program point L160(lines 155 163) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0)) (.cse0 (= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse4 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse6 (= ULTIMATE.start_main_~tmp~1 1)) (.cse7 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse8 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse9 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 1) .cse2 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6 .cse7 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) .cse8 .cse9) (and .cse1 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 0) .cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 1) .cse2 .cse3 .cse4 (= |ULTIMATE.start_isHighWaterLevel_#res| 0) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1) .cse5 (= |ULTIMATE.start_getWaterLevel_#res| 1) (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0) .cse6 .cse7 (= ~waterLevel~0 1)) (and (<= |ULTIMATE.start_getWaterLevel_#res| 1) .cse1 .cse10 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) .cse2 .cse3 (= ULTIMATE.start_main_~tmp~1 ~systemActive~0) .cse4 (<= ~waterLevel~0 1) (not .cse8) .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_processEnvironment_~tmp~3 0) .cse8 .cse9))) [2021-08-29 16:16:03,372 INFO L854 garLoopResultBuilder]: At program point L160-1(lines 155 163) the Hoare annotation is: false [2021-08-29 16:16:03,372 INFO L854 garLoopResultBuilder]: At program point L160-2(lines 155 163) the Hoare annotation is: false [2021-08-29 16:16:03,372 INFO L858 garLoopResultBuilder]: For program point L61(lines 61 74) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L854 garLoopResultBuilder]: At program point L61-1(lines 1 951) the Hoare annotation is: (let ((.cse4 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse8 (= |ULTIMATE.start_isMethaneAlarm_#res| 0))) (let ((.cse11 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse13 (= ~waterLevel~0 1)) (.cse0 (= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse6 (= ULTIMATE.start_main_~tmp~1 1)) (.cse17 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse9 (= ~pumpRunning~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse10 (= ~pumpRunning~0 0)) (.cse12 (= ULTIMATE.start_main_~tmp~1 ~systemActive~0)) (.cse16 (not .cse8)) (.cse14 (not .cse2)) (.cse5 (= 1 ~systemActive~0)) (.cse18 (not .cse3)) (.cse7 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse15 (not .cse4))) (or (and .cse0 .cse1 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 1) .cse2 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6 .cse7 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) .cse8 .cse9) (and .cse1 .cse10 .cse11 .cse3 .cse12 .cse5 .cse13) (and .cse1 .cse10 .cse11 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 1) .cse12 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1) .cse14 .cse5 .cse13 .cse15) (and (<= |ULTIMATE.start_getWaterLevel_#res| 1) .cse1 .cse10 .cse2 .cse3 .cse12 .cse4 (<= ~waterLevel~0 1) .cse16 .cse5 .cse7 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse17 .cse8 .cse9) (and .cse0 .cse1 .cse16 .cse14 .cse5 .cse18 .cse6 .cse7 .cse17 .cse15 .cse9) (and .cse1 .cse10 .cse12 .cse16 .cse14 .cse5 .cse18 .cse7 .cse15)))) [2021-08-29 16:16:03,373 INFO L858 garLoopResultBuilder]: For program point L61-2(lines 61 74) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L854 garLoopResultBuilder]: At program point L61-3(lines 1 951) the Hoare annotation is: false [2021-08-29 16:16:03,373 INFO L858 garLoopResultBuilder]: For program point L61-4(lines 61 74) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L854 garLoopResultBuilder]: At program point L61-5(lines 1 951) the Hoare annotation is: false [2021-08-29 16:16:03,373 INFO L858 garLoopResultBuilder]: For program point L524(lines 524 528) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L858 garLoopResultBuilder]: For program point L524-2(lines 290 296) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L858 garLoopResultBuilder]: For program point L326(lines 326 334) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L858 garLoopResultBuilder]: For program point L326-1(lines 326 334) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L858 garLoopResultBuilder]: For program point L326-2(lines 326 334) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L858 garLoopResultBuilder]: For program point L326-3(lines 326 334) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L858 garLoopResultBuilder]: For program point L326-4(lines 326 334) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L858 garLoopResultBuilder]: For program point L326-5(lines 326 334) no Hoare annotation was computed. [2021-08-29 16:16:03,373 INFO L854 garLoopResultBuilder]: At program point L128(lines 123 131) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse5 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse6 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= ULTIMATE.start_main_~tmp~1 ~systemActive~0) (not .cse2) .cse3 (not .cse4) .