./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 678e0110 Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ef0694c6828fdd41a19c9b426d075f4f4dde925f ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.24-678e011 [2019-11-20 00:44:15,118 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-11-20 00:44:15,120 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-11-20 00:44:15,137 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-11-20 00:44:15,138 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-11-20 00:44:15,139 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-11-20 00:44:15,141 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-11-20 00:44:15,148 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-11-20 00:44:15,150 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-11-20 00:44:15,151 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-11-20 00:44:15,152 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-11-20 00:44:15,154 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-11-20 00:44:15,154 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-11-20 00:44:15,155 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-11-20 00:44:15,156 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-11-20 00:44:15,158 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-11-20 00:44:15,158 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-11-20 00:44:15,159 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-11-20 00:44:15,162 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-11-20 00:44:15,164 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-11-20 00:44:15,166 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-11-20 00:44:15,167 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-11-20 00:44:15,168 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-11-20 00:44:15,169 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-11-20 00:44:15,172 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-11-20 00:44:15,172 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-11-20 00:44:15,173 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-11-20 00:44:15,174 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-11-20 00:44:15,174 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-11-20 00:44:15,175 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-11-20 00:44:15,175 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-11-20 00:44:15,176 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-11-20 00:44:15,177 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-11-20 00:44:15,178 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-11-20 00:44:15,179 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-11-20 00:44:15,179 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-11-20 00:44:15,180 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-11-20 00:44:15,180 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-11-20 00:44:15,180 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-11-20 00:44:15,181 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-11-20 00:44:15,182 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-11-20 00:44:15,182 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2019-11-20 00:44:15,197 INFO L113 SettingsManager]: Loading preferences was successful [2019-11-20 00:44:15,197 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-11-20 00:44:15,198 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-11-20 00:44:15,198 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-11-20 00:44:15,198 INFO L138 SettingsManager]: * Use SBE=true [2019-11-20 00:44:15,199 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-11-20 00:44:15,199 INFO L138 SettingsManager]: * sizeof long=4 [2019-11-20 00:44:15,199 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-11-20 00:44:15,199 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-11-20 00:44:15,200 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-11-20 00:44:15,200 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-11-20 00:44:15,200 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-11-20 00:44:15,200 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-11-20 00:44:15,200 INFO L138 SettingsManager]: * sizeof long double=12 [2019-11-20 00:44:15,201 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-11-20 00:44:15,201 INFO L138 SettingsManager]: * Use constant arrays=true [2019-11-20 00:44:15,201 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-11-20 00:44:15,201 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-11-20 00:44:15,201 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-11-20 00:44:15,202 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-11-20 00:44:15,202 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-11-20 00:44:15,202 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-20 00:44:15,202 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-11-20 00:44:15,203 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-11-20 00:44:15,203 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-11-20 00:44:15,203 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-11-20 00:44:15,203 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-11-20 00:44:15,204 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-11-20 00:44:15,204 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ef0694c6828fdd41a19c9b426d075f4f4dde925f [2019-11-20 00:44:15,377 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-11-20 00:44:15,395 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-11-20 00:44:15,399 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-11-20 00:44:15,400 INFO L271 PluginConnector]: Initializing CDTParser... [2019-11-20 00:44:15,401 INFO L275 PluginConnector]: CDTParser initialized [2019-11-20 00:44:15,401 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2019-11-20 00:44:15,484 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/data/f8772405f/59f310a072ef4ee6921c6e4c30536bc3/FLAGe44462e14 [2019-11-20 00:44:16,005 INFO L306 CDTParser]: Found 1 translation units. [2019-11-20 00:44:16,005 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2019-11-20 00:44:16,018 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/data/f8772405f/59f310a072ef4ee6921c6e4c30536bc3/FLAGe44462e14 [2019-11-20 00:44:16,281 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/data/f8772405f/59f310a072ef4ee6921c6e4c30536bc3 [2019-11-20 00:44:16,283 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-11-20 00:44:16,284 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-11-20 00:44:16,285 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-11-20 00:44:16,285 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-11-20 00:44:16,288 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-11-20 00:44:16,289 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 12:44:16" (1/1) ... [2019-11-20 00:44:16,291 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2fd64ba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16, skipping insertion in model container [2019-11-20 00:44:16,292 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 12:44:16" (1/1) ... [2019-11-20 00:44:16,298 INFO L142 MainTranslator]: Starting translation in SV-COMP mode [2019-11-20 00:44:16,349 INFO L173 MainTranslator]: Built tables and reachable declarations [2019-11-20 00:44:16,807 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-20 00:44:16,823 INFO L188 MainTranslator]: Completed pre-run [2019-11-20 00:44:16,919 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-20 00:44:16,972 INFO L192 MainTranslator]: Completed translation [2019-11-20 00:44:16,973 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16 WrapperNode [2019-11-20 00:44:16,973 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-11-20 00:44:16,974 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-11-20 00:44:16,975 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-11-20 00:44:16,975 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-11-20 00:44:16,984 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16" (1/1) ... [2019-11-20 00:44:17,007 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16" (1/1) ... [2019-11-20 00:44:17,060 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-11-20 00:44:17,061 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-11-20 00:44:17,061 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-11-20 00:44:17,061 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-11-20 00:44:17,071 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16" (1/1) ... [2019-11-20 00:44:17,072 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16" (1/1) ... [2019-11-20 00:44:17,078 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16" (1/1) ... [2019-11-20 00:44:17,078 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16" (1/1) ... [2019-11-20 00:44:17,094 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16" (1/1) ... [2019-11-20 00:44:17,109 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16" (1/1) ... [2019-11-20 00:44:17,113 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16" (1/1) ... [2019-11-20 00:44:17,131 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-11-20 00:44:17,132 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-11-20 00:44:17,132 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-11-20 00:44:17,132 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-11-20 00:44:17,133 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-20 00:44:17,207 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-11-20 00:44:17,207 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-11-20 00:44:17,207 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-11-20 00:44:17,207 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-11-20 00:44:18,257 INFO L280 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-11-20 00:44:18,257 INFO L285 CfgBuilder]: Removed 196 assume(true) statements. [2019-11-20 00:44:18,259 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:44:18 BoogieIcfgContainer [2019-11-20 00:44:18,259 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-11-20 00:44:18,260 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-11-20 00:44:18,260 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-11-20 00:44:18,264 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-11-20 00:44:18,265 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 12:44:16" (1/3) ... [2019-11-20 00:44:18,266 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@d67133d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 12:44:18, skipping insertion in model container [2019-11-20 00:44:18,266 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:44:16" (2/3) ... [2019-11-20 00:44:18,267 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@d67133d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 