./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5fbdf5bf Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9558026aa74bc39759eb2664747acd02f73fafe3 ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-wip.dd.seqcomp-5fbdf5b [2021-08-29 16:15:57,152 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-08-29 16:15:57,155 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-08-29 16:15:57,193 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-08-29 16:15:57,194 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-08-29 16:15:57,197 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-08-29 16:15:57,198 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-08-29 16:15:57,204 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-08-29 16:15:57,206 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-08-29 16:15:57,210 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-08-29 16:15:57,211 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-08-29 16:15:57,215 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-08-29 16:15:57,215 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-08-29 16:15:57,217 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-08-29 16:15:57,219 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-08-29 16:15:57,222 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-08-29 16:15:57,223 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-08-29 16:15:57,224 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-08-29 16:15:57,226 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-08-29 16:15:57,232 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-08-29 16:15:57,233 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-08-29 16:15:57,234 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-08-29 16:15:57,236 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-08-29 16:15:57,237 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-08-29 16:15:57,243 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-08-29 16:15:57,243 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-08-29 16:15:57,244 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-08-29 16:15:57,245 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-08-29 16:15:57,246 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-08-29 16:15:57,247 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-08-29 16:15:57,247 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-08-29 16:15:57,248 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-08-29 16:15:57,249 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-08-29 16:15:57,250 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-08-29 16:15:57,251 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-08-29 16:15:57,251 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-08-29 16:15:57,252 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-08-29 16:15:57,252 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-08-29 16:15:57,252 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-08-29 16:15:57,254 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-08-29 16:15:57,254 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-08-29 16:15:57,258 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-08-29 16:15:57,295 INFO L113 SettingsManager]: Loading preferences was successful [2021-08-29 16:15:57,295 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-08-29 16:15:57,296 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-08-29 16:15:57,296 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-08-29 16:15:57,298 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-08-29 16:15:57,298 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-08-29 16:15:57,298 INFO L138 SettingsManager]: * Use SBE=true [2021-08-29 16:15:57,299 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-08-29 16:15:57,299 INFO L138 SettingsManager]: * sizeof long=4 [2021-08-29 16:15:57,299 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-08-29 16:15:57,300 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-08-29 16:15:57,300 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-08-29 16:15:57,300 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-08-29 16:15:57,300 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-08-29 16:15:57,301 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-08-29 16:15:57,301 INFO L138 SettingsManager]: * sizeof long double=12 [2021-08-29 16:15:57,301 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-08-29 16:15:57,301 INFO L138 SettingsManager]: * Use constant arrays=true [2021-08-29 16:15:57,301 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-08-29 16:15:57,301 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-08-29 16:15:57,302 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-08-29 16:15:57,302 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-08-29 16:15:57,310 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-08-29 16:15:57,310 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-08-29 16:15:57,310 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-08-29 16:15:57,310 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-08-29 16:15:57,310 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-08-29 16:15:57,310 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-08-29 16:15:57,310 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-08-29 16:15:57,311 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-08-29 16:15:57,311 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9558026aa74bc39759eb2664747acd02f73fafe3 [2021-08-29 16:15:57,643 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-08-29 16:15:57,677 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-08-29 16:15:57,680 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-08-29 16:15:57,681 INFO L271 PluginConnector]: Initializing CDTParser... [2021-08-29 16:15:57,682 INFO L275 PluginConnector]: CDTParser initialized [2021-08-29 16:15:57,683 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2021-08-29 16:15:57,745 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/43fe6ac74/31ac4ec737ad48f5b346e70a52cf5e49/FLAG09a2b7b0f [2021-08-29 16:15:58,282 INFO L306 CDTParser]: Found 1 translation units. [2021-08-29 16:15:58,284 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2021-08-29 16:15:58,298 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/43fe6ac74/31ac4ec737ad48f5b346e70a52cf5e49/FLAG09a2b7b0f [2021-08-29 16:15:58,605 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/43fe6ac74/31ac4ec737ad48f5b346e70a52cf5e49 [2021-08-29 16:15:58,608 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-08-29 16:15:58,609 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-08-29 16:15:58,610 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-08-29 16:15:58,610 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-08-29 16:15:58,613 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-08-29 16:15:58,614 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.08 04:15:58" (1/1) ... [2021-08-29 16:15:58,614 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1ece84ad and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:58, skipping insertion in model container [2021-08-29 16:15:58,615 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.08 04:15:58" (1/1) ... [2021-08-29 16:15:58,620 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-08-29 16:15:58,665 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-08-29 16:15:58,811 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c[7057,7070] [2021-08-29 16:15:58,924 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-08-29 16:15:58,937 INFO L203 MainTranslator]: Completed pre-run [2021-08-29 16:15:58,994 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c[7057,7070] [2021-08-29 16:15:59,031 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-08-29 16:15:59,053 INFO L208 MainTranslator]: Completed translation [2021-08-29 16:15:59,054 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59 WrapperNode [2021-08-29 16:15:59,055 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-08-29 16:15:59,057 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-08-29 16:15:59,057 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-08-29 16:15:59,058 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-08-29 16:15:59,063 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59" (1/1) ... [2021-08-29 16:15:59,089 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59" (1/1) ... [2021-08-29 16:15:59,153 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-08-29 16:15:59,154 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-08-29 16:15:59,154 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-08-29 16:15:59,154 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-08-29 16:15:59,161 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59" (1/1) ... [2021-08-29 16:15:59,162 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59" (1/1) ... [2021-08-29 16:15:59,168 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59" (1/1) ... [2021-08-29 16:15:59,169 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59" (1/1) ... [2021-08-29 16:15:59,184 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59" (1/1) ... [2021-08-29 16:15:59,199 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59" (1/1) ... [2021-08-29 16:15:59,212 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59" (1/1) ... [2021-08-29 16:15:59,229 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-08-29 16:15:59,231 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-08-29 16:15:59,231 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-08-29 16:15:59,232 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-08-29 16:15:59,233 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59" (1/1) ... [2021-08-29 16:15:59,239 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-08-29 16:15:59,249 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-08-29 16:15:59,266 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-08-29 16:15:59,273 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-08-29 16:15:59,302 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-08-29 16:15:59,302 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-08-29 16:15:59,303 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-08-29 16:15:59,303 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-08-29 16:15:59,933 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-08-29 16:15:59,933 INFO L299 CfgBuilder]: Removed 354 assume(true) statements. [2021-08-29 16:15:59,936 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.08 04:15:59 BoogieIcfgContainer [2021-08-29 16:15:59,936 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-08-29 16:15:59,937 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-08-29 16:15:59,938 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-08-29 16:15:59,941 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-08-29 16:15:59,941 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.08 04:15:58" (1/3) ... [2021-08-29 16:15:59,942 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44e15b1d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.08 04:15:59, skipping insertion in model container [2021-08-29 16:15:59,942 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.08 04:15:59" (2/3) ... [2021-08-29 16:15:59,942 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44e15b1d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.08 04:15:59, skipping insertion in model container [2021-08-29 16:15:59,943 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.08 04:15:59" (3/3) ... [2021-08-29 16:15:59,944 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product61.cil.c [2021-08-29 16:15:59,949 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-08-29 16:15:59,950 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2021-08-29 16:16:00,001 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-08-29 16:16:00,008 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-08-29 16:16:00,009 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2021-08-29 16:16:00,031 INFO L276 IsEmpty]: Start isEmpty. Operand has 231 states, 227 states have (on average 1.5198237885462555) internal successors, (345), 230 states have internal predecessors, (345), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:00,049 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2021-08-29 16:16:00,049 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:00,050 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:00,051 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:00,058 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:00,059 INFO L82 PathProgramCache]: Analyzing trace with hash 1389216571, now seen corresponding path program 1 times [2021-08-29 16:16:00,067 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:00,068 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1679273761] [2021-08-29 16:16:00,068 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:00,069 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:00,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:00,345 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:00,346 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:00,347 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1679273761] [2021-08-29 16:16:00,347 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1679273761] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:00,347 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:00,348 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-08-29 16:16:00,349 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [26327522] [2021-08-29 16:16:00,353 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-08-29 16:16:00,353 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:00,391 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-08-29 16:16:00,392 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-08-29 16:16:00,396 INFO L87 Difference]: Start difference. First operand has 231 states, 227 states have (on average 1.5198237885462555) internal successors, (345), 230 states have internal predecessors, (345), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:00,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:00,897 INFO L93 Difference]: Finished difference Result 456 states and 683 transitions. [2021-08-29 16:16:00,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-08-29 16:16:00,900 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2021-08-29 16:16:00,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:00,915 INFO L225 Difference]: With dead ends: 456 [2021-08-29 16:16:00,915 INFO L226 Difference]: Without dead ends: 227 [2021-08-29 16:16:00,920 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.03ms TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-08-29 16:16:00,924 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 338 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 317.28ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 338 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 3.82ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 338 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 425.25ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:00,925 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 0 Invalid, 338 Unknown, 0 Unchecked, 3.82ms Time], IncrementalHoareTripleChecker [0 Valid, 338 Invalid, 0 Unknown, 0 Unchecked, 425.25ms Time] [2021-08-29 16:16:00,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2021-08-29 16:16:00,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 227. [2021-08-29 16:16:00,988 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 224 states have (on average 1.4866071428571428) internal successors, (333), 226 states have internal predecessors, (333), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:00,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 333 transitions. [2021-08-29 16:16:00,991 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 333 transitions. Word has length 18 [2021-08-29 16:16:00,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:00,991 INFO L470 AbstractCegarLoop]: Abstraction has 227 states and 333 transitions. [2021-08-29 16:16:00,991 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:00,992 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 333 transitions. [2021-08-29 16:16:00,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-08-29 16:16:00,993 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:00,993 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:00,993 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-08-29 16:16:00,993 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:00,994 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:00,994 INFO L82 PathProgramCache]: Analyzing trace with hash 478185818, now seen corresponding path program 1 times [2021-08-29 16:16:00,994 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:00,995 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [922804894] [2021-08-29 16:16:00,995 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:00,995 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:01,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:01,062 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:01,062 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:01,063 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [922804894] [2021-08-29 16:16:01,063 