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse4 .cse3 (= ULTIMATE.start_main_~tmp~1 1) .cse5 .cse6))) [2021-08-29 16:16:03,373 INFO L854 garLoopResultBuilder]: At program point L128-1(lines 123 131) the Hoare annotation is: false [2021-08-29 16:16:03,373 INFO L854 garLoopResultBuilder]: At program point L128-2(lines 123 131) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse4 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 1)) (.cse6 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0)) (.cse9 (= ULTIMATE.start_main_~tmp~1 1)) (.cse10 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse11 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse12 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not .cse6) .cse7 (not .cse8) .cse9 .cse10 .cse11 .cse12) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse8 .cse5 .cse7 .cse9 .cse10 .cse11 .cse12))) [2021-08-29 16:16:03,373 INFO L854 garLoopResultBuilder]: At program point L128-3(lines 123 131) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse9 (= |ULTIMATE.start_isMethaneAlarm_#res| 0))) (let ((.cse1 (= ~pumpRunning~0 0)) (.cse13 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 1)) (.cse14 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1)) (.cse15 (= ~waterLevel~0 1)) (.cse4 (not .cse9)) (.cse11 (not .cse2)) (.cse12 (not .cse3)) (.cse8 (= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse6 (= ULTIMATE.start_main_~tmp~1 1)) (.cse7 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse16 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse10 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse0 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 1) .cse2 .cse3 (<= 2 ~waterLevel~0) .cse5 .cse6 .cse7 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) .cse9 .cse10) (and .cse0 .cse1 .cse4 .cse11 .cse5 .cse12 .cse6 .cse7) (and .cse0 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 0) .cse1 .cse13 .cse2 .cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 0) .cse14 .cse5 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0) .cse6 .cse7 .cse15) (and .cse0 .cse1 .cse13 .cse14 .cse11 .cse5 .cse12 .cse6 .cse7 .cse15) (and .cse8 .cse0 .cse4 .cse11 .cse5 .cse12 .cse6 .cse7 .cse16 .cse10) (and .cse8 .cse0 .cse2 .cse3 .cse5 .cse6 .cse7 .cse16 .cse9 .cse10)))) [2021-08-29 16:16:03,373 INFO L854 garLoopResultBuilder]: At program point L128-4(lines 123 131) the Hoare annotation is: false [2021-08-29 16:16:03,373 INFO L854 garLoopResultBuilder]: At program point L128-5(lines 123 131) the Hoare annotation is: false [2021-08-29 16:16:03,373 INFO L854 garLoopResultBuilder]: At program point L128-6(lines 123 131) the Hoare annotation is: false [2021-08-29 16:16:03,374 INFO L854 garLoopResultBuilder]: At program point L128-7(lines 123 131) the Hoare annotation is: false [2021-08-29 16:16:03,374 INFO L854 garLoopResultBuilder]: At program point L128-8(lines 123 131) the Hoare annotation is: false [2021-08-29 16:16:03,374 INFO L854 garLoopResultBuilder]: At program point L128-9(lines 123 131) the Hoare annotation is: false [2021-08-29 16:16:03,374 INFO L854 garLoopResultBuilder]: At program point L128-10(lines 123 131) the Hoare annotation is: false [2021-08-29 16:16:03,374 INFO L854 garLoopResultBuilder]: At program point L128-11(lines 123 131) the Hoare annotation is: false [2021-08-29 16:16:03,374 INFO L858 garLoopResultBuilder]: For program point L195(lines 195 199) no Hoare annotation was computed. [2021-08-29 16:16:03,374 INFO L858 garLoopResultBuilder]: For program point L195-1(lines 290 296) no Hoare annotation was computed. [2021-08-29 16:16:03,374 INFO L858 garLoopResultBuilder]: For program point L65(lines 65 71) no Hoare annotation was computed. [2021-08-29 16:16:03,374 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-08-29 16:16:03,374 INFO L858 garLoopResultBuilder]: For program point L65-2(lines 65 71) no Hoare annotation was computed. [2021-08-29 16:16:03,374 INFO L858 garLoopResultBuilder]: For program point L65-4(lines 65 71) no Hoare annotation was computed. [2021-08-29 16:16:03,374 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 582) no Hoare annotation was computed. [2021-08-29 16:16:03,374 INFO L854 garLoopResultBuilder]: At program point L297(lines 297 303) the Hoare annotation is: (let ((.cse9 (= ~methaneLevelCritical~0 0)) (.cse12 (= |ULTIMATE.start_isMethaneAlarm_#res| 0))) (let ((.