./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 30f4e4ab Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0997f7b4913388226e163b59383b8166cd33b05b ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.24-30f4e4a [2019-11-28 00:22:13,421 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-11-28 00:22:13,423 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-11-28 00:22:13,440 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-11-28 00:22:13,441 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-11-28 00:22:13,443 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-11-28 00:22:13,445 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-11-28 00:22:13,455 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-11-28 00:22:13,458 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-11-28 00:22:13,460 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-11-28 00:22:13,462 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-11-28 00:22:13,463 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-11-28 00:22:13,465 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-11-28 00:22:13,468 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-11-28 00:22:13,471 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-11-28 00:22:13,473 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-11-28 00:22:13,475 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-11-28 00:22:13,478 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-11-28 00:22:13,480 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-11-28 00:22:13,485 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-11-28 00:22:13,490 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-11-28 00:22:13,493 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-11-28 00:22:13,495 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-11-28 00:22:13,497 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-11-28 00:22:13,500 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-11-28 00:22:13,501 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-11-28 00:22:13,501 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-11-28 00:22:13,503 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-11-28 00:22:13,504 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-11-28 00:22:13,505 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-11-28 00:22:13,505 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-11-28 00:22:13,506 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-11-28 00:22:13,507 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-11-28 00:22:13,508 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-11-28 00:22:13,509 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-11-28 00:22:13,510 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-11-28 00:22:13,511 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-11-28 00:22:13,511 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-11-28 00:22:13,512 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-11-28 00:22:13,514 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-11-28 00:22:13,516 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-11-28 00:22:13,517 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2019-11-28 00:22:13,550 INFO L113 SettingsManager]: Loading preferences was successful [2019-11-28 00:22:13,551 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-11-28 00:22:13,552 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-11-28 00:22:13,552 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-11-28 00:22:13,552 INFO L138 SettingsManager]: * Use SBE=true [2019-11-28 00:22:13,555 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-11-28 00:22:13,556 INFO L138 SettingsManager]: * sizeof long=4 [2019-11-28 00:22:13,556 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-11-28 00:22:13,556 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-11-28 00:22:13,556 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-11-28 00:22:13,558 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-11-28 00:22:13,558 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-11-28 00:22:13,559 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-11-28 00:22:13,559 INFO L138 SettingsManager]: * sizeof long double=12 [2019-11-28 00:22:13,559 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-11-28 00:22:13,560 INFO L138 SettingsManager]: * Use constant arrays=true [2019-11-28 00:22:13,560 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-11-28 00:22:13,560 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-11-28 00:22:13,561 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-11-28 00:22:13,561 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-11-28 00:22:13,561 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-11-28 00:22:13,561 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-28 00:22:13,562 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-11-28 00:22:13,562 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-11-28 00:22:13,562 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-11-28 00:22:13,563 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-11-28 00:22:13,563 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-11-28 00:22:13,563 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-11-28 00:22:13,563 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0997f7b4913388226e163b59383b8166cd33b05b [2019-11-28 00:22:13,862 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-11-28 00:22:13,882 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-11-28 00:22:13,887 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-11-28 00:22:13,889 INFO L271 PluginConnector]: Initializing CDTParser... [2019-11-28 00:22:13,889 INFO L275 PluginConnector]: CDTParser initialized [2019-11-28 00:22:13,890 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2019-11-28 00:22:13,970 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bdca706b6/6b076112dc7f46a2874726cbe3f3021a/FLAG299e4fe58 [2019-11-28 00:22:14,578 INFO L306 CDTParser]: Found 1 translation units. [2019-11-28 00:22:14,580 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2019-11-28 00:22:14,594 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bdca706b6/6b076112dc7f46a2874726cbe3f3021a/FLAG299e4fe58 [2019-11-28 00:22:14,832 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bdca706b6/6b076112dc7f46a2874726cbe3f3021a [2019-11-28 00:22:14,835 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-11-28 00:22:14,837 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-11-28 00:22:14,838 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-11-28 00:22:14,838 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-11-28 