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [922804894] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:01,063 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:01,063 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-29 16:16:01,063 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [885001025] [2021-08-29 16:16:01,064 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-29 16:16:01,065 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:01,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-29 16:16:01,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:16:01,066 INFO L87 Difference]: Start difference. First operand 227 states and 333 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:01,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:01,253 INFO L93 Difference]: Finished difference Result 227 states and 333 transitions. [2021-08-29 16:16:01,253 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-29 16:16:01,254 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-08-29 16:16:01,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:01,256 INFO L225 Difference]: With dead ends: 227 [2021-08-29 16:16:01,256 INFO L226 Difference]: Without dead ends: 85 [2021-08-29 16:16:01,258 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 3.10ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:16:01,259 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 117 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 122.76ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.23ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 172.54ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:01,260 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [117 Valid, 0 Invalid, 129 Unknown, 0 Unchecked, 1.23ms Time], IncrementalHoareTripleChecker [0 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 172.54ms Time] [2021-08-29 16:16:01,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-08-29 16:16:01,270 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-08-29 16:16:01,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 84 states have (on average 1.4761904761904763) internal successors, (124), 84 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:01,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 124 transitions. [2021-08-29 16:16:01,272 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 124 transitions. Word has length 19 [2021-08-29 16:16:01,272 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:01,272 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 124 transitions. [2021-08-29 16:16:01,273 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:01,273 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 124 transitions. [2021-08-29 16:16:01,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-08-29 16:16:01,274 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:01,275 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:01,275 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-08-29 16:16:01,276 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:01,277 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:01,277 INFO L82 PathProgramCache]: Analyzing trace with hash 1017898692, now seen corresponding path program 1 times [2021-08-29 16:16:01,278 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:01,279 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1098650966] [2021-08-29 16:16:01,279 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:01,279 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:01,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:01,412 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:01,412 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:01,412 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1098650966] [2021-08-29 16:16:01,413 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1098650966] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:01,413 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:01,413 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:16:01,413 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [326318234] [2021-08-29 16:16:01,414 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-29 16:16:01,414 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:01,414 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-29 16:16:01,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-08-29 16:16:01,415 INFO L87 Difference]: Start difference. First operand 85 states and 124 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:01,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:01,628 INFO L93 Difference]: Finished difference Result 164 states and 242 transitions. [2021-08-29 16:16:01,629 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-29 16:16:01,629 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-08-29 16:16:01,629 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:01,630 INFO L225 Difference]: With dead ends: 164 [2021-08-29 16:16:01,630 INFO L226 Difference]: Without dead ends: 85 [2021-08-29 16:16:01,630 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 23.80ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:16:01,631 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 361 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 138.43ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 361 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.18ms SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 185.49ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:01,632 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [361 Valid, 0 Invalid, 129 Unknown, 0 Unchecked, 2.18ms Time], IncrementalHoareTripleChecker [1 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 185.49ms Time] [2021-08-29 16:16:01,632 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-08-29 16:16:01,636 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-08-29 16:16:01,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 84 states have (on average 1.4642857142857142) internal successors, (123), 84 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:01,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 123 transitions. [2021-08-29 16:16:01,639 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 123 transitions. Word has length 24 [2021-08-29 16:16:01,639 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:01,639 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 123 transitions. [2021-08-29 16:16:01,639 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:01,640 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 123 transitions. [2021-08-29 16:16:01,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-08-29 16:16:01,644 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:01,644 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:01,645 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-08-29 16:16:01,645 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:01,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:01,646 INFO L82 PathProgramCache]: Analyzing trace with hash 1367117657, now seen corresponding path program 1 times [2021-08-29 16:16:01,647 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:01,647 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [218809517] [2021-08-29 16:16:01,647 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:01,647 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:01,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:01,717 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:01,717 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:01,717 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [218809517] [2021-08-29 16:16:01,718 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [218809517] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:01,718 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:01,718 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-08-29 16:16:01,718 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [663495551] [2021-08-29 16:16:01,719 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-08-29 16:16:01,719 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:01,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-08-29 16:16:01,720 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:16:01,720 INFO L87 Difference]: Start difference. First operand 85 states and 123 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:01,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:01,914 INFO L93 Difference]: Finished difference Result 172 states and 251 transitions. [2021-08-29 16:16:01,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-08-29 16:16:01,915 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2021-08-29 16:16:01,915 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:01,916 INFO L225 Difference]: With dead ends: 172 [2021-08-29 16:16:01,916 INFO L226 Difference]: Without dead ends: 93 [2021-08-29 16:16:01,916 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 1.96ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-08-29 16:16:01,918 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 58 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 130.43ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.86ms SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 184.68ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:01,918 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [58 Valid, 0 Invalid, 155 Unknown, 0 Unchecked, 0.86ms Time], IncrementalHoareTripleChecker [10 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 184.68ms Time] [2021-08-29 16:16:01,919 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2021-08-29 16:16:01,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 91. [2021-08-29 16:16:01,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 90 states have (on average 1.4222222222222223) internal successors, (128), 90 states have internal predecessors, (128), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:01,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 128 transitions. [2021-08-29 16:16:01,925 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 128 transitions. Word has length 27 [2021-08-29 16:16:01,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:01,925 INFO L470 AbstractCegarLoop]: Abstraction has 91 states and 128 transitions. [2021-08-29 16:16:01,926 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:01,926 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 128 transitions. [2021-08-29 16:16:01,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-08-29 16:16:01,927 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:01,927 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:01,927 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-08-29 16:16:01,927 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:01,928 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:01,928 INFO L82 PathProgramCache]: Analyzing trace with hash 166613997, now seen corresponding path program 1 times [2021-08-29 16:16:01,928 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:01,929 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [895956976] [2021-08-29 16:16:01,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:01,929 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:01,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:01,979 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:01,980 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:01,980 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [895956976] [2021-08-29 16:16:01,980 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [895956976] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:01,981 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:01,981 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-29 16:16:01,981 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [504600673] [2021-08-29 16:16:01,981 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:16:01,981 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:01,982 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:16:01,983 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:16:01,983 INFO L87 Difference]: Start difference. First operand 91 states and 128 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:02,562 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:02,562 INFO L93 Difference]: Finished difference Result 444 states and 640 transitions. [2021-08-29 16:16:02,563 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-29 16:16:02,563 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2021-08-29 16:16:02,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:02,565 INFO L225 Difference]: With dead ends: 444 [2021-08-29 16:16:02,565 INFO L226 Difference]: Without dead ends: 359 [2021-08-29 16:16:02,565 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 23.83ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:16:02,567 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 321 mSDsluCounter, 452 mSDsCounter, 0 mSdLazyCounter, 683 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 393.35ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 691 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 4.72ms SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 683 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 517.90ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:02,567 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [321 Valid, 0 Invalid, 691 Unknown, 0 Unchecked, 4.72ms Time], IncrementalHoareTripleChecker [8 Valid, 683 Invalid, 0 Unknown, 0 Unchecked, 517.90ms Time] [2021-08-29 16:16:02,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 359 states. [2021-08-29 16:16:02,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 359 to 139. [2021-08-29 16:16:02,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 138 states have (on average 1.391304347826087) internal successors, (192), 138 states have internal predecessors, (192), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:02,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 192 transitions. [2021-08-29 16:16:02,580 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 192 transitions. Word has length 33 [2021-08-29 16:16:02,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:02,580 INFO L470 AbstractCegarLoop]: Abstraction has 139 states and 192 transitions. [2021-08-29 16:16:02,581 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:02,581 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 192 transitions. [2021-08-29 16:16:02,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-08-29 16:16:02,582 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:02,582 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:02,582 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-08-29 16:16:02,582 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:02,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:02,583 INFO L82 PathProgramCache]: Analyzing trace with hash 1323909935, now seen corresponding path program 1 times [2021-08-29 16:16:02,583 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:02,583 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1788185488] [2021-08-29 16:16:02,583 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:02,584 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:02,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:02,628 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:02,628 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:02,628 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1788185488] [2021-08-29 16:16:02,628 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1788185488] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:02,629 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:02,629 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-08-29 16:16:02,629 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [494401608] [2021-08-29 16:16:02,629 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-08-29 16:16:02,630 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:02,630 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-08-29 16:16:02,630 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-29 16:16:02,630 INFO L87 Difference]: Start difference. First operand 139 states and 192 transitions. Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:02,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:02,892 INFO L93 Difference]: Finished difference Result 294 states and 413 transitions. [2021-08-29 16:16:02,893 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-08-29 16:16:02,893 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2021-08-29 16:16:02,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:02,894 INFO L225 Difference]: With dead ends: 294 [2021-08-29 16:16:02,894 INFO L226 Difference]: Without dead ends: 209 [2021-08-29 16:16:02,894 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 4.38ms TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-29 16:16:02,895 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 93 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 369 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 186.70ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 375 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.36ms SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 369 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 239.73ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:02,895 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [93 Valid, 0 Invalid, 375 Unknown, 0 Unchecked, 1.36ms Time], IncrementalHoareTripleChecker [6 Valid, 369 Invalid, 0 Unknown, 0 Unchecked, 239.73ms Time] [2021-08-29 16:16:02,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2021-08-29 16:16:02,906 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 206. [2021-08-29 16:16:02,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 206 states, 205 states have (on average 1.3902439024390243) internal successors, (285), 205 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:02,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206 states to 206 states and 285 transitions. [2021-08-29 16:16:02,908 INFO L78 Accepts]: Start accepts. Automaton has 206 states and 285 transitions. Word has length 34 [2021-08-29 16:16:02,908 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:02,908 INFO L470 AbstractCegarLoop]: Abstraction has 206 states and 285 transitions. [2021-08-29 16:16:02,908 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:02,908 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 285 transitions. [2021-08-29 16:16:02,909 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-08-29 16:16:02,909 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:02,909 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:02,910 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-08-29 16:16:02,910 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:02,910 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:02,910 INFO L82 PathProgramCache]: Analyzing trace with hash 312792685, now seen corresponding path program 1 times [2021-08-29 16:16:02,911 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:02,911 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1731478456] [2021-08-29 16:16:02,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:02,911 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:02,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:02,955 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:02,956 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:02,956 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1731478456] [2021-08-29 16:16:02,956 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1731478456] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:02,956 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:02,957 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-29 16:16:02,957 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [991951083] [2021-08-29 16:16:02,957 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-08-29 16:16:02,957 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:02,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-08-29 16:16:02,958 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-29 16:16:02,958 INFO L87 Difference]: Start difference. First operand 206 states and 285 transitions. Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:03,326 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:03,327 INFO L93 Difference]: Finished difference Result 575 states and 806 transitions. [2021-08-29 16:16:03,327 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-29 16:16:03,327 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2021-08-29 16:16:03,327 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:03,329 INFO L225 Difference]: With dead ends: 575 [2021-08-29 16:16:03,329 INFO L226 Difference]: Without dead ends: 422 [2021-08-29 16:16:03,330 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 8.21ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:16:03,331 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 160 mSDsluCounter, 246 mSDsCounter, 0 mSdLazyCounter, 522 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 254.05ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 160 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 531 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.49ms SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 522 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 327.09ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:03,331 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [160 Valid, 0 Invalid, 531 Unknown, 0 Unchecked, 2.49ms Time], IncrementalHoareTripleChecker [9 Valid, 522 Invalid, 0 Unknown, 0 Unchecked, 327.09ms Time] [2021-08-29 16:16:03,332 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 422 states. [2021-08-29 16:16:03,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 422 to 206. [2021-08-29 16:16:03,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 206 states, 205 states have (on average 1.3756097560975609) internal successors, (282), 205 states have internal predecessors, (282), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:03,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206 states to 206 states and 282 transitions. [2021-08-29 16:16:03,347 INFO L78 Accepts]: Start accepts. Automaton has 206 states and 282 transitions. Word has length 34 [2021-08-29 16:16:03,347 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:03,347 INFO L470 AbstractCegarLoop]: Abstraction has 206 states and 282 transitions. [2021-08-29 16:16:03,347 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:03,347 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 282 transitions. [2021-08-29 16:16:03,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-08-29 16:16:03,348 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:03,348 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:03,348 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-08-29 16:16:03,349 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:03,349 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:03,349 INFO L82 PathProgramCache]: Analyzing trace with hash 570958123, now seen corresponding path program 1 times [2021-08-29 16:16:03,350 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:03,350 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [273079343] [2021-08-29 16:16:03,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:03,350 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:03,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:03,391 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:03,391 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:03,392 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [273079343] [2021-08-29 16:16:03,392 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [273079343] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:03,392 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:03,392 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:16:03,392 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1901248538] [2021-08-29 16:16:03,393 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:16:03,393 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:03,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:16:03,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:16:03,394 INFO L87 Difference]: Start difference. First operand 206 states and 282 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:03,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:03,786 INFO L93 Difference]: Finished difference Result 618 states and 858 transitions. [2021-08-29 16:16:03,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-29 16:16:03,786 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2021-08-29 16:16:03,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:03,788 INFO L225 Difference]: With dead ends: 618 [2021-08-29 16:16:03,788 INFO L226 Difference]: Without dead ends: 418 [2021-08-29 16:16:03,789 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 16.62ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-08-29 16:16:03,790 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 296 mSDsluCounter, 311 mSDsCounter, 0 mSdLazyCounter, 520 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 262.75ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 296 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 528 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.57ms SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 520 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 342.10ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:03,790 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [296 Valid, 0 Invalid, 528 Unknown, 0 Unchecked, 2.57ms Time], IncrementalHoareTripleChecker [8 Valid, 520 Invalid, 0 Unknown, 0 Unchecked, 342.10ms Time] [2021-08-29 16:16:03,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 418 states. [2021-08-29 16:16:03,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 418 to 218. [2021-08-29 16:16:03,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 217 states have (on average 1.3410138248847927) internal successors, (291), 217 states have internal predecessors, (291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:03,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 291 transitions. [2021-08-29 16:16:03,813 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 291 transitions. Word has length 34 [2021-08-29 16:16:03,814 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:03,814 INFO L470 AbstractCegarLoop]: Abstraction has 218 states and 291 transitions. [2021-08-29 16:16:03,815 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:03,815 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 291 transitions. [2021-08-29 16:16:03,816 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-08-29 16:16:03,817 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:03,817 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:03,817 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-08-29 16:16:03,817 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:03,818 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:03,818 INFO L82 PathProgramCache]: Analyzing trace with hash -598753245, now seen corresponding path program 1 times [2021-08-29 16:16:03,818 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:03,818 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [754881452] [2021-08-29 16:16:03,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:03,821 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:03,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:03,957 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:03,957 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:03,957 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [754881452] [2021-08-29 16:16:03,958 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [754881452] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:03,958 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:03,958 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:16:03,958 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [810677570] [2021-08-29 16:16:03,959 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-29 16:16:03,964 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:03,964 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-29 16:16:03,965 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-08-29 16:16:03,965 INFO L87 Difference]: Start difference. First operand 218 states and 291 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:04,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:04,789 INFO L93 Difference]: Finished difference Result 1297 states and 1697 transitions. [2021-08-29 16:16:04,789 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-08-29 16:16:04,790 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2021-08-29 16:16:04,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:04,794 INFO L225 Difference]: With dead ends: 1297 [2021-08-29 16:16:04,794 INFO L226 Difference]: Without dead ends: 1085 [2021-08-29 16:16:04,795 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 84.90ms TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-08-29 16:16:04,795 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 512 mSDsluCounter, 651 mSDsCounter, 0 mSdLazyCounter, 888 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 496.43ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 512 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 914 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 5.22ms SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 888 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 644.57ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:04,795 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [512 Valid, 0 Invalid, 914 Unknown, 0 Unchecked, 5.22ms Time], IncrementalHoareTripleChecker [26 Valid, 888 Invalid, 0 Unknown, 0 Unchecked, 644.57ms Time] [2021-08-29 16:16:04,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1085 states. [2021-08-29 16:16:04,825 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1085 to 416. [2021-08-29 16:16:04,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 416 states, 415 states have (on average 1.3156626506024096) internal successors, (546), 415 states have internal predecessors, (546), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:04,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 416 states to 416 states and 546 transitions. [2021-08-29 16:16:04,828 INFO L78 Accepts]: Start accepts. Automaton has 416 states and 546 transitions. Word has length 37 [2021-08-29 16:16:04,828 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:04,828 INFO L470 AbstractCegarLoop]: Abstraction has 416 states and 546 transitions. [2021-08-29 16:16:04,828 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:04,829 INFO L276 IsEmpty]: Start isEmpty. Operand 416 states and 546 transitions. [2021-08-29 16:16:04,829 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-08-29 16:16:04,829 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:04,829 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:04,830 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-08-29 16:16:04,830 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:04,830 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:04,830 INFO L82 PathProgramCache]: Analyzing trace with hash 81305125, now seen corresponding path program 1 times [2021-08-29 16:16:04,831 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:04,831 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1710492298] [2021-08-29 16:16:04,831 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:04,831 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:04,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:04,871 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:04,872 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:04,872 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1710492298] [2021-08-29 16:16:04,872 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1710492298] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:04,876 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:04,877 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:16:04,877 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1641340628] [2021-08-29 16:16:04,877 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:16:04,877 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:04,878 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:16:04,878 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:16:04,878 INFO L87 Difference]: Start difference. First operand 416 states and 546 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:05,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:05,287 INFO L93 Difference]: Finished difference Result 1036 states and 1397 transitions. [2021-08-29 16:16:05,288 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-29 16:16:05,291 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2021-08-29 16:16:05,291 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:05,294 INFO L225 Difference]: With dead ends: 1036 [2021-08-29 16:16:05,294 INFO L226 Difference]: Without dead ends: 626 [2021-08-29 16:16:05,295 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 20.53ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:16:05,296 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 169 mSDsluCounter, 326 mSDsCounter, 0 mSdLazyCounter, 524 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 253.73ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 528 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.30ms SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 524 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 335.21ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:05,296 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [169 Valid, 0 Invalid, 528 Unknown, 0 Unchecked, 2.30ms Time], IncrementalHoareTripleChecker [4 Valid, 524 Invalid, 0 Unknown, 0 Unchecked, 335.21ms Time] [2021-08-29 16:16:05,297 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626 states. [2021-08-29 16:16:05,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626 to 320. [2021-08-29 16:16:05,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 319 states have (on average 1.2884012539184952) internal successors, (411), 319 states have internal predecessors, (411), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:05,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 411 transitions. [2021-08-29 16:16:05,325 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 411 transitions. Word has length 37 [2021-08-29 16:16:05,326 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:05,326 INFO L470 AbstractCegarLoop]: Abstraction