12:44:18, skipping insertion in model container [2019-11-20 00:44:18,267 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:44:18" (3/3) ... [2019-11-20 00:44:18,277 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product47.cil.c [2019-11-20 00:44:18,288 INFO L153 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-11-20 00:44:18,297 INFO L165 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2019-11-20 00:44:18,310 INFO L249 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2019-11-20 00:44:18,345 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-11-20 00:44:18,346 INFO L374 AbstractCegarLoop]: Hoare is true [2019-11-20 00:44:18,346 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-11-20 00:44:18,346 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-11-20 00:44:18,348 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-11-20 00:44:18,348 INFO L378 AbstractCegarLoop]: Difference is false [2019-11-20 00:44:18,348 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-11-20 00:44:18,348 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-11-20 00:44:18,377 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states. [2019-11-20 00:44:18,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2019-11-20 00:44:18,386 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:18,387 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:18,388 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:18,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:18,395 INFO L82 PathProgramCache]: Analyzing trace with hash -330245923, now seen corresponding path program 1 times [2019-11-20 00:44:18,405 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:18,405 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [698923426] [2019-11-20 00:44:18,405 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:18,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:18,745 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 00:44:18,745 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [698923426] [2019-11-20 00:44:18,746 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:18,746 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2019-11-20 00:44:18,747 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1321298143] [2019-11-20 00:44:18,752 INFO L442 AbstractCegarLoop]: Interpolant automaton has 2 states [2019-11-20 00:44:18,752 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:18,765 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2019-11-20 00:44:18,766 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-11-20 00:44:18,768 INFO L87 Difference]: Start difference. First operand 131 states. Second operand 2 states. [2019-11-20 00:44:18,805 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:18,805 INFO L93 Difference]: Finished difference Result 256 states and 383 transitions. [2019-11-20 00:44:18,805 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-11-20 00:44:18,807 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 16 [2019-11-20 00:44:18,807 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:18,821 INFO L225 Difference]: With dead ends: 256 [2019-11-20 00:44:18,822 INFO L226 Difference]: Without dead ends: 127 [2019-11-20 00:44:18,826 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-11-20 00:44:18,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 127 states. [2019-11-20 00:44:18,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 127 to 127. [2019-11-20 00:44:18,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 127 states. [2019-11-20 00:44:18,881 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 183 transitions. [2019-11-20 00:44:18,882 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 183 transitions. Word has length 16 [2019-11-20 00:44:18,883 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:18,883 INFO L462 AbstractCegarLoop]: Abstraction has 127 states and 183 transitions. [2019-11-20 00:44:18,883 INFO L463 AbstractCegarLoop]: Interpolant automaton has 2 states. [2019-11-20 00:44:18,883 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 183 transitions. [2019-11-20 00:44:18,884 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2019-11-20 00:44:18,884 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:18,884 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:18,885 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:18,885 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:18,885 INFO L82 PathProgramCache]: Analyzing trace with hash 450073546, now seen corresponding path program 1 times [2019-11-20 00:44:18,885 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:18,886 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [857529885] [2019-11-20 00:44:18,886 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:18,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:18,974 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 00:44:18,974 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [857529885] [2019-11-20 00:44:18,975 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:18,975 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-20 00:44:18,975 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1505806190] [2019-11-20 00:44:18,976 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-20 00:44:18,976 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:18,977 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 00:44:18,977 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 00:44:18,977 INFO L87 Difference]: Start difference. First operand 127 states and 183 transitions. Second operand 3 states. [2019-11-20 00:44:18,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:18,996 INFO L93 Difference]: Finished difference Result 127 states and 183 transitions. [2019-11-20 00:44:18,996 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 00:44:18,996 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 17 [2019-11-20 00:44:18,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:18,998 INFO L225 Difference]: With dead ends: 127 [2019-11-20 00:44:18,998 INFO L226 Difference]: Without dead ends: 53 [2019-11-20 00:44:18,999 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 00:44:18,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2019-11-20 00:44:19,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2019-11-20 00:44:19,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 53 states. [2019-11-20 00:44:19,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 76 transitions. [2019-11-20 00:44:19,005 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 76 transitions. Word has length 17 [2019-11-20 00:44:19,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:19,006 INFO L462 AbstractCegarLoop]: Abstraction has 53 states and 76 transitions. [2019-11-20 00:44:19,009 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-20 00:44:19,010 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 76 transitions. [2019-11-20 00:44:19,011 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2019-11-20 00:44:19,012 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:19,012 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:19,012 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:19,012 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:19,013 INFO L82 PathProgramCache]: Analyzing trace with hash 445162074, now seen corresponding path program 1 times [2019-11-20 00:44:19,013 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:19,013 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1251515128] [2019-11-20 00:44:19,013 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:19,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:19,174 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 00:44:19,175 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1251515128] [2019-11-20 00:44:19,175 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:19,175 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2019-11-20 00:44:19,176 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [866383387] [2019-11-20 00:44:19,176 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-20 00:44:19,176 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:19,176 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 00:44:19,177 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 00:44:19,177 INFO L87 Difference]: Start difference. First operand 53 states and 76 transitions. Second operand 3 states. [2019-11-20 00:44:19,218 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:19,218 INFO L93 Difference]: Finished difference Result 147 states and 216 transitions. [2019-11-20 00:44:19,226 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 00:44:19,226 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 22 [2019-11-20 00:44:19,227 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:19,228 INFO L225 Difference]: With dead ends: 147 [2019-11-20 00:44:19,228 INFO L226 Difference]: Without dead ends: 100 [2019-11-20 00:44:19,229 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 00:44:19,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2019-11-20 00:44:19,246 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 96. [2019-11-20 00:44:19,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 96 states. [2019-11-20 00:44:19,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 141 transitions. [2019-11-20 00:44:19,249 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 141 transitions. Word has length 22 [2019-11-20 00:44:19,249 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:19,249 INFO L462 AbstractCegarLoop]: Abstraction has 96 states and 141 transitions. [2019-11-20 00:44:19,250 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-20 00:44:19,250 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 141 transitions. [2019-11-20 00:44:19,251 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2019-11-20 00:44:19,251 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:19,251 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:19,252 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:19,252 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:19,252 INFO L82 PathProgramCache]: Analyzing trace with hash 96758808, now seen corresponding path program 1 times [2019-11-20 00:44:19,252 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:19,253 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1226495378] [2019-11-20 00:44:19,253 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:19,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:19,371 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 00:44:19,372 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1226495378] [2019-11-20 00:44:19,372 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:19,373 