00:22:14,841 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-11-28 00:22:14,842 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 12:22:14" (1/1) ... [2019-11-28 00:22:14,846 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@c203df and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:14, skipping insertion in model container [2019-11-28 00:22:14,846 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.11 12:22:14" (1/1) ... [2019-11-28 00:22:14,854 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-11-28 00:22:14,917 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-11-28 00:22:15,389 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-28 00:22:15,411 INFO L203 MainTranslator]: Completed pre-run [2019-11-28 00:22:15,518 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-28 00:22:15,556 INFO L208 MainTranslator]: Completed translation [2019-11-28 00:22:15,557 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15 WrapperNode [2019-11-28 00:22:15,557 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-11-28 00:22:15,558 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-11-28 00:22:15,558 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-11-28 00:22:15,558 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-11-28 00:22:15,567 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15" (1/1) ... [2019-11-28 00:22:15,591 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15" (1/1) ... [2019-11-28 00:22:15,666 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-11-28 00:22:15,667 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-11-28 00:22:15,667 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-11-28 00:22:15,667 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-11-28 00:22:15,675 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15" (1/1) ... [2019-11-28 00:22:15,675 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15" (1/1) ... [2019-11-28 00:22:15,684 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15" (1/1) ... [2019-11-28 00:22:15,684 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15" (1/1) ... [2019-11-28 00:22:15,709 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15" (1/1) ... [2019-11-28 00:22:15,725 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15" (1/1) ... [2019-11-28 00:22:15,731 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15" (1/1) ... [2019-11-28 00:22:15,740 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-11-28 00:22:15,740 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-11-28 00:22:15,741 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-11-28 00:22:15,741 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-11-28 00:22:15,742 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-11-28 00:22:15,835 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-11-28 00:22:15,835 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-11-28 00:22:15,835 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-11-28 00:22:15,835 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-11-28 00:22:17,006 INFO L292 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-11-28 00:22:17,006 INFO L297 CfgBuilder]: Removed 354 assume(true) statements. [2019-11-28 00:22:17,008 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 12:22:17 BoogieIcfgContainer [2019-11-28 00:22:17,008 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-11-28 00:22:17,010 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-11-28 00:22:17,010 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-11-28 00:22:17,013 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-11-28 00:22:17,014 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.11 12:22:14" (1/3) ... [2019-11-28 00:22:17,015 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@20a97961 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 12:22:17, skipping insertion in model container [2019-11-28 00:22:17,015 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.11 12:22:15" (2/3) ... [2019-11-28 00:22:17,016 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@20a97961 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.11 12:22:17, skipping insertion in model container [2019-11-28 00:22:17,016 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 12:22:17" (3/3) ... [2019-11-28 00:22:17,018 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product61.cil.c [2019-11-28 00:22:17,028 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-11-28 00:22:17,037 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2019-11-28 00:22:17,050 INFO L249 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2019-11-28 00:22:17,075 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-11-28 00:22:17,076 INFO L374 AbstractCegarLoop]: Hoare is true [2019-11-28 00:22:17,076 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-11-28 00:22:17,076 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-11-28 00:22:17,076 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-11-28 00:22:17,076 INFO L378 AbstractCegarLoop]: Difference is false [2019-11-28 00:22:17,077 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-11-28 00:22:17,077 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-11-28 00:22:17,099 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states. [2019-11-28 00:22:17,106 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2019-11-28 00:22:17,107 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:17,108 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:17,108 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:17,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:17,114 INFO L82 PathProgramCache]: Analyzing trace with hash 1389216571, now seen corresponding path program 1 times [2019-11-28 00:22:17,123 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:17,124 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1347131733] [2019-11-28 00:22:17,124 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:17,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:17,391 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:22:17,392 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1347131733] [2019-11-28 00:22:17,393 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:17,394 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2019-11-28 00:22:17,394 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1597258260] [2019-11-28 00:22:17,401 INFO L442 AbstractCegarLoop]: Interpolant automaton has 2 states [2019-11-28 00:22:17,401 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:17,412 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2019-11-28 00:22:17,413 