has 320 states and 411 transitions. [2021-08-29 16:16:05,326 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:05,326 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 411 transitions. [2021-08-29 16:16:05,327 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-08-29 16:16:05,327 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:05,327 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:05,327 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-08-29 16:16:05,327 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:05,328 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:05,328 INFO L82 PathProgramCache]: Analyzing trace with hash 1988742173, now seen corresponding path program 1 times [2021-08-29 16:16:05,328 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:05,328 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2078783306] [2021-08-29 16:16:05,329 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:05,329 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:05,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:05,372 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:05,372 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:05,373 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2078783306] [2021-08-29 16:16:05,373 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2078783306] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:05,373 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:05,373 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:16:05,373 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1697753697] [2021-08-29 16:16:05,374 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:16:05,374 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:05,374 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:16:05,374 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:16:05,375 INFO L87 Difference]: Start difference. First operand 320 states and 411 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:05,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:05,766 INFO L93 Difference]: Finished difference Result 786 states and 1003 transitions. [2021-08-29 16:16:05,766 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-29 16:16:05,766 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2021-08-29 16:16:05,767 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:05,768 INFO L225 Difference]: With dead ends: 786 [2021-08-29 16:16:05,769 INFO L226 Difference]: Without dead ends: 472 [2021-08-29 16:16:05,769 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 21.48ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:16:05,770 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 196 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 489 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 244.90ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 496 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 2.13ms SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 489 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 320.86ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:05,770 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [196 Valid, 0 Invalid, 496 Unknown, 0 Unchecked, 2.13ms Time], IncrementalHoareTripleChecker [7 Valid, 489 Invalid, 0 Unknown, 0 Unchecked, 320.86ms Time] [2021-08-29 16:16:05,771 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 472 states. [2021-08-29 16:16:05,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 472 to 300. [2021-08-29 16:16:05,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 299 states have (on average 1.2508361204013378) internal successors, (374), 299 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:05,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 374 transitions. [2021-08-29 16:16:05,791 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 374 transitions. Word has length 38 [2021-08-29 16:16:05,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:05,791 INFO L470 AbstractCegarLoop]: Abstraction has 300 states and 374 transitions. [2021-08-29 16:16:05,792 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:05,792 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 374 transitions. [2021-08-29 16:16:05,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-08-29 16:16:05,792 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:05,793 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:05,793 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-08-29 16:16:05,793 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:05,794 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:05,794 INFO L82 PathProgramCache]: Analyzing trace with hash 756271311, now seen corresponding path program 1 times [2021-08-29 16:16:05,794 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:05,794 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [477081614] [2021-08-29 16:16:05,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:05,794 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:05,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:05,833 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-08-29 16:16:05,834 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:05,834 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [477081614] [2021-08-29 16:16:05,834 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [477081614] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:05,834 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:05,834 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:16:05,834 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2044632837] [2021-08-29 16:16:05,835 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:16:05,835 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:05,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:16:05,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:16:05,836 INFO L87 Difference]: Start difference. First operand 300 states and 374 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:06,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:06,089 INFO L93 Difference]: Finished difference Result 695 states and 869 transitions. [2021-08-29 16:16:06,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-08-29 16:16:06,089 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2021-08-29 16:16:06,090 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:06,091 INFO L225 Difference]: With dead ends: 695 [2021-08-29 16:16:06,092 INFO L226 Difference]: Without dead ends: 401 [2021-08-29 16:16:06,092 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 18.47ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-08-29 16:16:06,093 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 101 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 302 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 153.67ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 302 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.06ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 302 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 200.58ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:06,093 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [101 Valid, 0 Invalid, 302 Unknown, 0 Unchecked, 1.06ms Time], IncrementalHoareTripleChecker [0 Valid, 302 Invalid, 0 Unknown, 0 Unchecked, 200.58ms Time] [2021-08-29 16:16:06,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 401 states. [2021-08-29 16:16:06,112 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 401 to 300. [2021-08-29 16:16:06,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 299 states have (on average 1.2374581939799332) internal successors, (370), 299 states have internal predecessors, (370), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:06,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 370 transitions. [2021-08-29 16:16:06,114 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 370 transitions. Word has length 54 [2021-08-29 16:16:06,115 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:06,115 INFO L470 AbstractCegarLoop]: Abstraction has 300 states and 370 transitions. [2021-08-29 16:16:06,115 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:06,115 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 370 transitions. [2021-08-29 16:16:06,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-08-29 16:16:06,116 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:06,117 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:06,117 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-08-29 16:16:06,117 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:06,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:06,118 INFO L82 PathProgramCache]: Analyzing trace with hash 683884753, now seen corresponding path program 1 times [2021-08-29 16:16:06,118 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:06,118 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [963382220] [2021-08-29 16:16:06,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:06,118 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:06,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:06,161 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-08-29 16:16:06,162 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:06,162 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [963382220] [2021-08-29 16:16:06,162 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [963382220] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:06,162 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:06,162 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-29 16:16:06,163 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1748858978] [2021-08-29 16:16:06,163 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-08-29 16:16:06,163 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:06,164 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-08-29 16:16:06,164 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-08-29 16:16:06,164 INFO L87 Difference]: Start difference. First operand 300 states and 370 transitions. Second operand has 4 states, 4 states have (on average 13.0) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:06,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:06,366 INFO L93 Difference]: Finished difference Result 642 states and 801 transitions. [2021-08-29 16:16:06,367 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-08-29 16:16:06,367 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2021-08-29 16:16:06,367 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:06,368 INFO L225 Difference]: With dead ends: 642 [2021-08-29 16:16:06,368 INFO L226 Difference]: Without dead ends: 348 [2021-08-29 16:16:06,369 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 7.83ms TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:16:06,370 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 73 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 230 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 127.73ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 230 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.84ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 230 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 166.71ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:06,370 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [73 Valid, 0 Invalid, 230 Unknown, 0 Unchecked, 0.84ms Time], IncrementalHoareTripleChecker [0 Valid, 230 Invalid, 0 Unknown, 0 Unchecked, 166.71ms Time] [2021-08-29 16:16:06,371 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2021-08-29 16:16:06,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 258. [2021-08-29 16:16:06,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 257 states have (on average 1.2412451361867705) internal successors, (319), 257 states have internal predecessors, (319), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:06,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 319 transitions. [2021-08-29 16:16:06,390 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 319 transitions. Word has length 54 [2021-08-29 16:16:06,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:06,390 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 319 transitions. [2021-08-29 16:16:06,390 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:06,390 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 319 transitions. [2021-08-29 16:16:06,391 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-08-29 16:16:06,391 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:06,391 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:06,391 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-08-29 16:16:06,392 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:06,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:06,392 INFO L82 PathProgramCache]: Analyzing trace with hash -110145967, now seen corresponding path program 1 times [2021-08-29 16:16:06,392 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:06,392 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [828118463] [2021-08-29 16:16:06,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:06,393 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:06,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:06,442 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-08-29 16:16:06,442 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:06,442 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [828118463] [2021-08-29 16:16:06,442 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [828118463] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:06,443 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:06,443 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-08-29 16:16:06,443 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1900877612] [2021-08-29 16:16:06,443 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:16:06,443 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:06,444 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:16:06,444 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:16:06,444 INFO L87 Difference]: Start difference. First operand 258 states and 319 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:06,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:06,809 INFO L93 Difference]: Finished difference Result 666 states and 822 transitions. [2021-08-29 16:16:06,809 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-08-29 16:16:06,809 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2021-08-29 16:16:06,810 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:06,811 INFO L225 Difference]: With dead ends: 666 [2021-08-29 16:16:06,811 INFO L226 Difference]: Without dead ends: 414 [2021-08-29 16:16:06,812 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 19.52ms TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-08-29 16:16:06,812 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 236 mSDsluCounter, 230 mSDsCounter, 0 mSdLazyCounter, 385 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 237.82ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 236 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 394 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.90ms SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 385 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 305.30ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:06,813 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [236 Valid, 0 Invalid, 394 Unknown, 0 Unchecked, 1.90ms Time], IncrementalHoareTripleChecker [9 Valid, 385 Invalid, 0 Unknown, 0 Unchecked, 305.30ms Time] [2021-08-29 16:16:06,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 414 states. [2021-08-29 16:16:06,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 414 to 258. [2021-08-29 16:16:06,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 257 states have (on average 1.2256809338521402) internal successors, (315), 257 states have internal predecessors, (315), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:06,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 315 transitions. [2021-08-29 16:16:06,835 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 315 transitions. Word has length 55 [2021-08-29 16:16:06,836 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:06,836 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 315 transitions. [2021-08-29 16:16:06,836 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:06,836 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 315 transitions. [2021-08-29 16:16:06,837 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-08-29 16:16:06,837 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:06,837 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:06,837 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-08-29 16:16:06,838 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:06,838 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:06,838 INFO L82 PathProgramCache]: Analyzing trace with hash -1677058370, now seen corresponding path program 1 times [2021-08-29 16:16:06,838 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:06,838 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1313305903] [2021-08-29 16:16:06,839 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:06,839 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:06,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:06,887 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-08-29 