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= ULTIMATE.start_main_~tmp~1 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse14 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 1)) (.cse15 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1)) (.cse16 (= ~waterLevel~0 1)) (.cse4 (not .cse12)) (.cse6 (not .cse9)) (.cse7 (= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse8 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse5 (= 1 ~systemActive~0)) (.cse10 (= ULTIMATE.start_main_~tmp~1 1)) (.cse11 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse17 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse13 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse0 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 1) .cse8 .cse9 (<= 2 ~waterLevel~0) .cse5 .cse10 .cse11 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4 .cse5) (and .cse0 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 0) .cse1 .cse14 (= |ULTIMATE.start_isHighWaterLevel_#res| 0) .cse15 .cse5 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0) .cse10 .cse11 .cse16) (and .cse0 .cse1 .cse14 .cse15 .cse5 .cse6 .cse10 .cse11 .cse16) (and .cse7 .cse0 .cse4 (not .cse8) .cse5 .cse6 .cse10 .cse11 .cse17 .cse13) (and .cse7 .cse0 .cse8 .cse9 .cse5 .cse10 .cse11 .cse17 .cse12 .cse13)))) [2021-08-29 16:16:03,374 INFO L854 garLoopResultBuilder]: At program point L297-1(lines 297 303) the Hoare annotation is: false [2021-08-29 16:16:03,374 INFO L854 garLoopResultBuilder]: At program point L297-2(lines 297 303) the Hoare annotation is: false [2021-08-29 16:16:03,377 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-08-29 16:16:03,402 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.08 04:16:03 BoogieIcfgContainer [2021-08-29 16:16:03,402 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-08-29 16:16:03,403 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-08-29 16:16:03,403 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-08-29 16:16:03,403 INFO L275 PluginConnector]: Witness Printer initialized [2021-08-29 16:16:03,403 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.08 04:15:48" (3/4) ... [2021-08-29 16:16:03,405 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-08-29 16:16:03,417 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 41 nodes and edges [2021-08-29 16:16:03,417 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2021-08-29 16:16:03,418 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2021-08-29 16:16:03,418 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-08-29 16:16:03,419 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-08-29 16:16:03,419 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-08-29 16:16:03,420 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-08-29 16:16:03,433 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1 [2021-08-29 16:16:03,433 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && waterLevel == 1 [2021-08-29 16:16:03,434 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((tmp == 0 && splverifierCounter == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1)) || (((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == 1) && tmp == systemActive) && \result == 1) && !(\result == 0)) && 1 == systemActive) && waterLevel == 1) && !(tmp == 0))) || (((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == systemActive) && tmp == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive) && \result == 1) && tmp___0 <= 1)) || ((((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && pumpRunning == 1)) || ((((((((((tmp == 0 && splverifierCounter == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && !(tmp == 0)) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp == systemActive) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == 1) && !(tmp == 0)) [2021-08-29 16:16:03,434 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 2 <= waterLevel) && 1 == systemActive) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && !(\result == 0)) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp___0 <= 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1)) || (((((((((((tmp == 0 && splverifierCounter == 0) && 1 == systemActive) && waterLevel == 1) && pumpRunning == 1) || ((((tmp == 0 && splverifierCounter == 0) && 2 <= waterLevel) && 1 == systemActive) && pumpRunning == 1)) && !(\result == 0)) && !(\result == 0)) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && !(tmp == 0))) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && !(tmp == 0))) || (((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == 1) && tmp == systemActive) && \result == 1) && !(\result == 0)) && 1 == systemActive) && waterLevel == 1) && !(tmp == 0))) || ((((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && pumpRunning == 1)) || ((((tmp == 0 && (((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1) && pumpRunning == 1) || ((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && pumpRunning == 1))) && tmp == 1) && \result == 1) && \result == 0)) || ((((((((((tmp == 0 && splverifierCounter == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && !(tmp == 0)) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 2 <= waterLevel) && !(\result == 0)) && 1 == systemActive) && !(tmp == 0)) [2021-08-29 16:16:03,434 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) || ((((((tmp == 0 && splverifierCounter == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && pumpRunning == 1)) || (((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && !(\result == 0)) && 1 == systemActive)) || (((((((tmp == 0 && splverifierCounter == 0) && 1 == systemActive) && waterLevel == 1) && pumpRunning == 1) || ((((tmp == 0 && splverifierCounter == 0) && 2 <= waterLevel) && 1 == systemActive) && pumpRunning == 1)) && tmp == 1) && \result == 1)) || (((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) [2021-08-29 16:16:03,435 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) || (((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && !(\result == 0)) && 1 == systemActive)) || (((((tmp == 0 && splverifierCounter == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && pumpRunning == 1)) || (((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) [2021-08-29 16:16:03,435 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) || ((((((((((((((tmp == 0 && splverifierCounter == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && tmp == 1) && \result == 0) && \result == 1) && 1 == systemActive) && tmp == 0) && tmp == 1) && \result == 1) && waterLevel == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp == 1) && \result == 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && waterLevel == 1)) || (((((((((tmp == 0 && splverifierCounter == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && pumpRunning == 1)) || (((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && pumpRunning == 1) [2021-08-29 16:16:03,436 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive) && tmp == 1) && \result == 1) || ((((((((((((((tmp == 0 && splverifierCounter == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1)) || ((((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && \result == 0) && \result == 1) && 1 == systemActive) && tmp == 0) && tmp == 1) && \result == 1) && waterLevel == 1)) || (((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp == 1) && \result == 1) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && waterLevel == 1)) || (((((((((tmp == 0 && splverifierCounter == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && pumpRunning == 1)) || (((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && pumpRunning == 1) [2021-08-29 16:16:03,436 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((tmp == 0 && splverifierCounter == 0) && tmp == systemActive) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == 1) && pumpRunning == 1) || (((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && pumpRunning == 1) [2021-08-29 16:16:03,437 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((tmp == 0 && splverifierCounter == 0) && tmp == systemActive) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == 1) && pumpRunning == 1) || ((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && \result == 0) && pumpRunning == 1) [2021-08-29 16:16:03,437 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && waterLevel <= 1) && !(\result == 0)) && \result == 1) && 1 == systemActive) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && \result == 0)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && \result == 1) && 1 == systemActive) && waterLevel == 1) [2021-08-29 16:16:03,439 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((tmp == 0 && splverifierCounter == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1) || ((((((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && \result == 0) && \result == 1) && 1 == systemActive) && \result == 1) && tmp == 0) && tmp == 1) && \result == 1) && waterLevel == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == systemActive) && tmp == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive)) || ((((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && pumpRunning == 1) [2021-08-29 16:16:03,441 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && tmp == 1) && tmp == systemActive) && \result == 0) && \result == 1) && 1 == systemActive) && \result == 1) && waterLevel == 1) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && tmp == 1) && waterLevel <= 1) && !