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-11-28 00:22:17,414 INFO L87 Difference]: Start difference. First operand 231 states. Second operand 2 states. [2019-11-28 00:22:17,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:17,478 INFO L93 Difference]: Finished difference Result 456 states and 683 transitions. [2019-11-28 00:22:17,479 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-11-28 00:22:17,480 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2019-11-28 00:22:17,481 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:17,501 INFO L225 Difference]: With dead ends: 456 [2019-11-28 00:22:17,501 INFO L226 Difference]: Without dead ends: 227 [2019-11-28 00:22:17,506 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-11-28 00:22:17,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2019-11-28 00:22:17,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 227. [2019-11-28 00:22:17,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 227 states. [2019-11-28 00:22:17,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 333 transitions. [2019-11-28 00:22:17,575 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 333 transitions. Word has length 18 [2019-11-28 00:22:17,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:17,575 INFO L462 AbstractCegarLoop]: Abstraction has 227 states and 333 transitions. [2019-11-28 00:22:17,577 INFO L463 AbstractCegarLoop]: Interpolant automaton has 2 states. [2019-11-28 00:22:17,577 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 333 transitions. [2019-11-28 00:22:17,578 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2019-11-28 00:22:17,580 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:17,580 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:17,581 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:17,581 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:17,581 INFO L82 PathProgramCache]: Analyzing trace with hash 478185818, now seen corresponding path program 1 times [2019-11-28 00:22:17,582 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:17,582 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [322860726] [2019-11-28 00:22:17,583 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:17,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:17,762 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:22:17,762 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [322860726] [2019-11-28 00:22:17,763 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:17,763 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-28 00:22:17,763 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [808967472] [2019-11-28 00:22:17,767 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 00:22:17,767 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:17,768 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 00:22:17,768 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:22:17,769 INFO L87 Difference]: Start difference. First operand 227 states and 333 transitions. Second operand 3 states. [2019-11-28 00:22:17,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:17,793 INFO L93 Difference]: Finished difference Result 227 states and 333 transitions. [2019-11-28 00:22:17,794 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 00:22:17,794 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2019-11-28 00:22:17,794 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:17,796 INFO L225 Difference]: With dead ends: 227 [2019-11-28 00:22:17,796 INFO L226 Difference]: Without dead ends: 85 [2019-11-28 00:22:17,798 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:22:17,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2019-11-28 00:22:17,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2019-11-28 00:22:17,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 85 states. [2019-11-28 00:22:17,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 124 transitions. [2019-11-28 00:22:17,807 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 124 transitions. Word has length 19 [2019-11-28 00:22:17,807 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:17,808 INFO L462 AbstractCegarLoop]: Abstraction has 85 states and 124 transitions. [2019-11-28 00:22:17,808 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 00:22:17,808 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 124 transitions. [2019-11-28 00:22:17,809 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2019-11-28 00:22:17,809 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:17,809 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:17,810 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:17,810 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:17,810 INFO L82 PathProgramCache]: Analyzing trace with hash 1017898692, now seen corresponding path program 1 times [2019-11-28 00:22:17,810 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:17,811 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1763658435] [2019-11-28 00:22:17,811 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:17,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:17,940 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:22:17,940 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1763658435] [2019-11-28 00:22:17,941 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:17,941 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 00:22:17,941 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1273470699] [2019-11-28 00:22:17,942 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-11-28 00:22:17,942 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:17,942 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-11-28 00:22:17,944 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2019-11-28 00:22:17,944 INFO L87 Difference]: Start difference. First operand 85 states and 124 transitions. Second operand 6 states. [2019-11-28 00:22:18,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:18,092 INFO L93 Difference]: Finished difference Result 164 states and 242 transitions. [2019-11-28 00:22:18,093 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 00:22:18,093 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 24 [2019-11-28 00:22:18,093 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:18,094 INFO L225 Difference]: With dead ends: 164 [2019-11-28 00:22:18,094 INFO L226 Difference]: Without dead ends: 85 [2019-11-28 00:22:18,095 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2019-11-28 00:22:18,096 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2019-11-28 00:22:18,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2019-11-28 00:22:18,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 