16:16:06,887 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:06,887 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1313305903] [2021-08-29 16:16:06,888 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1313305903] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:06,888 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:06,888 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:16:06,888 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [806431391] [2021-08-29 16:16:06,888 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-08-29 16:16:06,889 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:06,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-08-29 16:16:06,889 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-08-29 16:16:06,889 INFO L87 Difference]: Start difference. First operand 258 states and 315 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:07,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:07,452 INFO L93 Difference]: Finished difference Result 833 states and 1030 transitions. [2021-08-29 16:16:07,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-08-29 16:16:07,453 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-08-29 16:16:07,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:07,455 INFO L225 Difference]: With dead ends: 833 [2021-08-29 16:16:07,455 INFO L226 Difference]: Without dead ends: 633 [2021-08-29 16:16:07,456 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 44.90ms TimeCoverageRelationStatistics Valid=51, Invalid=105, Unknown=0, NotChecked=0, Total=156 [2021-08-29 16:16:07,457 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 264 mSDsluCounter, 501 mSDsCounter, 0 mSdLazyCounter, 775 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 351.67ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 264 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 785 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 3.10ms SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 775 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 466.32ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:07,457 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [264 Valid, 0 Invalid, 785 Unknown, 0 Unchecked, 3.10ms Time], IncrementalHoareTripleChecker [10 Valid, 775 Invalid, 0 Unknown, 0 Unchecked, 466.32ms Time] [2021-08-29 16:16:07,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 633 states. [2021-08-29 16:16:07,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 633 to 258. [2021-08-29 16:16:07,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 257 states have (on average 1.2217898832684826) internal successors, (314), 257 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:07,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 314 transitions. [2021-08-29 16:16:07,493 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 314 transitions. Word has length 57 [2021-08-29 16:16:07,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:07,493 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 314 transitions. [2021-08-29 16:16:07,494 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:07,494 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 314 transitions. [2021-08-29 16:16:07,495 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-08-29 16:16:07,495 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:07,495 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:07,496 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-08-29 16:16:07,496 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:07,496 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:07,497 INFO L82 PathProgramCache]: Analyzing trace with hash 902631818, now seen corresponding path program 1 times [2021-08-29 16:16:07,497 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:07,497 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [128284948] [2021-08-29 16:16:07,497 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:07,497 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:07,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:07,556 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-08-29 16:16:07,556 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:07,556 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [128284948] [2021-08-29 16:16:07,558 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [128284948] provided 1 perfect and 0 imperfect interpolant sequences [2021-08-29 16:16:07,558 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-08-29 16:16:07,558 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-08-29 16:16:07,559 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1733039410] [2021-08-29 16:16:07,559 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-08-29 16:16:07,559 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:07,559 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-08-29 16:16:07,560 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-08-29 16:16:07,560 INFO L87 Difference]: Start difference. First operand 258 states and 314 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:07,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:07,890 INFO L93 Difference]: Finished difference Result 782 states and 970 transitions. [2021-08-29 16:16:07,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-08-29 16:16:07,891 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2021-08-29 16:16:07,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:07,893 INFO L225 Difference]: With dead ends: 782 [2021-08-29 16:16:07,894 INFO L226 Difference]: Without dead ends: 582 [2021-08-29 16:16:07,894 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 17.42ms TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-08-29 16:16:07,895 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 260 mSDsluCounter, 316 mSDsCounter, 0 mSdLazyCounter, 454 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 206.04ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 260 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 455 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 1.73ms SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 454 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 270.25ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:07,895 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [260 Valid, 0 Invalid, 455 Unknown, 0 Unchecked, 1.73ms Time], IncrementalHoareTripleChecker [1 Valid, 454 Invalid, 0 Unknown, 0 Unchecked, 270.25ms Time] [2021-08-29 16:16:07,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 582 states. [2021-08-29 16:16:07,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 582 to 264. [2021-08-29 16:16:07,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 263 states have (on average 1.2167300380228137) internal successors, (320), 263 states have internal predecessors, (320), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:07,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 320 transitions. [2021-08-29 16:16:07,916 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 320 transitions. Word has length 63 [2021-08-29 16:16:07,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:07,916 INFO L470 AbstractCegarLoop]: Abstraction has 264 states and 320 transitions. [2021-08-29 16:16:07,916 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:07,917 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 320 transitions. [2021-08-29 16:16:07,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-08-29 16:16:07,917 INFO L505 BasicCegarLoop]: Found error trace [2021-08-29 16:16:07,918 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-08-29 16:16:07,918 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2021-08-29 16:16:07,918 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-08-29 16:16:07,918 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-08-29 16:16:07,919 INFO L82 PathProgramCache]: Analyzing trace with hash 1160797256, now seen corresponding path program 1 times [2021-08-29 16:16:07,919 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-08-29 16:16:07,919 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1247662010] [2021-08-29 16:16:07,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:07,919 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-08-29 16:16:07,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:07,975 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-08-29 16:16:07,975 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-08-29 16:16:07,975 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1247662010] [2021-08-29 16:16:07,976 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1247662010] provided 0 perfect and 1 imperfect interpolant sequences [2021-08-29 16:16:07,976 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [507596207] [2021-08-29 16:16:07,976 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-08-29 16:16:07,976 INFO L170 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-08-29 16:16:07,976 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-08-29 16:16:07,985 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-08-29 16:16:07,986 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-08-29 16:16:08,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-08-29 16:16:08,141 INFO L263 TraceCheckSpWp]: Trace formula consists of 478 conjuncts, 7 conjunts are in the unsatisfiable core [2021-08-29 16:16:08,146 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-08-29 16:16:08,325 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-08-29 16:16:08,326 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-08-29 16:16:08,596 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-08-29 16:16:08,596 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [507596207] provided 0 perfect and 2 imperfect interpolant sequences [2021-08-29 16:16:08,597 INFO L186 FreeRefinementEngine]: Constructing automaton from 0 perfect and 3 imperfect interpolant sequences. [2021-08-29 16:16:08,597 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 5] total 6 [2021-08-29 16:16:08,597 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1204271070] [2021-08-29 16:16:08,597 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-08-29 16:16:08,598 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-08-29 16:16:08,598 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-08-29 16:16:08,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2021-08-29 16:16:08,598 INFO L87 Difference]: Start difference. First operand 264 states and 320 transitions. Second operand has 7 states, 7 states have (on average 10.0) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:09,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-08-29 16:16:09,133 INFO L93 Difference]: Finished difference Result 923 states and 1140 transitions. [2021-08-29 16:16:09,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-08-29 16:16:09,136 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2021-08-29 16:16:09,136 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-08-29 16:16:09,136 INFO L225 Difference]: With dead ends: 923 [2021-08-29 16:16:09,136 INFO L226 Difference]: Without dead ends: 0 [2021-08-29 16:16:09,137 INFO L927 BasicCegarLoop]: 0 DeclaredPredicates, 136 GetRequests, 124 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 61.51ms TimeCoverageRelationStatistics Valid=59, Invalid=97, Unknown=0, NotChecked=0, Total=156 [2021-08-29 16:16:09,139 INFO L928 BasicCegarLoop]: 0 mSDtfsCounter, 319 mSDsluCounter, 403 mSDsCounter, 0 mSdLazyCounter, 609 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 319.31ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 319 SdHoareTripleChecker+Valid, 0 SdHoareTripleChecker+Invalid, 624 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 3.29ms SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 609 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 407.29ms IncrementalHoareTripleChecker+Time [2021-08-29 16:16:09,139 INFO L929 BasicCegarLoop]: SdHoareTripleChecker [319 Valid, 0 Invalid, 624 Unknown, 0 Unchecked, 3.29ms Time], IncrementalHoareTripleChecker [15 Valid, 609 Invalid, 0 Unknown, 0 Unchecked, 407.29ms Time] [2021-08-29 16:16:09,139 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-08-29 16:16:09,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-08-29 16:16:09,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:09,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-08-29 16:16:09,140 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 63 [2021-08-29 16:16:09,140 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-08-29 16:16:09,140 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-08-29 16:16:09,141 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-08-29 16:16:09,141 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-08-29 16:16:09,141 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-08-29 16:16:09,144 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2021-08-29 16:16:09,144 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2021-08-29 16:16:09,145 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2021-08-29 16:16:09,174 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-08-29 16:16:09,360 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2021-08-29 16:16:09,362 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-08-29 16:16:09,367 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,380 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,382 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,383 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,465 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,466 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,467 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,467 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,468 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,468 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,469 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,469 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,742 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,743 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,786 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,787 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,817 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,818 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,819 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,819 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,819 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,820 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,820 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,821 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,965 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:09,965 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,015 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,017 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,017 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,018 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,018 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,019 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,019 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,019 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,020 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,021 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,021 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,021 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,022 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,022 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,023 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,023 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,449 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,449 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,450 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,450 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,451 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,451 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,452 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,453 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,453 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,454 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,475 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,476 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,476 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,477 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,477 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,478 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,478 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:10,479 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,342 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,343 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,343 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,343 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,345 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,346 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,817 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,818 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,818 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,819 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,819 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,842 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,842 