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2019-11-20 00:44:19,373 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [34565333] [2019-11-20 00:44:19,373 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-20 00:44:19,374 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:19,374 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 00:44:19,374 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 00:44:19,374 INFO L87 Difference]: Start difference. First operand 96 states and 141 transitions. Second operand 3 states. [2019-11-20 00:44:19,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:19,427 INFO L93 Difference]: Finished difference Result 227 states and 338 transitions. [2019-11-20 00:44:19,428 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 00:44:19,428 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2019-11-20 00:44:19,428 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:19,430 INFO L225 Difference]: With dead ends: 227 [2019-11-20 00:44:19,430 INFO L226 Difference]: Without dead ends: 137 [2019-11-20 00:44:19,431 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 00:44:19,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2019-11-20 00:44:19,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 135. [2019-11-20 00:44:19,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 135 states. [2019-11-20 00:44:19,449 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135 states to 135 states and 195 transitions. [2019-11-20 00:44:19,449 INFO L78 Accepts]: Start accepts. Automaton has 135 states and 195 transitions. Word has length 24 [2019-11-20 00:44:19,450 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:19,450 INFO L462 AbstractCegarLoop]: Abstraction has 135 states and 195 transitions. [2019-11-20 00:44:19,450 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-20 00:44:19,450 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states and 195 transitions. [2019-11-20 00:44:19,451 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2019-11-20 00:44:19,451 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:19,452 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:19,452 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:19,452 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:19,453 INFO L82 PathProgramCache]: Analyzing trace with hash -732744145, now seen corresponding path program 1 times [2019-11-20 00:44:19,453 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:19,453 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1298607826] [2019-11-20 00:44:19,453 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:19,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:19,544 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 00:44:19,544 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1298607826] [2019-11-20 00:44:19,545 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:19,545 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 00:44:19,545 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1694499984] [2019-11-20 00:44:19,546 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-20 00:44:19,546 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:19,546 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-20 00:44:19,547 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-20 00:44:19,547 INFO L87 Difference]: Start difference. First operand 135 states and 195 transitions. Second operand 5 states. [2019-11-20 00:44:19,741 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:19,741 INFO L93 Difference]: Finished difference Result 397 states and 575 transitions. [2019-11-20 00:44:19,741 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-11-20 00:44:19,742 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 25 [2019-11-20 00:44:19,742 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:19,745 INFO L225 Difference]: With dead ends: 397 [2019-11-20 00:44:19,746 INFO L226 Difference]: Without dead ends: 395 [2019-11-20 00:44:19,746 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-11-20 00:44:19,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2019-11-20 00:44:19,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 135. [2019-11-20 00:44:19,771 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 135 states. [2019-11-20 00:44:19,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135 states to 135 states and 193 transitions. [2019-11-20 00:44:19,773 INFO L78 Accepts]: Start accepts. Automaton has 135 states and 193 transitions. Word has length 25 [2019-11-20 00:44:19,773 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:19,774 INFO L462 AbstractCegarLoop]: Abstraction has 135 states and 193 transitions. [2019-11-20 00:44:19,774 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-20 00:44:19,774 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states and 193 transitions. [2019-11-20 00:44:19,775 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2019-11-20 00:44:19,776 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:19,776 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:19,776 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:19,776 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:19,777 INFO L82 PathProgramCache]: Analyzing trace with hash 1902005189, now seen corresponding path program 1 times [2019-11-20 00:44:19,777 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:19,777 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [967342982] [2019-11-20 00:44:19,777 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:19,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:19,864 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 00:44:19,865 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [967342982] [2019-11-20 00:44:19,865 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:19,865 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2019-11-20 00:44:19,866 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2015889921] [2019-11-20 00:44:19,866 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-20 00:44:19,866 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:19,867 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 00:44:19,867 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 00:44:19,867 INFO L87 Difference]: Start difference. First operand 135 states and 193 transitions. Second operand 3 states. [2019-11-20 00:44:19,918 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:19,918 INFO L93 Difference]: Finished difference Result 363 states and 522 transitions. [2019-11-20 00:44:19,919 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 00:44:19,919 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 33 [2019-11-20 00:44:19,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:19,921 INFO L225 Difference]: With dead ends: 363 [2019-11-20 00:44:19,922 INFO L226 Difference]: Without dead ends: 234 [2019-11-20 00:44:19,923 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 00:44:19,928 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2019-11-20 00:44:19,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 232. [2019-11-20 00:44:19,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 232 states. [2019-11-20 00:44:19,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 326 transitions. [2019-11-20 00:44:19,976 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 326 transitions. Word has length 33 [2019-11-20 00:44:19,977 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:19,977 INFO L462 AbstractCegarLoop]: Abstraction has 232 states and 326 transitions. [2019-11-20 00:44:19,977 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-20 00:44:19,977 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 326 transitions. [2019-11-20 00:44:19,984 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2019-11-20 00:44:19,988 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:19,988 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:19,993 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:19,994 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:19,994 INFO L82 PathProgramCache]: Analyzing trace with hash -1113098429, now seen corresponding path program 1 times [2019-11-20 00:44:19,995 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:19,995 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [553832167] [2019-11-20 00:44:19,995 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:20,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:20,099 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 00:44:20,099 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [553832167] [2019-11-20 00:44:20,100 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:20,100 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-20 00:44:20,100 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [21158063] [2019-11-20 00:44:20,101 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-20 00:44:20,101 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:20,101 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-20 00:44:20,102 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-20 00:44:20,102 INFO L87 Difference]: Start difference. First operand 232 states and 326 transitions. Second operand 5 states. [2019-11-20 00:44:20,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:20,213 INFO L93 Difference]: Finished difference Result 640 states and 890 transitions. [2019-11-20 00:44:20,213 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-11-20 00:44:20,214 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2019-11-20 00:44:20,214 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:20,217 INFO L225 Difference]: With dead ends: 640 [2019-11-20 00:44:20,217 INFO L226 Difference]: Without dead ends: 414 [2019-11-20 00:44:20,218 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-11-20 00:44:20,219 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 414 states. [2019-11-20 00:44:20,243 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 414 to 250. [2019-11-20 00:44:20,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 250 states. [2019-11-20 00:44:20,245 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 344 transitions. [2019-11-20 00:44:20,245 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 344 transitions. Word has length 33 [2019-11-20 00:44:20,247 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:20,247 INFO L462 AbstractCegarLoop]: Abstraction has 250 states and 344 transitions. [2019-11-20 00:44:20,247 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-20 00:44:20,248 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 344 transitions. [2019-11-20 00:44:20,249 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2019-11-20 00:44:20,249 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:20,250 