85 states. [2019-11-28 00:22:18,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 123 transitions. [2019-11-28 00:22:18,118 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 123 transitions. Word has length 24 [2019-11-28 00:22:18,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:18,118 INFO L462 AbstractCegarLoop]: Abstraction has 85 states and 123 transitions. [2019-11-28 00:22:18,119 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-11-28 00:22:18,120 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 123 transitions. [2019-11-28 00:22:18,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2019-11-28 00:22:18,122 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:18,122 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:18,123 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:18,123 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:18,123 INFO L82 PathProgramCache]: Analyzing trace with hash 1367117657, now seen corresponding path program 1 times [2019-11-28 00:22:18,123 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:18,124 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1319495041] [2019-11-28 00:22:18,124 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:18,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:18,204 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:22:18,205 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1319495041] [2019-11-28 00:22:18,205 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:18,205 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2019-11-28 00:22:18,205 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1032643105] [2019-11-28 00:22:18,206 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-11-28 00:22:18,206 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:18,206 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-28 00:22:18,207 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:22:18,207 INFO L87 Difference]: Start difference. First operand 85 states and 123 transitions. Second operand 3 states. [2019-11-28 00:22:18,266 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:18,266 INFO L93 Difference]: Finished difference Result 172 states and 251 transitions. [2019-11-28 00:22:18,268 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-28 00:22:18,268 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 27 [2019-11-28 00:22:18,268 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:18,269 INFO L225 Difference]: With dead ends: 172 [2019-11-28 00:22:18,269 INFO L226 Difference]: Without dead ends: 93 [2019-11-28 00:22:18,270 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-28 00:22:18,273 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2019-11-28 00:22:18,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 91. [2019-11-28 00:22:18,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 91 states. [2019-11-28 00:22:18,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 128 transitions. [2019-11-28 00:22:18,287 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 128 transitions. Word has length 27 [2019-11-28 00:22:18,288 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:18,288 INFO L462 AbstractCegarLoop]: Abstraction has 91 states and 128 transitions. [2019-11-28 00:22:18,288 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-11-28 00:22:18,288 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 128 transitions. [2019-11-28 00:22:18,289 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2019-11-28 00:22:18,290 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:18,290 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:18,291 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:18,291 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:18,292 INFO L82 PathProgramCache]: Analyzing trace with hash 166613997, now seen corresponding path program 1 times [2019-11-28 00:22:18,292 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:18,292 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [629417403] [2019-11-28 00:22:18,293 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:18,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:18,426 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:22:18,426 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [629417403] [2019-11-28 00:22:18,427 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:18,427 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-28 00:22:18,427 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1733306811] [2019-11-28 00:22:18,429 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 00:22:18,429 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:18,430 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 00:22:18,430 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 00:22:18,430 INFO L87 Difference]: Start difference. First operand 91 states and 128 transitions. Second operand 5 states. [2019-11-28 00:22:18,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:18,586 INFO L93 Difference]: Finished difference Result 444 states and 640 transitions. [2019-11-28 00:22:18,586 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-28 00:22:18,587 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2019-11-28 00:22:18,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:18,590 INFO L225 Difference]: With dead ends: 444 [2019-11-28 00:22:18,590 INFO L226 Difference]: Without dead ends: 359 [2019-11-28 00:22:18,591 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2019-11-28 00:22:18,592 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 359 states. [2019-11-28 00:22:18,609 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 359 to 139. [2019-11-28 00:22:18,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 139 states. [2019-11-28 00:22:18,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 192 transitions. [2019-11-28 00:22:18,611 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 192 transitions. Word has length 33 [2019-11-28 00:22:18,611 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:18,612 INFO L462 AbstractCegarLoop]: Abstraction has 139 states and 192 transitions. [2019-11-28 00:22:18,612 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 00:22:18,612 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 192 transitions. [2019-11-28 00:22:18,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-11-28 00:22:18,614 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:18,614 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:18,614 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:18,615 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:18,615 INFO L82 PathProgramCache]: Analyzing trace