(\result == 0)) && \result == 0) && \result == 1) && 1 == systemActive) && tmp == 1) && \result == 1)) || (((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) [2021-08-29 16:16:03,441 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((((((tmp == 0 && splverifierCounter == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) && \result == 1) && pumpRunning == 1) [2021-08-29 16:16:03,442 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && 2 <= waterLevel) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) [2021-08-29 16:16:03,442 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && !(\result == 0)) && 2 <= waterLevel) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) [2021-08-29 16:16:03,481 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-08-29 16:16:03,481 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-08-29 16:16:03,482 INFO L158 Benchmark]: Toolchain (without parser) took 16191.61ms. Allocated memory was 54.5MB in the beginning and 272.6MB in the end (delta: 218.1MB). Free memory was 31.9MB in the beginning and 148.4MB in the end (delta: -116.6MB). Peak memory consumption was 101.9MB. Max. memory is 16.1GB. [2021-08-29 16:16:03,482 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 54.5MB. Free memory was 36.0MB in the beginning and 36.0MB in the end (delta: 29.3kB). There was no memory consumed. Max. memory is 16.1GB. [2021-08-29 16:16:03,482 INFO L158 Benchmark]: CACSL2BoogieTranslator took 297.45ms. Allocated memory is still 54.5MB. Free memory was 31.7MB in the beginning and 30.3MB in the end (delta: 1.4MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2021-08-29 16:16:03,482 INFO L158 Benchmark]: Boogie Procedure Inliner took 58.47ms. Allocated memory is still 54.5MB. Free memory was 30.3MB in the beginning and 26.1MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-08-29 16:16:03,482 INFO L158 Benchmark]: Boogie Preprocessor took 52.97ms. Allocated memory is still 54.5MB. Free memory was 26.1MB in the beginning and 23.3MB in the end (delta: 2.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-08-29 16:16:03,483 INFO L158 Benchmark]: RCFGBuilder took 470.80ms. Allocated memory was 54.5MB in the beginning and 73.4MB in the end (delta: 18.9MB). Free memory was 23.3MB in the beginning and 37.0MB in the end (delta: -13.7MB). Peak memory consumption was 12.4MB. Max. memory is 16.1GB. [2021-08-29 16:16:03,483 INFO L158 Benchmark]: TraceAbstraction took 15229.15ms. Allocated memory was 73.4MB in the beginning and 272.6MB in the end (delta: 199.2MB). Free memory was 36.7MB in the beginning and 161.1MB in the end (delta: -124.5MB). Peak memory consumption was 153.6MB. Max. memory is 16.1GB. [2021-08-29 16:16:03,483 INFO L158 Benchmark]: Witness Printer took 78.40ms. Allocated memory is still 272.6MB. Free memory was 161.1MB in the beginning and 148.4MB in the end (delta: 12.7MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-08-29 16:16:03,487 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 54.5MB. Free memory was 36.0MB in the beginning and 36.0MB in the end (delta: 29.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 297.45ms. Allocated memory is still 54.5MB. Free memory was 31.7MB in the beginning and 30.3MB in the end (delta: 1.4MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 58.47ms. Allocated memory is still 54.5MB. Free memory was 30.3MB in the beginning and 26.1MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 52.97ms. Allocated memory is still 54.5MB. Free memory was 26.1MB in the beginning and 23.3MB in the end (delta: 2.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 470.80ms. Allocated memory was 54.5MB in the beginning and 73.4MB in the end (delta: 18.9MB). Free memory was 23.3MB in the beginning and 37.0MB in the end (delta: -13.7MB). Peak memory consumption was 12.4MB. Max. memory is 16.1GB. * TraceAbstraction took 15229.15ms. Allocated memory was 73.4MB in the beginning and 272.6MB in the end (delta: 199.2MB). Free memory was 36.7MB in the beginning and 161.1MB in the end (delta: -124.5MB). Peak memory consumption was 153.6MB. Max. memory is 16.1GB. * Witness Printer took 78.40ms. Allocated memory is still 272.6MB. Free memory was 161.1MB in the beginning and 148.4MB in the end (delta: 12.7MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.00ms ErrorAutomatonConstructionTimeTotal, 0.00ms FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.00ms ErrorAutomatonConstructionTimeAvg, 0.00ms ErrorAutomatonDifferenceTimeAvg, 0.00ms ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 582]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 582]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 582]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 135 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 15168.63ms, OverallIterations: 17, TraceHistogramMax: 3, EmptinessCheckTime: 20.33ms, AutomataDifference: 4799.89ms, DeadEndRemovalTime: 0.00ms, HoareAnnotationTime: 9049.38ms, InitialAbstractionConstructionTime: 