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:20,250 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:20,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:20,250 INFO L82 PathProgramCache]: Analyzing trace with hash -1699904443, now seen corresponding path program 1 times [2019-11-20 00:44:20,251 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:20,251 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489592309] [2019-11-20 00:44:20,252 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:20,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:20,302 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 00:44:20,302 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489592309] [2019-11-20 00:44:20,302 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:20,302 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 00:44:20,303 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1368239606] [2019-11-20 00:44:20,303 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-11-20 00:44:20,303 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:20,303 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-20 00:44:20,304 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-20 00:44:20,304 INFO L87 Difference]: Start difference. First operand 250 states and 344 transitions. Second operand 4 states. [2019-11-20 00:44:20,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:20,356 INFO L93 Difference]: Finished difference Result 544 states and 742 transitions. [2019-11-20 00:44:20,356 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-11-20 00:44:20,357 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2019-11-20 00:44:20,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:20,359 INFO L225 Difference]: With dead ends: 544 [2019-11-20 00:44:20,359 INFO L226 Difference]: Without dead ends: 300 [2019-11-20 00:44:20,360 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2019-11-20 00:44:20,360 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300 states. [2019-11-20 00:44:20,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300 to 209. [2019-11-20 00:44:20,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 209 states. [2019-11-20 00:44:20,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 209 states to 209 states and 280 transitions. [2019-11-20 00:44:20,377 INFO L78 Accepts]: Start accepts. Automaton has 209 states and 280 transitions. Word has length 33 [2019-11-20 00:44:20,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:20,378 INFO L462 AbstractCegarLoop]: Abstraction has 209 states and 280 transitions. [2019-11-20 00:44:20,378 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-11-20 00:44:20,378 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 280 transitions. [2019-11-20 00:44:20,381 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-11-20 00:44:20,381 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:20,381 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:20,382 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:20,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:20,383 INFO L82 PathProgramCache]: Analyzing trace with hash -1822472183, now seen corresponding path program 1 times [2019-11-20 00:44:20,384 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:20,384 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1133644026] [2019-11-20 00:44:20,384 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:20,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:20,522 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 00:44:20,524 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1133644026] [2019-11-20 00:44:20,524 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:20,525 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 00:44:20,527 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [362586382] [2019-11-20 00:44:20,528 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-20 00:44:20,529 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:20,529 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-20 00:44:20,530 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-20 00:44:20,531 INFO L87 Difference]: Start difference. First operand 209 states and 280 transitions. Second operand 5 states. [2019-11-20 00:44:20,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:20,792 INFO L93 Difference]: Finished difference Result 1093 states and 1472 transitions. [2019-11-20 00:44:20,792 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2019-11-20 00:44:20,793 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2019-11-20 00:44:20,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:20,799 INFO L225 Difference]: With dead ends: 1093 [2019-11-20 00:44:20,799 INFO L226 Difference]: Without dead ends: 890 [2019-11-20 00:44:20,800 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-11-20 00:44:20,802 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 890 states. [2019-11-20 00:44:20,880 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 890 to 398. [2019-11-20 00:44:20,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 398 states. [2019-11-20 00:44:20,882 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 398 states to 398 states and 527 transitions. [2019-11-20 00:44:20,883 INFO L78 Accepts]: Start accepts. Automaton has 398 states and 527 transitions. Word has length 34 [2019-11-20 00:44:20,883 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:20,883 INFO L462 AbstractCegarLoop]: Abstraction has 398 states and 527 transitions. [2019-11-20 00:44:20,883 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-20 00:44:20,884 INFO L276 IsEmpty]: Start isEmpty. Operand 398 states and 527 transitions. [2019-11-20 00:44:20,885 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2019-11-20 00:44:20,886 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:20,886 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:20,887 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:20,887 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:20,887 INFO L82 PathProgramCache]: Analyzing trace with hash 939478607, now seen corresponding path program 1 times [2019-11-20 00:44:20,887 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:20,888 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1341045670] [2019-11-20 00:44:20,888 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:20,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:20,989 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 00:44:20,989 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1341045670] [2019-11-20 00:44:20,990 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:20,990 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-11-20 00:44:20,990 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1500266474] [2019-11-20 00:44:20,990 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-11-20 00:44:20,990 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:20,991 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-11-20 00:44:20,991 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-11-20 00:44:20,991 INFO L87 Difference]: Start difference. First operand 398 states and 527 transitions. Second operand 6 states. [2019-11-20 00:44:21,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:21,380 INFO L93 Difference]: Finished difference Result 1430 states and 1900 transitions. [2019-11-20 00:44:21,380 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2019-11-20 00:44:21,381 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2019-11-20 00:44:21,381 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:21,388 INFO L225 Difference]: With dead ends: 1430 [2019-11-20 00:44:21,388 INFO L226 Difference]: Without dead ends: 1038 [2019-11-20 00:44:21,389 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=60, Invalid=122, Unknown=0, NotChecked=0, Total=182 [2019-11-20 00:44:21,391 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1038 states. [2019-11-20 00:44:21,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1038 to 398. [2019-11-20 00:44:21,436 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 398 states. [2019-11-20 00:44:21,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 398 states to 398 states and 517 transitions. [2019-11-20 00:44:21,438 INFO L78 Accepts]: Start accepts. Automaton has 398 states and 517 transitions. Word has length 35 [2019-11-20 00:44:21,439 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:21,439 INFO L462 AbstractCegarLoop]: Abstraction has 398 states and 517 transitions. [2019-11-20 00:44:21,439 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-11-20 00:44:21,439 INFO L276 IsEmpty]: Start isEmpty. Operand 398 states and 517 transitions. [2019-11-20 00:44:21,440 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2019-11-20 00:44:21,441 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:21,441 INFO L410 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:21,441 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:21,442 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:21,442 INFO L82 PathProgramCache]: Analyzing trace with hash 1806093559, now seen corresponding path program 1 times [2019-11-20 00:44:21,442 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:21,442 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [750442627] [2019-11-20 00:44:21,443 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:21,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:21,484 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2019-11-20 00:44:21,484 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [750442627] [2019-11-20 00:44:21,484 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:21,485 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-20 00:44:21,485 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [72682762] [2019-11-20 00:44:21,485 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-20 00:44:21,485 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:21,486 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 00:44:21,486 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 00:44:21,486 INFO L87 Difference]: Start difference. First operand 398 states and 517 transitions. Second operand 3 states. [2019-11-20 00:44:21,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:21,554 INFO L93 Difference]: Finished difference Result 486 states and 630 transitions. [2019-11-20 00:44:21,555 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 00:44:21,555 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 52 [2019-11-20 00:44:21,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:21,557 INFO L225 Difference]: With dead ends: 486 [2019-11-20 00:44:21,557 INFO L226 Difference]: Without dead ends: 198 [2019-11-20 00:44:21,558 