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,843 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,844 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,844 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:11,848 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,095 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,096 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,125 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,126 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,126 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,213 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,214 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,214 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,215 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,215 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,215 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,216 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,216 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,216 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,217 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:12,340 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-08-29 16:16:21,191 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 469) no Hoare annotation was computed. [2021-08-29 16:16:21,192 INFO L854 garLoopResultBuilder]: At program point L102(lines 55 103) the Hoare annotation is: false [2021-08-29 16:16:21,192 INFO L858 garLoopResultBuilder]: For program point L368(lines 368 372) no Hoare annotation was computed. [2021-08-29 16:16:21,192 INFO L858 garLoopResultBuilder]: For program point L368-3(lines 368 372) no Hoare annotation was computed. [2021-08-29 16:16:21,192 INFO L858 garLoopResultBuilder]: For program point L368-6(lines 368 372) no Hoare annotation was computed. [2021-08-29 16:16:21,192 INFO L861 garLoopResultBuilder]: At program point L568(lines 549 571) the Hoare annotation is: true [2021-08-29 16:16:21,192 INFO L854 garLoopResultBuilder]: At program point L437(lines 432 440) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse5 (<= ~waterLevel~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse6 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse9 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse10 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0)) (.cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse12 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0) .cse8 .cse9 .cse10 (= ULTIMATE.start_processEnvironment_~tmp~3 0) .cse11 .cse12) (and .cse0 .cse1 (= ~pumpRunning~0 0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse10) (and .cse1 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) .cse2 .cse3 .cse4 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1) (<= 2 ~waterLevel~0) .cse6 .cse7 (<= ~waterLevel~0 2) .cse8 .cse9 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) .cse10 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) .cse11 .cse12))) [2021-08-29 16:16:21,192 INFO L854 garLoopResultBuilder]: At program point L437-1(lines 432 440) the Hoare annotation is: false [2021-08-29 16:16:21,193 INFO L854 garLoopResultBuilder]: At program point L437-2(lines 432 440) the Hoare annotation is: false [2021-08-29 16:16:21,193 INFO L854 garLoopResultBuilder]: At program point L637(lines 632 640) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-08-29 16:16:21,193 INFO L858 garLoopResultBuilder]: For program point L445(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,193 INFO L858 garLoopResultBuilder]: For program point L445-1(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,193 INFO L858 garLoopResultBuilder]: For program point L445-2(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,193 INFO L858 garLoopResultBuilder]: For program point L445-3(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,194 INFO L858 garLoopResultBuilder]: For program point L445-4(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,194 INFO L858 garLoopResultBuilder]: For program point L445-5(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,194 INFO L858 garLoopResultBuilder]: For program point L445-6(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,194 INFO L858 garLoopResultBuilder]: For program point L445-7(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,194 INFO L858 garLoopResultBuilder]: For program point L445-8(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,194 INFO L858 garLoopResultBuilder]: For program point L445-9(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,194 INFO L858 garLoopResultBuilder]: For program point L445-10(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,194 INFO L858 garLoopResultBuilder]: For program point L445-11(lines 445 451) no Hoare annotation was computed. [2021-08-29 16:16:21,195 INFO L858 garLoopResultBuilder]: For program point L380(lines 380 384) no Hoare annotation was computed. [2021-08-29 16:16:21,195 INFO L858 garLoopResultBuilder]: For program point L248(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,195 INFO L858 garLoopResultBuilder]: For program point L248-2(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,195 INFO L858 garLoopResultBuilder]: For program point L248-4(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,195 INFO L858 garLoopResultBuilder]: For program point L248-6(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,195 INFO L858 garLoopResultBuilder]: For program point L248-8(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,195 INFO L858 garLoopResultBuilder]: For program point L248-10(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,196 INFO L858 garLoopResultBuilder]: For program point L248-12(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,196 INFO L858 garLoopResultBuilder]: For program point L248-14(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,196 INFO L858 garLoopResultBuilder]: For program point L248-16(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,196 INFO L858 garLoopResultBuilder]: For program point L248-18(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,196 INFO L858 garLoopResultBuilder]: For program point L248-20(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,196 INFO L858 garLoopResultBuilder]: For program point L248-22(lines 248 254) no Hoare annotation was computed. [2021-08-29 16:16:21,196 INFO L858 garLoopResultBuilder]: For program point L582(lines 582 602) no Hoare annotation was computed. [2021-08-29 16:16:21,197 INFO L858 garLoopResultBuilder]: For program point L582-2(lines 582 602) no Hoare annotation was computed. [2021-08-29 16:16:21,197 INFO L854 garLoopResultBuilder]: At program point L450(lines 441 454) the Hoare annotation is: false [2021-08-29 16:16:21,197 INFO L858 garLoopResultBuilder]: For program point L582-4(lines 582 602) no Hoare annotation was computed. [2021-08-29 16:16:21,197 INFO L854 garLoopResultBuilder]: At program point L450-1(lines 441 454) the Hoare annotation is: false [2021-08-29 16:16:21,197 INFO L854 garLoopResultBuilder]: At program point L450-2(lines 441 454) the Hoare annotation is: false [2021-08-29 16:16:21,197 INFO L854 garLoopResultBuilder]: At program point L450-3(lines 441 454) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse11 (= ~methaneLevelCritical~0 1)) (.cse7 (<= ~waterLevel~0 2)) (.cse8 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse9 (<= ~waterLevel~0 1)) (.cse10 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1)) (.cse5 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse9 .cse10 .cse5 .cse6 .cse11) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse11 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse9 .cse10 .cse5 .cse6))) [2021-08-29 16:16:21,198 INFO L854 garLoopResultBuilder]: At program point L450-4(lines 441 454) the Hoare annotation is: false [2021-08-29 16:16:21,198 INFO L854 garLoopResultBuilder]: At program point L450-5(lines 441 454) the Hoare annotation is: false [2021-08-29 16:16:21,198 INFO L854 garLoopResultBuilder]: At program point L450-6(lines 441 454) the Hoare annotation is: false [2021-08-29 16:16:21,198 INFO L854 garLoopResultBuilder]: At program point L450-7(lines 441 454) the Hoare annotation is: false [2021-08-29 16:16:21,198 INFO L858 garLoopResultBuilder]: For program point L186(lines 186 203) no Hoare annotation was computed. [2021-08-29 16:16:21,198 INFO L854 garLoopResultBuilder]: At program point L450-8(lines 441 454) the Hoare annotation is: false [2021-08-29 16:16:21,199 INFO L858 garLoopResultBuilder]: For program point L186-1(lines 186 203) no Hoare annotation was computed. [2021-08-29 16:16:21,199 INFO L854 garLoopResultBuilder]: At program point L450-9(lines 441 454) the Hoare annotation is: false [2021-08-29 16:16:21,199 INFO L858 garLoopResultBuilder]: For program point L186-2(lines 186 203) no Hoare annotation was computed. [2021-08-29 16:16:21,199 INFO L854 garLoopResultBuilder]: At program point L450-10(lines 441 454) the Hoare annotation is: false [2021-08-29 16:16:21,199 INFO L858 garLoopResultBuilder]: For program point L186-3(lines 186 203) no Hoare annotation was computed. [2021-08-29 16:16:21,199 INFO L854 garLoopResultBuilder]: At program point L450-11(lines 441 454) the Hoare annotation is: false [2021-08-29 16:16:21,199 INFO L858 garLoopResultBuilder]: For program point L186-4(lines 186 203) no Hoare annotation was computed. [2021-08-29 16:16:21,200 INFO L858 garLoopResultBuilder]: For program point L186-5(lines 186 203) no Hoare annotation was computed. [2021-08-29 16:16:21,200 INFO L858 garLoopResultBuilder]: For program point L57(lines 56 101) no Hoare annotation was computed. [2021-08-29 16:16:21,200 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-08-29 16:16:21,200 INFO L858 garLoopResultBuilder]: For program point L190(lines 190 198) no Hoare annotation was computed. [2021-08-29 16:16:21,200 INFO L858 garLoopResultBuilder]: For program point L190-1(lines 190 198) no Hoare annotation was computed. [2021-08-29 16:16:21,200 INFO L858 garLoopResultBuilder]: For program point L190-2(lines 190 198) no Hoare annotation was computed. [2021-08-29 16:16:21,200 INFO L858 garLoopResultBuilder]: For program point L190-3(lines 190 198) no Hoare annotation was computed. [2021-08-29 16:16:21,201 INFO L858 garLoopResultBuilder]: For program point L58(lines 58 62) no Hoare annotation was computed. [2021-08-29 16:16:21,201 INFO L858 garLoopResultBuilder]: For program point L190-4(lines 190 198) no Hoare annotation was computed. [2021-08-29 16:16:21,201 INFO L858 garLoopResultBuilder]: For program point L190-5(lines 190 198) no Hoare annotation was computed. [2021-08-29 16:16:21,201 INFO L858 garLoopResultBuilder]: For program point L588(lines 588 601) no Hoare annotation was computed. [2021-08-29 16:16:21,201 INFO L854 garLoopResultBuilder]: At program point L588-1(lines 1 1006) the Hoare annotation is: (let ((.cse9 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse18 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 1)) (.cse12 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse7 (= ~methaneLevelCritical~0 1)) (.cse16 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse8 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (.cse20 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse21 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse10 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse22 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse23 (<= 2 ~waterLevel~0)) (.cse24 (<= ~waterLevel~0 2)) (.cse13 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse14 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse25 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse15 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0)) (.cse26 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse17 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse19 (= ~pumpRunning~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse5 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse0 .cse2 .cse10 .cse11 .cse3 .cse5 .cse6 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19) (and .cse0 .cse20 .cse21 .cse2 .cse22 .cse23 .cse4 .cse5 .cse6 .cse7 .cse24 .cse13 .cse14 .cse25 .cse26 .cse8 .cse19) (and .cse0 .cse1 .cse20 .cse21 .cse2 .cse22 .cse4 .cse5 .cse6 .cse7 .cse24 .cse25 .cse26 .cse8) (and .cse9 .cse0 .cse1 .cse2 .cse10 .cse11 .cse3 .cse5 .cse6 .cse15 .cse18) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse6 .cse12 .cse7 .cse13 .cse14 .cse16 .cse8 .cse19) (and .cse0 .cse20 .cse21 .cse2 .cse10 .cse11 .cse22 .cse23 .cse5 .cse6 .cse24 .cse13 .cse14 .cse25 .cse15 .cse26 .cse17 .cse19) (and .cse0 .cse1 .cse2 .cse11 .cse5 .cse6 (= ~waterLevel~0 1)))) [2021-08-29 16:16:21,201 INFO L858 garLoopResultBuilder]: For program point L588-2(lines 588 601) no Hoare annotation was computed. [2021-08-29 16:16:21,202 INFO L854 garLoopResultBuilder]: At program point L588-3(lines 1 1006) the Hoare annotation is: false [2021-08-29 16:16:21,202 INFO L858 garLoopResultBuilder]: For program point L588-4(lines 588 601) no Hoare annotation was computed. [2021-08-29 16:16:21,202 INFO L854 garLoopResultBuilder]: At program point L588-5(lines 1 1006) the Hoare annotation is: false [2021-08-29 16:16:21,202 INFO L858 garLoopResultBuilder]: For program point L392(lines 392 396) no Hoare annotation was computed. [2021-08-29 16:16:21,202 INFO L854 garLoopResultBuilder]: At program point L128(lines 127 146) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse8 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse9 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse10 (= ~pumpRunning~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse4 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse5 (= 1 ~systemActive~0)) (.cse11 (= ~methaneLevelCritical~0 1)) (.cse6 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse2 .cse3 .cse7 .cse4 .cse5 .cse8 .cse9 .cse10) (and .cse0 .cse2 .cse7 .cse4 .cse5 .cse11 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse11 .cse6))) [2021-08-29 16:16:21,202 INFO L858 garLoopResultBuilder]: For program point L128-1(lines 128 134) no Hoare annotation was computed. [2021-08-29 16:16:21,202 INFO L854 garLoopResultBuilder]: At program point L128-2(lines 127 146) the Hoare annotation is: false [2021-08-29 16:16:21,203 INFO L854 garLoopResultBuilder]: At program point L128-3(lines 127 146) the Hoare annotation is: false [2021-08-29 16:16:21,203 INFO L858 garLoopResultBuilder]: For program point L592(lines 592 598) no Hoare annotation was computed. [2021-08-29 16:16:21,203 INFO L858 garLoopResultBuilder]: For program point L592-2(lines 592 598) no Hoare annotation was computed. [2021-08-29 16:16:21,203 INFO L854 garLoopResultBuilder]: At program point L460(lines 455 463) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 .cse7 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse8) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse5 .cse6 .cse7 .cse8))) [2021-08-29 16:16:21,203 INFO L858 garLoopResultBuilder]: For program point L592-4(lines 592 598) no Hoare annotation was computed. [2021-08-29 16:16:21,214 INFO L854 garLoopResultBuilder]: At program point L460-1(lines 455 463) the Hoare annotation is: false [2021-08-29 16:16:21,215 INFO L854 garLoopResultBuilder]: At program point L460-2(lines 455 463) the Hoare annotation is: false [2021-08-29 16:16:21,215 INFO L854 garLoopResultBuilder]: At program point L460-3(lines 455 463) the Hoare annotation is: false [2021-08-29 16:16:21,215 INFO L854 garLoopResultBuilder]: At program point L460-4(lines 455 463) the Hoare annotation is: false [2021-08-29 16:16:21,215 INFO L854 garLoopResultBuilder]: At program point L460-5(lines 455 463) the Hoare annotation is: false [2021-08-29 16:16:21,215 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-08-29 16:16:21,215 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 469) no Hoare annotation was computed. [2021-08-29 16:16:21,216 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 72) no Hoare annotation was computed. [2021-08-29 16:16:21,216 INFO L854 garLoopResultBuilder]: At program point L66-1(lines 66 72) the Hoare annotation is: (let ((.cse19 (<= 2 ~waterLevel~0)) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse8 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse10 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse11 (= 1 ~systemActive~0)) (.cse13 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse14 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse23 (= ~waterLevel~0 1)) (.cse17 (= ~pumpRunning~0 1))) (let ((.cse5 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse3 (or (and .cse7 .cse8 .cse19 .cse10 .cse11 .cse13 .cse14 .cse17) (and .cse7 .cse8 .cse10 .cse11 .cse13 .cse14 .cse23 .cse17))) (.cse6 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse0 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse4 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0)) (.cse16 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)) (.cse9 (<= ~waterLevel~0 1)) (.cse12 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse15 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse20 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 1)) (.cse21 (= ~methaneLevelCritical~0 1)) (.cse2 (<= ~waterLevel~0 2)) (.cse22 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (.cse18 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse0 .cse1 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse4 .cse15 .cse5 .cse16 .cse17) (and .cse7 .cse18 .cse8 .cse1 .cse19 .cse10 .cse11 .cse2) (and .cse20 .cse21 .cse2 .cse3 .cse22) (and .cse6 .cse7 .cse18 .cse8 .cse0 .cse1 .cse9 .cse10 .cse11 .cse4 .cse16) (and .cse7 .cse8 .cse9 .cse20 .cse10 .cse11 .cse12 .cse21 .cse13 .cse14 .cse15 .cse22 .cse17) (and .cse7 .cse18 .cse8 .cse20 .cse10 .cse11 .cse21 .cse2 .cse22) (and .cse7 .cse18 .cse8 .cse1 .cse10 .cse11 .cse23)))) [2021-08-29 16:16:21,216 INFO L858 garLoopResultBuilder]: For program point L331(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,216 INFO L858 garLoopResultBuilder]: For program point L331-2(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,216 INFO L858 garLoopResultBuilder]: For program point L331-3(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,216 INFO L858 garLoopResultBuilder]: For program point L331-5(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,217 INFO L858 garLoopResultBuilder]: For program point L331-6(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,217 INFO L858 garLoopResultBuilder]: For program point L331-8(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,217 INFO L858 garLoopResultBuilder]: For program point L331-9(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,217 INFO L858 garLoopResultBuilder]: For program point L331-11(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,217 INFO L858 garLoopResultBuilder]: For program point L331-12(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,217 INFO L858 garLoopResultBuilder]: For program point L331-14(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,217 INFO L858 garLoopResultBuilder]: For program point L331-15(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,218 INFO L858 garLoopResultBuilder]: For program point L331-17(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,218 INFO L858 garLoopResultBuilder]: For program point L331-18(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,218 INFO L858 garLoopResultBuilder]: For program point L331-20(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,218 INFO L858 garLoopResultBuilder]: For program point L331-21(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,218 INFO L858 garLoopResultBuilder]: For program point L331-23(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,218 INFO L858 garLoopResultBuilder]: For program point L331-24(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,218 INFO L858 garLoopResultBuilder]: For program point L331-26(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,218 INFO L858 garLoopResultBuilder]: For program point L331-27(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,219 INFO L858 garLoopResultBuilder]: For program point L331-29(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,219 INFO L858 garLoopResultBuilder]: For program point L331-30(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,219 INFO L858 garLoopResultBuilder]: For program point L331-32(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,219 INFO L858 garLoopResultBuilder]: For program point L331-33(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,219 INFO L858 garLoopResultBuilder]: For program point L331-35(lines 331 335) no Hoare annotation was computed. [2021-08-29 16:16:21,219 INFO L854 garLoopResultBuilder]: At program point L135(lines 135 141) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse19 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse10 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse12 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse13 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse20 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse21 (= ~methaneLevelCritical~0 0)) (.cse14 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse15 (<= 2 ~waterLevel~0)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse16 (<= ~waterLevel~0 2)) (.cse7 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse8 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse17 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse18 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse11 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse12 .cse13 .cse1 .cse14 .cse15 .cse3 .cse4 .cse6 .cse16 .cse7 .cse8 .cse17 .cse18 .cse10 .cse11) (and .cse0 .cse19 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse0 .cse1 .cse20 .cse21 .cse2 .cse3 .cse4 .cse5 .cse7 .cse8 .cse9 (= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse11) (and .cse0 .cse19 .cse1 .cse21 .cse2 .cse3 .cse4) (and .cse0 .cse19 .cse12 .cse13 .cse1 .cse14 .cse3 .cse4 .cse6 .cse16 .cse17 .cse18 .cse10) (and .cse0 .cse12 .cse13 .cse1 .cse20 .cse21 .cse14 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse15 .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse16 .cse7 .cse8 .cse17 .cse18 .cse11))) [2021-08-29 16:16:21,220 INFO L854 garLoopResultBuilder]: At program point L135-1(lines 135 141) the Hoare annotation is: false [2021-08-29 16:16:21,220 INFO L854 garLoopResultBuilder]: At program point L135-2(lines 135 141) the Hoare annotation is: false [2021-08-29 16:16:21,220 INFO L854 garLoopResultBuilder]: At program point L533(lines 529 535) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ~methaneLevelCritical~0 0) (= ULTIMATE.start_main_~tmp~7 ~systemActive~0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-08-29 16:16:21,220 INFO L858 garLoopResultBuilder]: For program point L469(line 469) no Hoare annotation was computed. [2021-08-29 16:16:21,220 INFO L858 garLoopResultBuilder]: For program point L469-1(line 469) no Hoare annotation was computed. [2021-08-29 16:16:21,220 INFO L858 garLoopResultBuilder]: For program point L469-2(line 469) no Hoare annotation was computed. [2021-08-29 16:16:21,220 INFO L854 garLoopResultBuilder]: At program point L337(lines 322 340) the Hoare annotation is: false [2021-08-29 16:16:21,221 INFO L854 garLoopResultBuilder]: At program point L337-1(lines 322 340) the Hoare annotation is: false [2021-08-29 16:16:21,221 INFO L854 garLoopResultBuilder]: At program point L337-2(lines 322 340) the Hoare annotation is: false [2021-08-29 16:16:21,221 INFO L854 garLoopResultBuilder]: At program point L337-3(lines 322 340) the Hoare annotation is: (let ((.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse6 (<= 2 ~waterLevel~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse11 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse12 (= ~methaneLevelCritical~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse13 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse14 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 1)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse15 (<= ~waterLevel~0 1)) (.cse16 (= |ULTIMATE.start_isHighWaterLevel_#res| 0)) (.cse17 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1)) (.cse7 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse7 .cse8 .cse12 .cse9 .cse10 .cse11) (and .cse0 .cse13 .cse1 .cse4 .cse14 .cse15 .cse16 .cse17 .cse7 .cse8 .cse12) (and .cse0 .cse13 .cse1 .cse4 .cse14 .cse5 .cse15 .cse16 .cse17 .cse7 .cse8))) [2021-08-29 16:16:21,221 INFO L854 garLoopResultBuilder]: At program point L337-4(lines 322 340) the Hoare annotation is: false [2021-08-29 16:16:21,221 INFO L854 garLoopResultBuilder]: At program point L337-5(lines 322 340) the Hoare annotation is: false [2021-08-29 16:16:21,221 INFO L854 garLoopResultBuilder]: At program point L337-6(lines 322 340) the Hoare annotation is: false [2021-08-29 16:16:21,221 INFO L854 garLoopResultBuilder]: At program point L337-7(lines 322 340) the Hoare annotation is: false [2021-08-29 16:16:21,222 INFO L854 garLoopResultBuilder]: At program point L337-8(lines 322 340) the Hoare annotation is: false [2021-08-29 16:16:21,222 INFO L854 garLoopResultBuilder]: At program point L337-9(lines 322 340) the Hoare annotation is: false [2021-08-29 16:16:21,222 INFO L854 garLoopResultBuilder]: At program point L337-10(lines 322 340) the Hoare annotation is: false [2021-08-29 16:16:21,222 INFO L854 garLoopResultBuilder]: At program point L337-11(lines 322 340) the Hoare annotation is: false [2021-08-29 16:16:21,222 INFO L854 garLoopResultBuilder]: At program point L405(lines 400 408) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse7))) [2021-08-29 16:16:21,222 INFO L854 garLoopResultBuilder]: At program point L405-1(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,223 INFO L854 garLoopResultBuilder]: At program point L405-2(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,223 INFO L854 garLoopResultBuilder]: At program point L405-3(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,223 INFO L854 garLoopResultBuilder]: At program point L273(lines 266 276) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse7) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse5 .cse6 .cse7))) [2021-08-29 16:16:21,223 INFO L854 garLoopResultBuilder]: At program point L405-4(lines 400 408) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse11 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (= ~methaneLevelCritical~0 1) .cse9 .cse10 .cse11 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2021-08-29 16:16:21,223 INFO L854 garLoopResultBuilder]: At program point L273-1(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,223 INFO L854 garLoopResultBuilder]: At program point L405-5(lines 400 408) the Hoare annotation is: (let ((.cse8 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse11 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse20 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse21 (= ~methaneLevelCritical~0 0)) (.cse16 (<= 2 ~waterLevel~0)) (.cse9 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse10 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse22 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse12 (= ~pumpRunning~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse13 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse14 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse15 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse4 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse5 (= 1 ~systemActive~0)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse17 (<= ~waterLevel~0 2)) (.cse18 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse19 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse7 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse8 .cse6 .cse9 .cse10 .cse11 .cse7 .cse12) (and .cse0 .cse13 .cse14 .cse2 .cse15 .cse16 .cse4 .cse5 .cse6 .cse17 .cse9 .cse10 .cse18 .cse19 .cse7 .cse12) (and .cse0 .cse2 .cse20 .cse21 .cse3 .cse4 .cse5 .cse8 .cse9 .cse10 .cse11 .cse22 .cse12) (and .cse0 .cse1 .cse2 .cse20 .cse21 .cse3 .cse4 .cse5) (and .cse0 .cse13 .cse14 .cse2 .cse20 .cse21 .cse15 .cse16 .cse4 .cse5 .cse17 .cse9 .cse10 .cse18 .cse19 .cse22 .cse12) (and .cse0 .cse1 .cse13 .cse14 .cse2 .cse15 .cse4 .cse5 .cse6 .cse17 .cse18 .cse19 .cse7))) [2021-08-29 16:16:21,224 INFO L854 garLoopResultBuilder]: At program point L273-2(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,224 INFO L854 garLoopResultBuilder]: At program point L405-6(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,224 INFO L854 garLoopResultBuilder]: At program point L273-3(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,224 INFO L854 garLoopResultBuilder]: At program point L405-7(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,224 INFO L854 garLoopResultBuilder]: At program point L273-4(lines 266 276) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse11 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (= ~methaneLevelCritical~0 1) .cse9 .cse10 .cse11 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)))) [2021-08-29 16:16:21,224 INFO L854 garLoopResultBuilder]: At program point L405-8(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,225 INFO L854 garLoopResultBuilder]: At program point L273-5(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,225 INFO L854 garLoopResultBuilder]: At program point L405-9(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,225 INFO L854 garLoopResultBuilder]: At program point L273-6(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,225 INFO L854 garLoopResultBuilder]: At program point L405-10(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,225 INFO L854 garLoopResultBuilder]: At program point L273-7(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,225 INFO L854 garLoopResultBuilder]: At program point L405-11(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,225 INFO L854 garLoopResultBuilder]: At program point L273-8(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,226 INFO L854 garLoopResultBuilder]: At program point L405-12(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,226 INFO L854 garLoopResultBuilder]: At program point L273-9(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,226 INFO L854 garLoopResultBuilder]: At program point L405-13(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,226 INFO L854 garLoopResultBuilder]: At program point L273-10(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,226 INFO L854 garLoopResultBuilder]: At program point L405-14(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,226 INFO L854 garLoopResultBuilder]: At program point L273-11(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,226 INFO L854 garLoopResultBuilder]: At program point L405-15(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,227 INFO L854 garLoopResultBuilder]: At program point L273-12(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,227 INFO L854 garLoopResultBuilder]: At program point L405-16(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,227 INFO L854 garLoopResultBuilder]: At program point L273-13(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,227 INFO L854 garLoopResultBuilder]: At program point L405-17(lines 400 408) the Hoare annotation is: false [2021-08-29 16:16:21,227 INFO L854 garLoopResultBuilder]: At program point L273-14(lines 266 276) the Hoare annotation is: false [2021-08-29 16:16:21,227 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 469) no Hoare annotation was computed. [2021-08-29 16:16:21,227 INFO L858 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2021-08-29 16:16:21,228 INFO L854 garLoopResultBuilder]: At program point L76-1(lines 76 82) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse6 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse11 (= ~pumpRunning~0 0)) (.cse15 (= ~methaneLevelCritical~0 1)) (.cse12 (<= ~waterLevel~0 2)) (.cse13 (<= 2 ~waterLevel~0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse4 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse5 (= 1 ~systemActive~0)) (.cse7 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse8 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse14 (= ~waterLevel~0 1)) (.cse10 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse11 .cse1 .cse2 .cse4 .cse5 .cse12) (and (or (and .cse0 .cse1 .cse2 .cse13 .cse4 .cse5 .cse7 .cse8 .cse10) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse7 .cse8 .cse14 .cse10)) .cse12) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse6 .cse15 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse11 .cse1 .cse4 .cse5 .cse15 .cse12) (and .cse15 .cse12 (or (and .cse0 .cse1 .cse13 .cse4 .cse5 .cse7 .cse8 .cse10) (and .cse0 .cse1 .cse4 .cse5 .cse7 .cse8 .cse14 .cse10))))) [2021-08-29 16:16:21,228 INFO L858 garLoopResultBuilder]: For program point L212(lines 212 229) no Hoare annotation was computed. [2021-08-29 16:16:21,228 INFO L858 garLoopResultBuilder]: For program point L212-1(lines 212 229) no Hoare annotation was computed. [2021-08-29 16:16:21,228 INFO L858 garLoopResultBuilder]: For program point L212-2(lines 212 229) no Hoare annotation was computed. [2021-08-29 16:16:21,228 INFO L854 garLoopResultBuilder]: At program point L282(lines 277 285) the Hoare annotation is: (and (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1) (<= 2 ~waterLevel~0) (= ULTIMATE.start_main_~tmp~7 ~systemActive~0) (= 1 ~systemActive~0) (<= ~waterLevel~0 2) (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1)) (<= ULTIMATE.start_activatePump_~tmp~4 0) (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) (= |ULTIMATE.start_isMethaneAlarm_#res| 0) (= |ULTIMATE.start_isPumpRunning_#res| 1) (= ~pumpRunning~0 1)) [2021-08-29 16:16:21,228 INFO L854 garLoopResultBuilder]: At program point L282-1(lines 277 285) the Hoare annotation is: false [2021-08-29 16:16:21,229 INFO L858 garLoopResultBuilder]: For program point L216(lines 216 224) no Hoare annotation was computed. [2021-08-29 16:16:21,229 INFO L854 garLoopResultBuilder]: At program point L282-2(lines 277 285) the Hoare annotation is: false [2021-08-29 16:16:21,229 INFO L858 garLoopResultBuilder]: For program point L216-1(lines 216 224) no Hoare annotation was computed. [2021-08-29 16:16:21,229 INFO L858 garLoopResultBuilder]: For program point L216-2(lines 216 224) no Hoare annotation was computed. [2021-08-29 16:16:21,229 INFO L858 garLoopResultBuilder]: For program point L350(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,229 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-08-29 16:16:21,229 INFO L858 garLoopResultBuilder]: For program point L350-2(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,230 INFO L858 garLoopResultBuilder]: For program point L350-3(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,230 INFO L858 garLoopResultBuilder]: For program point L350-5(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,230 INFO L858 garLoopResultBuilder]: For program point L350-6(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,230 INFO L858 garLoopResultBuilder]: For program point L86(lines 86 97) no Hoare annotation was computed. [2021-08-29 16:16:21,230 INFO L858 garLoopResultBuilder]: For program point L350-8(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,230 INFO L858 garLoopResultBuilder]: For program point L350-9(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,230 INFO L858 garLoopResultBuilder]: For program point L350-11(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,231 INFO L858 garLoopResultBuilder]: For program point L350-12(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,231 INFO L858 garLoopResultBuilder]: For program point L350-14(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,231 INFO L858 garLoopResultBuilder]: For program point L350-15(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,231 INFO L858 garLoopResultBuilder]: For program point L350-17(lines 350 354) no Hoare annotation was computed. [2021-08-29 16:16:21,231 INFO L854 garLoopResultBuilder]: At program point L485-2(lines 485 499) the Hoare annotation is: false [2021-08-29 16:16:21,231 INFO L858 garLoopResultBuilder]: For program point L486(line 486) no Hoare annotation was computed. [2021-08-29 16:16:21,231 INFO L854 garLoopResultBuilder]: At program point L356(lines 341 359) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 .cse7 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse8) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse5 .cse6 .cse7 .cse8))) [2021-08-29 16:16:21,232 INFO L854 garLoopResultBuilder]: At program point L356-1(lines 341 359) the Hoare annotation is: false [2021-08-29 16:16:21,232 INFO L854 garLoopResultBuilder]: At program point L356-2(lines 341 359) the Hoare annotation is: false [2021-08-29 16:16:21,232 INFO L854 garLoopResultBuilder]: At program point L356-3(lines 341 359) the Hoare annotation is: false [2021-08-29 16:16:21,232 INFO L854 garLoopResultBuilder]: At program point L356-4(lines 341 359) the Hoare annotation is: false [2021-08-29 16:16:21,232 INFO L854 garLoopResultBuilder]: At program point L356-5(lines 341 359) the Hoare annotation is: false [2021-08-29 16:16:21,232 INFO L858 garLoopResultBuilder]: For program point L92(lines 92 96) no Hoare annotation was computed. [2021-08-29 16:16:21,233 INFO L858 garLoopResultBuilder]: For program point L92-2(lines 128 134) no Hoare annotation was computed. [2021-08-29 16:16:21,233 INFO L858 garLoopResultBuilder]: For program point L489(lines 489 493) no Hoare annotation was computed. [2021-08-29 16:16:21,233 INFO L858 garLoopResultBuilder]: For program point L489-1(lines 128 134) no Hoare annotation was computed. [2021-08-29 16:16:21,233 INFO L858 garLoopResultBuilder]: For program point L160(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,233 INFO L858 garLoopResultBuilder]: For program point L160-1(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,233 INFO L858 garLoopResultBuilder]: For program point L160-2(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,233 INFO L858 garLoopResultBuilder]: For program point L160-3(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,233 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-08-29 16:16:21,234 INFO L858 garLoopResultBuilder]: For program point L160-4(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,234 INFO L858 garLoopResultBuilder]: For program point L160-5(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,234 INFO L858 garLoopResultBuilder]: For program point L160-6(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,234 INFO L858 garLoopResultBuilder]: For program point L160-7(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,234 INFO L858 garLoopResultBuilder]: For program point L160-8(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,234 INFO L858 garLoopResultBuilder]: For program point L160-9(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,234 INFO L858 garLoopResultBuilder]: For program point L160-10(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,235 INFO L858 garLoopResultBuilder]: For program point L160-11(lines 160 177) no Hoare annotation was computed. [2021-08-29 16:16:21,235 INFO L858 garLoopResultBuilder]: For program point L559(lines 559 566) no Hoare annotation was computed. [2021-08-29 16:16:21,235 INFO L861 garLoopResultBuilder]: At program point L559-1(lines 559 566) the Hoare annotation is: true [2021-08-29 16:16:21,235 INFO L858 garLoopResultBuilder]: For program point L164(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,235 INFO L858 garLoopResultBuilder]: For program point L164-1(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,235 INFO L858 garLoopResultBuilder]: For program point L164-2(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,235 INFO L858 garLoopResultBuilder]: For program point L164-3(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,236 INFO L858 garLoopResultBuilder]: For program point L164-4(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,236 INFO L858 garLoopResultBuilder]: For program point L164-5(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,236 INFO L858 garLoopResultBuilder]: For program point L164-6(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,236 INFO L858 garLoopResultBuilder]: For program point L164-7(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,236 INFO L858 garLoopResultBuilder]: For program point L164-8(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,236 INFO L858 garLoopResultBuilder]: For program point L164-9(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,236 INFO L858 garLoopResultBuilder]: For program point L164-10(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,237 INFO L858 garLoopResultBuilder]: For program point L164-11(lines 164 172) no Hoare annotation was computed. [2021-08-29 16:16:21,237 INFO L854 garLoopResultBuilder]: At program point L629(lines 1 1006) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-08-29 16:16:21,241 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-08-29 16:16:21,295 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.08 04:16:21 BoogieIcfgContainer [2021-08-29 16:16:21,296 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-08-29 16:16:21,296 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-08-29 16:16:21,296 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-08-29 16:16:21,296 INFO L275 PluginConnector]: Witness Printer initialized [2021-08-29 16:16:21,297 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.08 04:15:59" (3/4) ... [2021-08-29 16:16:21,299 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-08-29 16:16:21,321 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 41 nodes and edges [2021-08-29 16:16:21,322 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2021-08-29 16:16:21,324 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2021-08-29 16:16:21,325 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-08-29 16:16:21,327 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-08-29 16:16:21,328 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-08-29 16:16:21,329 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-08-29 16:16:21,349 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 [2021-08-29 16:16:21,349 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1 [2021-08-29 16:16:21,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) [2021-08-29 16:16:21,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((\result == 0 && methaneLevelCritical == 0) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && tmp == 0) && \result == 0) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((tmp == 1 && methaneLevelCritical == 1) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) [2021-08-29 16:16:21,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1)) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2)) || ((methaneLevelCritical == 1 && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) [2021-08-29 16:16:21,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) [2021-08-29 16:16:21,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && \result <= 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1) [2021-08-29 16:16:21,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) [2021-08-29 16:16:21,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) [2021-08-29 16:16:21,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) [2021-08-29 16:16:21,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && pumpRunning == 1) || (((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1) [2021-08-29 16:16:21,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && \result == 0) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 0)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) [2021-08-29 16:16:21,355 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) || (((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) [2021-08-29 16:16:21,356 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && \result == 1) && pumpRunning == 1 [2021-08-29 16:16:21,356 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) [2021-08-29 16:16:21,357 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) [2021-08-29 16:16:21,358 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) [2021-08-29 16:16:21,358 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 0) [2021-08-29 16:16:21,411 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-08-29 16:16:21,412 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-08-29 16:16:21,412 INFO L158 Benchmark]: Toolchain (without parser) took 22803.43ms. Allocated memory was 52.4MB in the beginning and 266.3MB in the end (delta: 213.9MB). Free memory was 28.6MB in the beginning and 167.0MB in the end (delta: -138.5MB). Peak memory consumption was 74.6MB. Max. memory is 16.1GB. [2021-08-29 16:16:21,413 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 52.4MB. Free memory was 34.4MB in the beginning and 34.3MB in the end (delta: 33.5kB). There was no memory consumed. Max. memory is 16.1GB. [2021-08-29 16:16:21,413 INFO L158 Benchmark]: CACSL2BoogieTranslator took 445.64ms. Allocated memory was 52.4MB in the beginning and 62.9MB in the end (delta: 10.5MB). Free memory was 28.3MB in the beginning and 39.6MB in the end (delta: -11.3MB). Peak memory consumption was 7.5MB. Max. memory is 16.1GB. [2021-08-29 16:16:21,413 INFO L158 Benchmark]: Boogie Procedure Inliner took 96.71ms. Allocated memory is still 62.9MB. Free memory was 39.4MB in the beginning and 33.6MB in the end (delta: 5.8MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-08-29 16:16:21,413 INFO L158 Benchmark]: Boogie Preprocessor took 75.62ms. Allocated memory is still 62.9MB. Free memory was 33.6MB in the beginning and 42.2MB in the end (delta: -8.6MB). Peak memory consumption was 10.2MB. Max. memory is 16.1GB. [2021-08-29 16:16:21,414 INFO L158 Benchmark]: RCFGBuilder took 705.59ms. Allocated memory was 62.9MB in the beginning and 81.8MB in the end (delta: 18.9MB). Free memory was 42.2MB in the beginning and 55.1MB in the end (delta: -12.9MB). Peak memory consumption was 19.8MB. Max. memory is 16.1GB. [2021-08-29 16:16:21,414 INFO L158 Benchmark]: TraceAbstraction took 21358.15ms. Allocated memory was 81.8MB in the beginning and 266.3MB in the end (delta: 184.5MB). Free memory was 54.6MB in the beginning and 188.0MB in the end (delta: -133.4MB). Peak memory consumption was 161.4MB. Max. memory is 16.1GB. [2021-08-29 16:16:21,414 INFO L158 Benchmark]: Witness Printer took 115.63ms. Allocated memory is still 266.3MB. Free memory was 188.0MB in the beginning and 167.0MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2021-08-29 16:16:21,416 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 52.4MB. Free memory was 34.4MB in the beginning and 34.3MB in the end (delta: 33.5kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 445.64ms. Allocated memory was 52.4MB in the beginning and 62.9MB in the end (delta: 10.5MB). Free memory was 28.3MB in the beginning and 39.6MB in the end (delta: -11.3MB). Peak memory consumption was 7.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 96.71ms. Allocated memory is still 62.9MB. Free memory was 39.4MB in the beginning and 33.6MB in the end (delta: 5.8MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 75.62ms. Allocated memory is still 62.9MB. Free memory was 33.6MB in the beginning and 42.2MB in the end (delta: -8.6MB). Peak memory consumption was 10.2MB. Max. memory is 16.1GB. * RCFGBuilder took 705.59ms. Allocated memory was 62.9MB in the beginning and 81.8MB in the end (delta: 18.9MB). Free memory was 42.2MB in the beginning and 55.1MB in the end (delta: -12.9MB). Peak memory consumption was 19.8MB. Max. memory is 16.1GB. * TraceAbstraction took 21358.15ms. Allocated memory was 81.8MB in the beginning and 266.3MB in the end (delta: 184.5MB). Free memory was 54.6MB in the beginning and 188.0MB in the end (delta: -133.4MB). Peak memory consumption was 161.4MB. Max. memory is 16.1GB. * Witness Printer took 115.63ms. Allocated memory is still 266.3MB. Free memory was 188.0MB in the beginning and 167.0MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.00ms ErrorAutomatonConstructionTimeTotal, 0.00ms FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.00ms ErrorAutomatonConstructionTimeAvg, 0.00ms ErrorAutomatonDifferenceTimeAvg, 0.00ms ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 469]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 469]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 469]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 231 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 21241.62ms, OverallIterations: 17, TraceHistogramMax: 2, EmptinessCheckTime: 42.97ms, AutomataDifference: 6741.02ms, DeadEndRemovalTime: 0.00ms, HoareAnnotationTime: 11830.86ms, InitialAbstractionConstructionTime: 15.79ms, PartialOrderReductionTime: 0.00ms, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3536 SdHoareTripleChecker+Valid, 5511.89ms IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3536 mSDsluCounter, 0 SdHoareTripleChecker+Invalid, 4197.04ms Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4283 mSDsCounter, 114 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 7490 IncrementalHoareTripleChecker+Invalid, 7604 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 114 mSolverCounterUnsat, 0 mSDtfsCounter, 7490 mSolverCounterSat, 40.79ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 251 GetRequests, 160 SyntacticMatches, 1 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 77 ImplicationChecksByTransitivity, 378.49ms Time, 0.00ms BasicInterpolantAutomatonTime, BiggestAbstraction: size=416occurred in iteration=9, InterpolantAutomatonStates: 108, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.00ms DumpTime, AutomataMinimizationStatistics: 337.23ms AutomataMinimizationTime, 17 MinimizatonAttempts, 2828 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: 0.00ms HoareAnnotationTime, 93 LocationsWithAnnotation, 93 PreInvPairs, 331 NumberOfFragments, 2618 HoareAnnotationTreeSize, 93 FomulaSimplifications, 121525933 FormulaSimplificationTreeSizeReduction, 2974.60ms HoareSimplificationTime, 93 FomulaSimplificationsInter, 19043305 FormulaSimplificationTreeSizeReductionInter, 8836.40ms HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 87.24ms SsaConstructionTime, 405.68ms SatisfiabilityAnalysisTime, 1188.64ms InterpolantComputationTime, 744 NumberOfCodeBlocks, 744 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 788 ConstructedInterpolants, 0 QuantifiedInterpolants, 1623 SizeOfPredicates, 3 NumberOfNonLiveVariables, 478 ConjunctsInSsa, 7 ConjunctsInUnsatCore, 19 InterpolantComputations, 16 PerfectInterpolantSequences, 104/122 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 277]: Loop Invariant Derived loop invariant: (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && \result == 1) && pumpRunning == 1 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && pumpRunning == 1) || (((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1) - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 485]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 277]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) || (((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 632]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: ((((((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && \result <= 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 0) - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 76]: Loop Invariant Derived loop invariant: ((((((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1)) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2)) || ((methaneLevelCritical == 1 && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 529]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 341]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: (((((((((((\result == 0 && methaneLevelCritical == 0) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && tmp == 0) && \result == 0) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((tmp == 1 && methaneLevelCritical == 1) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && \result == 0) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 0)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 277]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2021-08-29 16:16:21,478 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...