12.10ms, PartialOrderReductionTime: 0.00ms, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3011 SdHoareTripleChecker+Valid, 3841.30ms IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3011 mSDsluCounter, 0 SdHoareTripleChecker+Invalid, 2943.40ms Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3594 mSDsCounter, 103 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 6199 IncrementalHoareTripleChecker+Invalid, 6302 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 103 mSolverCounterUnsat, 0 mSDtfsCounter, 6199 mSolverCounterSat, 27.94ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 149 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 403.39ms Time, 0.00ms BasicInterpolantAutomatonTime, BiggestAbstraction: size=356occurred in iteration=9, InterpolantAutomatonStates: 112, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.00ms DumpTime, AutomataMinimizationStatistics: 252.57ms AutomataMinimizationTime, 17 MinimizatonAttempts, 2444 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: 0.00ms HoareAnnotationTime, 57 LocationsWithAnnotation, 57 PreInvPairs, 311 NumberOfFragments, 2066 HoareAnnotationTreeSize, 57 FomulaSimplifications, 49120324 FormulaSimplificationTreeSizeReduction, 2223.88ms HoareSimplificationTime, 57 FomulaSimplificationsInter, 13289997 FormulaSimplificationTreeSizeReductionInter, 6805.28ms HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 61.29ms SsaConstructionTime, 240.61ms SatisfiabilityAnalysisTime, 556.22ms InterpolantComputationTime, 699 NumberOfCodeBlocks, 699 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 682 ConstructedInterpolants, 0 QuantifiedInterpolants, 1224 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 17 InterpolantComputations, 17 PerfectInterpolantSequences, 160/160 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 191]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: (((((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((((((tmp == 0 && splverifierCounter == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) && \result == 1) && pumpRunning == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && !(\result == 0)) && 2 <= waterLevel) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: (((((((((((((((((tmp == 0 && splverifierCounter == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1) || ((((((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && \result == 0) && \result == 1) && 1 == systemActive) && \result == 1) && tmp == 0) && tmp == 1) && \result == 1) && waterLevel == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == systemActive) && tmp == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive)) || ((((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && pumpRunning == 1) - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && tmp == 1) && tmp == systemActive) && \result == 0) && \result == 1) && 1 == systemActive) && \result == 1) && waterLevel == 1) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && tmp == 1) && waterLevel <= 1) && !(\result == 0)) && \result == 0) && \result == 1) && 1 == systemActive) && tmp == 1) && \result == 1)) || (((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) - InvariantResult [Line: 236]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && waterLevel == 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 508]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) || ((((((tmp == 0 && splverifierCounter == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && pumpRunning == 1)) || (((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && !(\result == 0)) && 1 == systemActive)) || (((((((tmp == 0 && splverifierCounter == 0) && 1 == systemActive) && waterLevel == 1) && pumpRunning == 1) || ((((tmp == 0 && splverifierCounter == 0) && 2 <= waterLevel) && 1 == systemActive) && pumpRunning == 1)) && tmp == 1) && \result == 1)) || (((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) - InvariantResult [Line: 297]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 297]: Loop Invariant Derived loop invariant: (((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) || ((((((((((((((tmp == 0 && splverifierCounter == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && tmp == 1) && \result == 0) && \result == 1) && 1 == systemActive) && tmp == 0) && tmp == 1) && \result == 1) && waterLevel == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp == 1) && \result == 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && waterLevel == 1)) || (((((((((tmp == 0 && splverifierCounter == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && pumpRunning == 1)) || (((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && pumpRunning == 1) - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 267]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 297]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((((((tmp == 0 && splverifierCounter == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1)) || (((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == 1) && tmp == systemActive) && \result == 1) && !