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 00:44:21,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198 states. [2019-11-20 00:44:21,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198 to 198. [2019-11-20 00:44:21,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 198 states. [2019-11-20 00:44:21,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 247 transitions. [2019-11-20 00:44:21,580 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 247 transitions. Word has length 52 [2019-11-20 00:44:21,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:21,580 INFO L462 AbstractCegarLoop]: Abstraction has 198 states and 247 transitions. [2019-11-20 00:44:21,580 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-20 00:44:21,581 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 247 transitions. [2019-11-20 00:44:21,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2019-11-20 00:44:21,582 INFO L402 BasicCegarLoop]: Found error trace [2019-11-20 00:44:21,582 INFO L410 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 00:44:21,582 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-20 00:44:21,582 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 00:44:21,583 INFO L82 PathProgramCache]: Analyzing trace with hash 1267756066, now seen corresponding path program 1 times [2019-11-20 00:44:21,583 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 00:44:21,583 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1309450395] [2019-11-20 00:44:21,584 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 00:44:21,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 00:44:21,666 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2019-11-20 00:44:21,666 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1309450395] [2019-11-20 00:44:21,666 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 00:44:21,667 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-11-20 00:44:21,667 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2018264425] [2019-11-20 00:44:21,667 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-11-20 00:44:21,667 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 00:44:21,668 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-11-20 00:44:21,668 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-11-20 00:44:21,668 INFO L87 Difference]: Start difference. First operand 198 states and 247 transitions. Second operand 6 states. [2019-11-20 00:44:21,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 00:44:21,934 INFO L93 Difference]: Finished difference Result 497 states and 619 transitions. [2019-11-20 00:44:21,934 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2019-11-20 00:44:21,935 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 54 [2019-11-20 00:44:21,935 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-20 00:44:21,935 INFO L225 Difference]: With dead ends: 497 [2019-11-20 00:44:21,935 INFO L226 Difference]: Without dead ends: 0 [2019-11-20 00:44:21,937 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2019-11-20 00:44:21,937 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-11-20 00:44:21,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-11-20 00:44:21,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-11-20 00:44:21,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-11-20 00:44:21,938 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 54 [2019-11-20 00:44:21,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-20 00:44:21,938 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-20 00:44:21,938 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-11-20 00:44:21,939 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-11-20 00:44:21,939 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-11-20 00:44:21,944 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-11-20 00:44:22,109 WARN L191 SmtUtils]: Spent 140.00 ms on a formula simplification. DAG size of input: 114 DAG size of output: 95 [2019-11-20 00:44:22,578 WARN L191 SmtUtils]: Spent 319.00 ms on a formula simplification. DAG size of input: 170 DAG size of output: 140 [2019-11-20 00:44:22,731 WARN L191 SmtUtils]: Spent 151.00 ms on a formula simplification. DAG size of input: 109 DAG size of output: 66 [2019-11-20 00:44:23,040 WARN L191 SmtUtils]: Spent 300.00 ms on a formula simplification. DAG size of input: 163 DAG size of output: 128 [2019-11-20 00:44:23,225 WARN L191 SmtUtils]: Spent 175.00 ms on a formula simplification. DAG size of input: 117 DAG size of output: 77 [2019-11-20 00:44:23,507 WARN L191 SmtUtils]: Spent 278.00 ms on a formula simplification. DAG size of input: 172 DAG size of output: 139 [2019-11-20 00:44:23,698 WARN L191 SmtUtils]: Spent 107.00 ms on a formula simplification. DAG size of input: 96 DAG size of output: 84 [2019-11-20 00:44:23,946 WARN L191 SmtUtils]: Spent 246.00 ms on a formula simplification. DAG size of input: 171 DAG size of output: 135 [2019-11-20 00:44:24,478 WARN L191 SmtUtils]: Spent 475.00 ms on a formula simplification. DAG size of input: 94 DAG size of output: 34 [2019-11-20 00:44:24,926 WARN L191 SmtUtils]: Spent 263.00 ms on a formula simplification. DAG size of input: 68 DAG size of output: 24 [2019-11-20 00:44:25,973 WARN L191 SmtUtils]: Spent 913.00 ms on a formula simplification. DAG size of input: 139 DAG size of output: 22 [2019-11-20 00:44:26,250 WARN L191 SmtUtils]: Spent 274.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 16 [2019-11-20 00:44:27,120 WARN L191 SmtUtils]: Spent 850.00 ms on a formula simplification. DAG size of input: 126 DAG size of output: 26 [2019-11-20 00:44:27,418 WARN L191 SmtUtils]: Spent 264.00 ms on a formula simplification. DAG size of input: 74 DAG size of output: 16 [2019-11-20 00:44:28,213 WARN L191 SmtUtils]: Spent 792.00 ms on a formula simplification. DAG size of input: 138 DAG size of output: 22 [2019-11-20 00:44:28,569 WARN L191 SmtUtils]: Spent 350.00 ms on a formula simplification. DAG size of input: 95 DAG size of output: 31 [2019-11-20 00:44:28,911 WARN L191 SmtUtils]: Spent 339.00 ms on a formula simplification. DAG size of input: 84 DAG size of output: 14 [2019-11-20 00:44:29,489 WARN L191 SmtUtils]: Spent 574.00 ms on a formula simplification. DAG size of input: 134 DAG size of output: 22 [2019-11-20 00:44:29,501 INFO L444 ceAbstractionStarter]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 73) no Hoare annotation was computed. [2019-11-20 00:44:29,502 INFO L440 ceAbstractionStarter]: At program point L235(lines 235 241) the Hoare annotation is: (let ((.cse6 (= 1 ~systemActive~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (let ((.cse0 (and .cse8 .cse7)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (= 1 ~methaneLevelCritical~0)) (.cse1 (<= ~methaneLevelCritical~0 0)) (.cse5 (and .cse6 .cse8 .cse7)) (.cse2 (<= 0 ~methaneLevelCritical~0))) (or (and (and .cse0 .cse1 .cse2) .cse3) (and (and .cse0 .cse4) .cse3) (and .cse5 .cse4) (and .cse6 .cse1 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse7 .cse2) (and .cse1 .cse5 .cse2)))) [2019-11-20 00:44:29,502 INFO L440 ceAbstractionStarter]: At program point L235-1(lines 235 241) the Hoare annotation is: false [2019-11-20 00:44:29,502 INFO L440 ceAbstractionStarter]: At program point L235-2(lines 235 241) the Hoare annotation is: false [2019-11-20 00:44:29,502 INFO L440 ceAbstractionStarter]: At program point L103(lines 1 959) the Hoare annotation is: (and (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (= 1 ~waterLevel~0) (= ~pumpRunning~0 0) (<= 0 ~methaneLevelCritical~0)) [2019-11-20 00:44:29,502 INFO L444 ceAbstractionStarter]: For program point L205(lines 205 211) no Hoare annotation was computed. [2019-11-20 00:44:29,503 INFO L444 ceAbstractionStarter]: For program point L205-1(lines 205 211) no Hoare annotation was computed. [2019-11-20 00:44:29,503 INFO L444 ceAbstractionStarter]: For program point L205-2(lines 205 211) no Hoare annotation was computed. [2019-11-20 00:44:29,503 INFO L444 ceAbstractionStarter]: For program point L205-3(lines 205 211) no Hoare annotation was computed. [2019-11-20 00:44:29,503 INFO L444 ceAbstractionStarter]: For program point L73(line 73) no Hoare annotation was computed. [2019-11-20 00:44:29,503 INFO L444 ceAbstractionStarter]: For program point L205-4(lines 205 211) no Hoare annotation was computed. [2019-11-20 00:44:29,503 INFO L444 ceAbstractionStarter]: For program point L73-1(line 73) no Hoare annotation was computed. [2019-11-20 00:44:29,503 INFO L444 ceAbstractionStarter]: For program point L205-5(lines 205 211) no Hoare annotation was computed. [2019-11-20 00:44:29,503 INFO L444 ceAbstractionStarter]: For program point L73-2(line 73) no Hoare annotation was computed. [2019-11-20 00:44:29,503 INFO L444 ceAbstractionStarter]: For program point L140(lines 140 144) no Hoare annotation was computed. [2019-11-20 00:44:29,503 INFO L444 ceAbstractionStarter]: For program point L405(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,504 INFO L444 ceAbstractionStarter]: For program point L405-2(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,504 INFO L444 ceAbstractionStarter]: For program point L405-3(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,504 INFO L444 ceAbstractionStarter]: For program point L405-5(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,504 INFO L444 ceAbstractionStarter]: For program point L405-6(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,504 INFO L444 ceAbstractionStarter]: For program point L405-8(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,504 INFO L444 ceAbstractionStarter]: For program point L405-9(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,504 INFO L444 ceAbstractionStarter]: For program point L405-11(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,504 INFO L444 ceAbstractionStarter]: For program point L405-12(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,504 INFO L444 ceAbstractionStarter]: For program point L405-14(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,505 INFO L444 ceAbstractionStarter]: For program point L405-15(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,505 INFO L444 ceAbstractionStarter]: For program point L405-17(lines 405 409) no Hoare annotation was computed. [2019-11-20 00:44:29,505 INFO L444 ceAbstractionStarter]: For program point L472(lines 472 485) no Hoare annotation was computed. [2019-11-20 00:44:29,505 INFO L444 ceAbstractionStarter]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 73) no Hoare annotation was computed. [2019-11-20 00:44:29,505 INFO L440 ceAbstractionStarter]: At program point L210(lines 201 214) the Hoare annotation is: (and (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~pumpRunning~0 0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 0 ~methaneLevelCritical~0)) [2019-11-20 00:44:29,505 INFO L440 ceAbstractionStarter]: At program point L210-1(lines 201 214) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 .cse2 (<= 0 ~methaneLevelCritical~0)) (and (and .cse0 .cse1 .cse2) (= 1 ~methaneLevelCritical~0)))) [2019-11-20 00:44:29,505 INFO L440 ceAbstractionStarter]: At program point L210-2(lines 201 214) the Hoare annotation is: false [2019-11-20 00:44:29,506 INFO L440 ceAbstractionStarter]: At program point L111(lines 106 114) the Hoare annotation is: (and (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (= 1 ~waterLevel~0) (= ~pumpRunning~0 0) (<= 0 ~methaneLevelCritical~0)) [2019-11-20 00:44:29,506 INFO L440 ceAbstractionStarter]: At program point L210-3(lines 201 214) the Hoare annotation is: false [2019-11-20 00:44:29,506 INFO L440 ceAbstractionStarter]: At program point L210-4(lines 201 214) the Hoare annotation is: false [2019-11-20 00:44:29,506 INFO L440 ceAbstractionStarter]: At program point L210-5(lines 201 214) the Hoare annotation is: false [2019-11-20 00:44:29,506 INFO L444 ceAbstractionStarter]: For program point L443(lines 442 489) no Hoare annotation was computed. [2019-11-20 00:44:29,506 INFO L444 ceAbstractionStarter]: For program point L444(lines 444 448) no Hoare annotation was computed. [2019-11-20 00:44:29,506 INFO L440 ceAbstractionStarter]: At program point L411(lines 396 414) the Hoare annotation is: (and (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~pumpRunning~0 0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 0 ~methaneLevelCritical~0)) [2019-11-20 00:44:29,507 INFO L440 ceAbstractionStarter]: At program point L411-1(lines 396 414) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 .cse2 (<= 0 ~methaneLevelCritical~0)) (and (and .cse0 .cse1 .cse2) (= 1 ~methaneLevelCritical~0)))) [2019-11-20 00:44:29,507 INFO L440 ceAbstractionStarter]: At program point L411-2(lines 396 414) the Hoare annotation is: false [2019-11-20 00:44:29,507 INFO L440 ceAbstractionStarter]: At program point L411-3(lines 396 414) the Hoare annotation is: false [2019-11-20 00:44:29,507 INFO L440 ceAbstractionStarter]: At program point L411-4(lines 396 414) the Hoare annotation is: false [2019-11-20 00:44:29,507 INFO L440 ceAbstractionStarter]: At program point L411-5(lines 396 414) the Hoare annotation is: false [2019-11-20 00:44:29,507 INFO L444 ceAbstractionStarter]: For program point L478(lines 478 484) no Hoare annotation was computed. [2019-11-20 00:44:29,507 INFO L440 ceAbstractionStarter]: At program point L478-1(lines 228 234) the Hoare annotation is: (let ((.cse5 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (let ((.cse0 (and (= ~pumpRunning~0 0) .cse5)) (.cse4 (<= ~methaneLevelCritical~0 0)) (.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= 1 ~methaneLevelCritical~0))) (or (and (and .cse0 .cse1) .cse2) (and .cse3 .cse4 .cse5 .cse6) (and (and .cse0 .cse4 .cse6) .cse2) (and (and .cse3 .cse5) .cse1)))) [2019-11-20 00:44:29,508 INFO L440 ceAbstractionStarter]: At program point L347(lines 340 350) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse1 (<= 0 ~methaneLevelCritical~0)) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) (and .cse0 .cse1) (= 1 |ULTIMATE.start_isMethaneAlarm_#res|) (= 1 ~methaneLevelCritical~0)))) [2019-11-20 00:44:29,508 INFO L440 ceAbstractionStarter]: At program point L347-1(lines 340 350) the Hoare annotation is: (and (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~pumpRunning~0 0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 0 ~methaneLevelCritical~0)) [2019-11-20 00:44:29,508 INFO L440 ceAbstractionStarter]: At program point L347-2(lines 340 350) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse1 .cse2 (<= 0 ~methaneLevelCritical~0)) (and .cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 (= 1 |ULTIMATE.start_isMethaneAlarm_#res|) .cse2 (= 1 ~methaneLevelCritical~0)))) [2019-11-20 00:44:29,508 INFO L440 ceAbstractionStarter]: At program point L347-3(lines 340 350) the Hoare annotation is: false [2019-11-20 00:44:29,508 INFO L440 ceAbstractionStarter]: At program point L347-4(lines 340 350) the Hoare annotation is: false [2019-11-20 00:44:29,508 INFO L440 ceAbstractionStarter]: At program point L347-5(lines 340 350) the Hoare annotation is: false [2019-11-20 00:44:29,508 INFO L440 ceAbstractionStarter]: At program point L347-6(lines 340 350) the Hoare annotation is: false [2019-11-20 00:44:29,509 INFO L440 ceAbstractionStarter]: At program point L347-7(lines 340 350) the Hoare annotation is: false [2019-11-20 00:44:29,509 INFO L440 ceAbstractionStarter]: At program point L347-8(lines 340 350) the Hoare annotation is: false [2019-11-20 00:44:29,509 INFO L440 ceAbstractionStarter]: At program point L876-2(lines 876 890) the Hoare annotation is: false [2019-11-20 00:44:29,509 INFO L444 ceAbstractionStarter]: For program point L51(lines 51 64) no Hoare annotation was computed. [2019-11-20 00:44:29,509 INFO L440 ceAbstractionStarter]: At program point L51-1(lines 1 959) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (let ((.cse0 (= 1 ~systemActive~0)) (.cse9 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse10 (= 1 ~methaneLevelCritical~0)) (.cse1 (<= ~methaneLevelCritical~0 0)) (.cse2 (< 0 (+ ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0 1))) (.cse11 (and .cse8 .cse6)) (.cse3 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse4 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse5 (<= ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0 0)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse12 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse1 (and .cse0 (= 1 ~waterLevel~0) .cse8 .cse6) .cse7) (and (and .cse0 .cse8 .cse6) .cse9 .cse10) (and (and .cse11 .cse9 .cse10) .cse12) (and (and .cse1 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) .cse12)))) [2019-11-20 00:44:29,509 INFO L444 ceAbstractionStarter]: For program point L51-2(lines 51 64) no Hoare annotation was computed. [2019-11-20 00:44:29,509 INFO L440 ceAbstractionStarter]: At program point L51-3(lines 1 959) the Hoare annotation is: false [2019-11-20 00:44:29,510 INFO L444 ceAbstractionStarter]: For program point L51-4(lines 51 64) no Hoare annotation was computed. [2019-11-20 00:44:29,510 INFO L440 ceAbstractionStarter]: At program point L51-5(lines 1 959) the Hoare annotation is: false [2019-11-20 00:44:29,510 INFO L444 ceAbstractionStarter]: For program point L877(line 877) no Hoare annotation was computed. [2019-11-20 00:44:29,510 INFO L444 ceAbstractionStarter]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-11-20 00:44:29,510 INFO L444 ceAbstractionStarter]: For program point L152(lines 152 156) no Hoare annotation was computed. [2019-11-20 00:44:29,510 INFO L444 ceAbstractionStarter]: For program point L880(lines 880 884) no Hoare annotation was computed. [2019-11-20 00:44:29,510 INFO L444 ceAbstractionStarter]: For program point L880-1(lines 228 234) no Hoare annotation was computed. [2019-11-20 00:44:29,510 INFO L444 ceAbstractionStarter]: For program point L286(lines 286 303) no Hoare annotation was computed. [2019-11-20 00:44:29,510 INFO L444 ceAbstractionStarter]: For program point L286-1(lines 286 303) no Hoare annotation was computed. [2019-11-20 00:44:29,510 INFO L444 ceAbstractionStarter]: For program point L286-2(lines 286 303) no Hoare annotation was computed. [2019-11-20 00:44:29,511 INFO L444 ceAbstractionStarter]: For program point L55(lines 55 61) no Hoare annotation was computed. [2019-11-20 00:44:29,511 INFO L444 ceAbstractionStarter]: For program point L55-2(lines 55 61) no Hoare annotation was computed. [2019-11-20 00:44:29,511 INFO L444 ceAbstractionStarter]: For program point L947(lines 947 954) no Hoare annotation was computed. [2019-11-20 00:44:29,511 INFO L444 ceAbstractionStarter]: For program point L55-4(lines 55 61) no Hoare annotation was computed. [2019-11-20 00:44:29,511 INFO L447 ceAbstractionStarter]: At program point L947-1(lines 947 954) the Hoare annotation is: true [2019-11-20 00:44:29,511 INFO L444 ceAbstractionStarter]: For program point L452(lines 452 458) no Hoare annotation was computed. [2019-11-20 00:44:29,511 INFO L440 ceAbstractionStarter]: At program point L452-1(lines 452 458) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse13 (= ~pumpRunning~0 0)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (let ((.cse8 (and .cse0 .cse13 .cse6)) (.cse9 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse10 (= 1 ~methaneLevelCritical~0)) (.cse1 (<= ~methaneLevelCritical~0 0)) (.cse2 (< 0 (+ ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0 1))) (.cse11 (and .cse13 .cse6)) (.cse3 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse4 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse5 (<= ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0 0)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse12 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse1 .cse7) (and .cse8 .cse9 .cse10) (and (and .cse11 .cse9 .cse10) .cse12) (and (and .cse1 .cse2 .cse11 .cse3 .cse4 .cse5 .cse7) .cse12)))) [2019-11-20 00:44:29,512 INFO L444 ceAbstractionStarter]: For program point L419(lines 419 425) no Hoare annotation was computed. [2019-11-20 00:44:29,514 INFO L440 ceAbstractionStarter]: At program point L419-1(lines 419 425) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 0) (= 0 ULTIMATE.start_test_~splverifierCounter~0)))) (or (and .cse0 (= 1 ~methaneLevelCritical~0)) (and (<= ~methaneLevelCritical~0 0) .cse0 (<= 0 ~methaneLevelCritical~0)))) [2019-11-20 00:44:29,514 INFO L444 ceAbstractionStarter]: For program point L322(lines 322 328) no Hoare annotation was computed. [2019-11-20 00:44:29,514 INFO L444 ceAbstractionStarter]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-11-20 00:44:29,514 INFO L444 ceAbstractionStarter]: For program point L322-2(lines 322 328) no Hoare annotation was computed. [2019-11-20 00:44:29,514 INFO L444 ceAbstractionStarter]: For program point L322-4(lines 322 328) no Hoare annotation was computed. [2019-11-20 00:44:29,515 INFO L444 ceAbstractionStarter]: For program point L322-6(lines 322 328) no Hoare annotation was computed. [2019-11-20 00:44:29,515 INFO L444 ceAbstractionStarter]: For program point L322-8(lines 322 328) no Hoare annotation was computed. [2019-11-20 00:44:29,515 INFO L444 ceAbstractionStarter]: For program point L322-10(lines 322 328) no Hoare annotation was computed. [2019-11-20 00:44:29,515 INFO L440 ceAbstractionStarter]: At program point L356(lines 351 359) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_isPumpRunning_#res| 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse4 (= 1 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= 0 ~systemActive~0)) (and (and (= 1 ~systemActive~0) .cse0 .cse2 .cse3) .cse1 .cse4))) [2019-11-20 