(\result == 0)) && 1 == systemActive) && waterLevel == 1) && !(tmp == 0))) || (((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == systemActive) && tmp == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive) && \result == 1) && tmp___0 <= 1)) || ((((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && pumpRunning == 1)) || ((((((((((tmp == 0 && splverifierCounter == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && !(tmp == 0)) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp == systemActive) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == 1) && !(tmp == 0)) - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && waterLevel <= 1) && !(\result == 0)) && \result == 1) && 1 == systemActive) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && \result == 0)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && \result == 1) && 1 == systemActive) && waterLevel == 1) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 2 <= waterLevel) && 1 == systemActive) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && !(\result == 0)) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp___0 <= 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1)) || (((((((((((tmp == 0 && splverifierCounter == 0) && 1 == systemActive) && waterLevel == 1) && pumpRunning == 1) || ((((tmp == 0 && splverifierCounter == 0) && 2 <= waterLevel) && 1 == systemActive) && pumpRunning == 1)) && !(\result == 0)) && !(\result == 0)) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && !(tmp == 0))) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && !(tmp == 0))) || (((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == 1) && tmp == systemActive) && \result == 1) && !(\result == 0)) && 1 == systemActive) && waterLevel == 1) && !(tmp == 0))) || ((((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && pumpRunning == 1)) || ((((tmp == 0 && (((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1) && pumpRunning == 1) || ((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && pumpRunning == 1))) && tmp == 1) && \result == 1) && \result == 0)) || ((((((((((tmp == 0 && splverifierCounter == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && !(tmp == 0)) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 2 <= waterLevel) && !(\result == 0)) && 1 == systemActive) && !(tmp == 0)) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && !(\result == 0)) && 1 == systemActive) && tmp == 1) && \result == 1) || ((((((((((((((tmp == 0 && splverifierCounter == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1)) || ((((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && \result == 0) && \result == 1) && 1 == systemActive) && tmp == 0) && tmp == 1) && \result == 1) && waterLevel == 1)) || (((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp == 1) && \result == 1) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && waterLevel == 1)) || (((((((((tmp == 0 && splverifierCounter == 0) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && pumpRunning == 1)) || (((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) && pumpRunning == 1) - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1 - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: (((((((tmp == 0 && splverifierCounter == 0) && tmp == systemActive) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == 1) && pumpRunning == 1) || (((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && pumpRunning == 1) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: ((((((((tmp == 0 && splverifierCounter == 0) && tmp == systemActive) && !(\result == 0)) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == 1) && pumpRunning == 1) || ((((((((tmp == 0 && splverifierCounter == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && \result == 0) && pumpRunning == 1) - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) || (((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && !(\result == 0)) && 1 == systemActive)) || (((((tmp == 0 && splverifierCounter == 0) && 1 == systemActive) && tmp == 1) && \result == 1) && pumpRunning == 1)) || (((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && 2 <= waterLevel) && !(\result == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && tmp == 1) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 1) && \result == 1) && tmp == 0) && \result == 0) - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2021-08-29 16:16:03,531 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request...