00:44:29,515 INFO L440 ceAbstractionStarter]: At program point L356-1(lines 351 359) the Hoare annotation is: false [2019-11-20 00:44:29,516 INFO L444 ceAbstractionStarter]: For program point L290(lines 290 298) no Hoare annotation was computed. [2019-11-20 00:44:29,516 INFO L440 ceAbstractionStarter]: At program point L356-2(lines 351 359) the Hoare annotation is: false [2019-11-20 00:44:29,516 INFO L444 ceAbstractionStarter]: For program point L290-1(lines 290 298) no Hoare annotation was computed. [2019-11-20 00:44:29,516 INFO L444 ceAbstractionStarter]: For program point L290-2(lines 290 298) no Hoare annotation was computed. [2019-11-20 00:44:29,516 INFO L440 ceAbstractionStarter]: At program point L490(lines 441 491) the Hoare annotation is: false [2019-11-20 00:44:29,516 INFO L444 ceAbstractionStarter]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-11-20 00:44:29,517 INFO L444 ceAbstractionStarter]: For program point L260(lines 260 277) no Hoare annotation was computed. [2019-11-20 00:44:29,517 INFO L444 ceAbstractionStarter]: For program point L260-1(lines 260 277) no Hoare annotation was computed. [2019-11-20 00:44:29,517 INFO L444 ceAbstractionStarter]: For program point L260-2(lines 260 277) no Hoare annotation was computed. [2019-11-20 00:44:29,517 INFO L444 ceAbstractionStarter]: For program point L260-3(lines 260 277) no Hoare annotation was computed. [2019-11-20 00:44:29,517 INFO L444 ceAbstractionStarter]: For program point L128(lines 128 132) no Hoare annotation was computed. [2019-11-20 00:44:29,517 INFO L444 ceAbstractionStarter]: For program point L260-4(lines 260 277) no Hoare annotation was computed. [2019-11-20 00:44:29,518 INFO L444 ceAbstractionStarter]: For program point L260-5(lines 260 277) no Hoare annotation was computed. [2019-11-20 00:44:29,518 INFO L444 ceAbstractionStarter]: For program point L128-3(lines 128 132) no Hoare annotation was computed. [2019-11-20 00:44:29,518 INFO L444 ceAbstractionStarter]: For program point L128-6(lines 128 132) no Hoare annotation was computed. [2019-11-20 00:44:29,518 INFO L440 ceAbstractionStarter]: At program point L228(lines 227 246) the Hoare annotation is: (let ((.cse5 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (let ((.cse0 (and (= ~pumpRunning~0 0) .cse5)) (.cse4 (<= ~methaneLevelCritical~0 0)) (.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= 1 ~methaneLevelCritical~0))) (or (and (and .cse0 .cse1) .cse2) (and .cse3 .cse4 .cse5 .cse6) (and (and .cse0 .cse4 .cse6) .cse2) (and (and .cse3 .cse5) .cse1)))) [2019-11-20 00:44:29,518 INFO L444 ceAbstractionStarter]: For program point L228-1(lines 228 234) no Hoare annotation was computed. [2019-11-20 00:44:29,519 INFO L440 ceAbstractionStarter]: At program point L228-2(lines 227 246) the Hoare annotation is: false [2019-11-20 00:44:29,519 INFO L440 ceAbstractionStarter]: At program point L228-3(lines 227 246) the Hoare annotation is: false [2019-11-20 00:44:29,519 INFO L447 ceAbstractionStarter]: At program point L956(lines 937 959) the Hoare annotation is: true [2019-11-20 00:44:29,519 INFO L444 ceAbstractionStarter]: For program point L-1(line -1) no Hoare annotation was computed. [2019-11-20 00:44:29,519 INFO L440 ceAbstractionStarter]: At program point L924(lines 920 926) the Hoare annotation is: (and (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (= 1 ~waterLevel~0) (= ~pumpRunning~0 0) (<= 0 ~methaneLevelCritical~0)) [2019-11-20 00:44:29,520 INFO L444 ceAbstractionStarter]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 73) no Hoare annotation was computed. [2019-11-20 00:44:29,520 INFO L444 ceAbstractionStarter]: For program point L462(lines 462 468) no Hoare annotation was computed. [2019-11-20 00:44:29,520 INFO L440 ceAbstractionStarter]: At program point L462-1(lines 462 468) the Hoare annotation is: (let ((.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (let ((.cse1 (<= ~methaneLevelCritical~0 0)) (.cse3 (<= 0 ~methaneLevelCritical~0)) (.cse0 (= 1 ~systemActive~0)) (.cse4 (and (= ~pumpRunning~0 0) .cse2)) (.cse6 (= 1 ~methaneLevelCritical~0)) (.cse5 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and (and .cse1 .cse4 .cse3) .cse5) (and (and .cse0 .cse2) .cse6) (and (and .cse4 .cse6) .cse5)))) [2019-11-20 00:44:29,520 INFO L444 ceAbstractionStarter]: For program point L264(lines 264 272) no Hoare annotation was computed. [2019-11-20 00:44:29,520 INFO L444 ceAbstractionStarter]: For program point L264-1(lines 264 272) no Hoare annotation was computed. [2019-11-20 00:44:29,521 INFO L444 ceAbstractionStarter]: For program point L264-2(lines 264 272) no Hoare annotation was computed. [2019-11-20 00:44:29,521 INFO L440 ceAbstractionStarter]: At program point L165(lines 160 168) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse1 (<= 0 ~methaneLevelCritical~0)) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) (and .cse0 .cse1) (= 1 ~methaneLevelCritical~0)))) [2019-11-20 00:44:29,521 INFO L444 ceAbstractionStarter]: For program point L264-3(lines 264 272) no Hoare annotation was computed. [2019-11-20 00:44:29,521 INFO L440 ceAbstractionStarter]: At program point L165-1(lines 160 168) the Hoare annotation is: (and (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~pumpRunning~0 0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 0 ~methaneLevelCritical~0)) [2019-11-20 00:44:29,521 INFO L444 ceAbstractionStarter]: For program point L264-4(lines 264 272) no Hoare annotation was computed. [2019-11-20 00:44:29,522 INFO L440 ceAbstractionStarter]: At program point L165-2(lines 160 168) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse1 .cse2 (<= 0 ~methaneLevelCritical~0)) (and .cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 .cse2 (= 1 ~methaneLevelCritical~0)))) [2019-11-20 00:44:29,522 INFO L444 ceAbstractionStarter]: For program point L264-5(lines 264 272) no Hoare annotation was computed. [2019-11-20 00:44:29,522 INFO L440 ceAbstractionStarter]: At program point L165-3(lines 160 168) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (let ((.cse1 (<= ~methaneLevelCritical~0 0)) (.cse2 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse3 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse4 (<= 0 ~methaneLevelCritical~0)) (.cse6 (= 1 ~systemActive~0)) (.cse0 (and .cse9 .cse7)) (.cse8 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse10 (= 1 ~methaneLevelCritical~0)) (.cse5 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse7 .cse4) (and .cse8 (and .cse6 .cse9 .cse7) .cse10) (and .cse0 .cse8 .cse10 .cse5)))) [2019-11-20 00:44:29,522 INFO L440 ceAbstractionStarter]: At program point L165-4(lines 160 168) the Hoare annotation is: false [2019-11-20 00:44:29,523 INFO L440 ceAbstractionStarter]: At program point L165-5(lines 160 168) the Hoare annotation is: false [2019-11-20 00:44:29,523 INFO L440 ceAbstractionStarter]: At program point L165-6(lines 160 168) the Hoare annotation is: false [2019-11-20 00:44:29,523 INFO L440 ceAbstractionStarter]: At program point L165-7(lines 160 168) the Hoare annotation is: false [2019-11-20 00:44:29,523 INFO L440 ceAbstractionStarter]: At program point L165-8(lines 160 168) the Hoare annotation is: false [2019-11-20 00:44:29,523 INFO L440 ceAbstractionStarter]: At program point L165-9(lines 160 168) the Hoare annotation is: false [2019-11-20 00:44:29,523 INFO L440 ceAbstractionStarter]: At program point L165-10(lines 160 168) the Hoare annotation is: false [2019-11-20 00:44:29,524 INFO L440 ceAbstractionStarter]: At program point L165-11(lines 160 168) the Hoare annotation is: false [2019-11-20 00:44:29,554 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 12:44:29 BoogieIcfgContainer [2019-11-20 00:44:29,555 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-11-20 00:44:29,555 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-11-20 00:44:29,555 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-11-20 00:44:29,555 INFO L275 PluginConnector]: Witness Printer initialized [2019-11-20 00:44:29,556 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:44:18" (3/4) ... [2019-11-20 00:44:29,559 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-11-20 00:44:29,579 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2019-11-20 00:44:29,581 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2019-11-20 00:44:29,582 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2019-11-20 00:44:29,584 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2019-11-20 00:44:29,585 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-11-20 00:44:29,586 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-11-20 00:44:29,618 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == systemActive && methaneLevelCritical <= 0) && 0 < tmp + 1) && 0 <= \result) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || ((methaneLevelCritical <= 0 && ((1 == systemActive && 1 == waterLevel) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical)) || ((((pumpRunning == 0 && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical) && 0 == systemActive)) || (((((((methaneLevelCritical <= 0 && 0 < tmp + 1) && pumpRunning == 0 && 0 == splverifierCounter) && 0 <= \result) && \result <= 0) && tmp <= 0) && 0 <= methaneLevelCritical) && 0 == systemActive) [2019-11-20 00:44:29,619 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == systemActive && methaneLevelCritical <= 0) && 0 < tmp + 1) && 0 <= \result) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || ((((1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical)) || ((((1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical)) || ((((pumpRunning == 0 && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical) && 0 == systemActive)) || (((((((methaneLevelCritical <= 0 && 0 < tmp + 1) && pumpRunning == 0 && 0 == splverifierCounter) && 0 <= \result) && \result <= 0) && tmp <= 0) && 0 <= methaneLevelCritical) && 0 == systemActive) [2019-11-20 00:44:29,620 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && 0 == systemActive) || (((pumpRunning == 0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive)) || (((1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((methaneLevelCritical <= 0 && (1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) [2019-11-20 00:44:29,621 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && 0 <= methaneLevelCritical) && 0 == systemActive) || (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((1 == \result && (1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || ((((pumpRunning == 0 && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical) && 0 == systemActive) [2019-11-20 00:44:29,622 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || ((1 == \result && 1 == systemActive && 0 == splverifierCounter) && 1 == methaneLevelCritical) [2019-11-20 00:44:29,623 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((1 == \result && 1 == systemActive && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical) [2019-11-20 00:44:29,623 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\result == 0 && 1 == \result) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) || (((((1 == systemActive && \result == 0) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical) [2019-11-20 00:44:29,625 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical [2019-11-20 00:44:29,626 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || ((((1 == systemActive && 1 == \result) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) [2019-11-20 00:44:29,626 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical [2019-11-20 00:44:29,627 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((((1 == systemActive && 1 == \result) && pumpRunning == 0) && 1 == \result) && 0 == splverifierCounter) && 1 == methaneLevelCritical) [2019-11-20 00:44:29,627 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical [2019-11-20 00:44:29,628 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical [2019-11-20 00:44:29,725 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/run_dir_ded71244-057e-4152-ac1b-f9b128bfba34/bin/uautomizer/witness.graphml [2019-11-20 00:44:29,725 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-11-20 00:44:29,726 INFO L168 Benchmark]: Toolchain (without parser) took 13442.47 ms. Allocated memory was 1.0 GB in the beginning and 1.4 GB in the end (delta: 368.1 MB). Free memory was 950.0 MB in the beginning and 1.2 GB in the end (delta: -281.8 MB). Peak memory consumption was 86.3 MB. Max. memory is 11.5 GB. [2019-11-20 00:44:29,727 INFO L168 Benchmark]: CDTParser took 0.22 ms. Allocated memory is still 1.0 GB. Free memory is still 967.5 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-20 00:44:29,727 INFO L168 Benchmark]: CACSL2BoogieTranslator took 688.75 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 120.1 MB). Free memory was 950.0 MB in the beginning and 1.1 GB in the end (delta: -152.0 MB). Peak memory consumption was 23.0 MB. Max. memory is 11.5 GB. [2019-11-20 00:44:29,728 INFO L168 Benchmark]: Boogie Procedure Inliner took 86.10 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 7.0 MB). Peak memory consumption was 7.0 MB. Max. memory is 11.5 GB. [2019-11-20 00:44:29,728 INFO L168 Benchmark]: Boogie Preprocessor took 70.66 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 7.0 MB). Peak memory consumption was 7.0 MB. Max. memory is 11.5 GB. [2019-11-20 00:44:29,728 INFO L168 Benchmark]: RCFGBuilder took 1127.60 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 71.3 MB). Peak memory consumption was 71.3 MB. Max. memory is 11.5 GB. [2019-11-20 00:44:29,729 INFO L168 Benchmark]: TraceAbstraction took 11294.48 ms. Allocated memory was 1.1 GB in the beginning and 1.4 GB in the end (delta: 248.0 MB). Free memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: -242.8 MB). Peak memory consumption was 397.1 MB. Max. memory is 11.5 GB. [2019-11-20 00:44:29,729 INFO L168 Benchmark]: Witness Printer took 170.29 ms. Allocated memory is still 1.4 GB. Free memory was 1.3 GB in the beginning and 1.2 GB in the end (delta: 27.6 MB). Peak memory consumption was 27.6 MB. Max. memory is 11.5 GB. [2019-11-20 00:44:29,731 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22 ms. Allocated memory is still 1.0 GB. Free memory is still 967.5 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 688.75 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 120.1 MB). Free memory was 950.0 MB in the beginning and 1.1 GB in the end (delta: -152.0 MB). Peak memory consumption was 23.0 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 86.10 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 7.0 MB). Peak memory consumption was 7.0 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 70.66 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 7.0 MB). Peak memory consumption was 7.0 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1127.60 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 71.3 MB). Peak memory consumption was 71.3 MB. Max. memory is 11.5 GB. * TraceAbstraction took 11294.48 ms. Allocated memory was 1.1 GB in the beginning and 1.4 GB in the end (delta: 248.0 MB). Free memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: -242.8 MB). Peak memory consumption was 397.1 MB. Max. memory is 11.5 GB. * Witness Printer took 170.29 ms. Allocated memory is still 1.4 GB. Free memory was 1.3 GB in the beginning and 1.2 GB in the end (delta: 27.6 MB). Peak memory consumption was 27.6 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 73]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 73]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 73]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: ((((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((((1 == systemActive && 1 == \result) && pumpRunning == 0) && 1 == \result) && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((1 == systemActive && methaneLevelCritical <= 0) && 0 < tmp + 1) && 0 <= \result) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || ((methaneLevelCritical <= 0 && ((1 == systemActive && 1 == waterLevel) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical)) || ((((pumpRunning == 0 && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical) && 0 == systemActive)) || (((((((methaneLevelCritical <= 0 && 0 < tmp + 1) && pumpRunning == 0 && 0 == splverifierCounter) && 0 <= \result) && \result <= 0) && tmp <= 0) && 0 <= methaneLevelCritical) && 0 == systemActive) - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 947]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((1 == \result && 1 == systemActive && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || ((1 == \result && 1 == systemActive && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((1 == systemActive && methaneLevelCritical <= 0) && 1 == waterLevel) && pumpRunning == 0) && 0 <= methaneLevelCritical - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 235]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && 0 <= methaneLevelCritical) && 0 == systemActive) || (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((1 == \result && (1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || ((((pumpRunning == 0 && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical) && 0 == systemActive) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || ((((1 == systemActive && 1 == \result) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical - InvariantResult [Line: 106]: Loop Invariant Derived loop invariant: (((1 == systemActive && methaneLevelCritical <= 0) && 1 == waterLevel) && pumpRunning == 0) && 0 <= methaneLevelCritical - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: (((((\result == 0 && 1 == \result) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) || (((((1 == systemActive && \result == 0) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical) - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 462]: Loop Invariant Derived loop invariant: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((methaneLevelCritical <= 0 && pumpRunning == 0 && 0 == splverifierCounter) && 0 <= methaneLevelCritical) && 0 == systemActive)) || ((1 == systemActive && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((pumpRunning == 0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: ((((1 == systemActive && methaneLevelCritical <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 235]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 235]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && 0 == systemActive) || (((pumpRunning == 0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive)) || (((1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((methaneLevelCritical <= 0 && (1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: (((((1 == systemActive && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: ((((1 == systemActive && methaneLevelCritical <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) || (((1 == systemActive && methaneLevelCritical <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && 0 == systemActive)) || ((1 == systemActive && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: ((((((((((1 == systemActive && methaneLevelCritical <= 0) && 0 < tmp + 1) && 0 <= \result) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || ((((1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical)) || ((((1 == systemActive && pumpRunning == 0) && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical)) || ((((pumpRunning == 0 && 0 == splverifierCounter) && 1 == \result) && 1 == methaneLevelCritical) && 0 == systemActive)) || (((((((methaneLevelCritical <= 0 && 0 < tmp + 1) && pumpRunning == 0 && 0 == splverifierCounter) && 0 <= \result) && \result <= 0) && tmp <= 0) && 0 <= methaneLevelCritical) && 0 == systemActive) - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) || ((methaneLevelCritical <= 0 && pumpRunning == 0 && 0 == splverifierCounter) && 0 <= methaneLevelCritical) - InvariantResult [Line: 876]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) || (((1 == systemActive && methaneLevelCritical <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && 0 == systemActive)) || ((1 == systemActive && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 920]: Loop Invariant Derived loop invariant: (((1 == systemActive && methaneLevelCritical <= 0) && 1 == waterLevel) && pumpRunning == 0) && 0 <= methaneLevelCritical - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 131 locations, 3 error locations. Result: SAFE, OverallTime: 11.1s, OverallIterations: 12, TraceHistogramMax: 2, AutomataDifference: 1.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.5s, HoareTripleCheckerStatistics: 1372 SDtfs, 1653 SDslu, 2302 SDs, 0 SdLazy, 354 SolverSat, 69 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.5s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 81 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=398occurred in iteration=9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 1655 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 56 LocationsWithAnnotation, 56 PreInvPairs, 240 NumberOfFragments, 1012 HoareAnnotationTreeSize, 56 FomulaSimplifications, 358665 FormulaSimplificationTreeSizeReduction, 1.9s HoareSimplificationTime, 56 FomulaSimplificationsInter, 91774 FormulaSimplificationTreeSizeReductionInter, 5.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 378 NumberOfCodeBlocks, 378 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 366 ConstructedInterpolants, 0 QuantifiedInterpolants, 24990 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 27/27 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...