with hash 1323909935, now seen corresponding path program 1 times [2019-11-28 00:22:18,615 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:18,616 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1651859271] [2019-11-28 00:22:18,616 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:18,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:18,707 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:22:18,707 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1651859271] [2019-11-28 00:22:18,708 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:18,708 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 00:22:18,709 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [299654958] [2019-11-28 00:22:18,709 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 00:22:18,709 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:18,709 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 00:22:18,710 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 00:22:18,710 INFO L87 Difference]: Start difference. First operand 139 states and 192 transitions. Second operand 5 states. [2019-11-28 00:22:18,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:18,941 INFO L93 Difference]: Finished difference Result 669 states and 953 transitions. [2019-11-28 00:22:18,942 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-28 00:22:18,942 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2019-11-28 00:22:18,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:18,947 INFO L225 Difference]: With dead ends: 669 [2019-11-28 00:22:18,947 INFO L226 Difference]: Without dead ends: 584 [2019-11-28 00:22:18,949 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2019-11-28 00:22:18,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 584 states. [2019-11-28 00:22:18,984 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 584 to 216. [2019-11-28 00:22:18,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 216 states. [2019-11-28 00:22:18,986 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 298 transitions. [2019-11-28 00:22:18,988 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 298 transitions. Word has length 34 [2019-11-28 00:22:18,990 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:18,990 INFO L462 AbstractCegarLoop]: Abstraction has 216 states and 298 transitions. [2019-11-28 00:22:18,990 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 00:22:18,990 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 298 transitions. [2019-11-28 00:22:18,995 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-11-28 00:22:18,996 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:18,997 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:19,001 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:19,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:19,002 INFO L82 PathProgramCache]: Analyzing trace with hash 312792685, now seen corresponding path program 1 times [2019-11-28 00:22:19,002 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:19,004 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1962662919] [2019-11-28 00:22:19,004 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:19,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:19,060 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:22:19,060 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1962662919] [2019-11-28 00:22:19,061 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:19,061 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-28 00:22:19,061 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1878663666] [2019-11-28 00:22:19,061 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-11-28 00:22:19,062 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:19,062 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-28 00:22:19,062 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-28 00:22:19,063 INFO L87 Difference]: Start difference. First operand 216 states and 298 transitions. Second operand 4 states. [2019-11-28 00:22:19,171 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:19,171 INFO L93 Difference]: Finished difference Result 661 states and 920 transitions. [2019-11-28 00:22:19,172 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 00:22:19,172 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2019-11-28 00:22:19,172 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:19,175 INFO L225 Difference]: With dead ends: 661 [2019-11-28 00:22:19,176 INFO L226 Difference]: Without dead ends: 497 [2019-11-28 00:22:19,177 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2019-11-28 00:22:19,178 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 497 states. [2019-11-28 00:22:19,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 497 to 216. [2019-11-28 00:22:19,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 216 states. [2019-11-28 00:22:19,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 295 transitions. [2019-11-28 00:22:19,237 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 295 transitions. Word has length 34 [2019-11-28 00:22:19,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:19,238 INFO L462 AbstractCegarLoop]: Abstraction has 216 states and 295 transitions. [2019-11-28 00:22:19,238 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-11-28 00:22:19,238 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 295 transitions. [2019-11-28 00:22:19,238 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-11-28 00:22:19,239 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:19,240 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:19,240 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:19,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:19,241 INFO L82 PathProgramCache]: Analyzing trace with hash 570958123, now seen corresponding path program 1 times [2019-11-28 00:22:19,241 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:19,241 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [600722544] [2019-11-28 00:22:19,241 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:19,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:19,294 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:22:19,295 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [600722544] [2019-11-28 00:22:19,295 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:19,295 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 00:22:19,295 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1990783257] [2019-11-28 00:22:19,296 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 00:22:19,296 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:19,296 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 00:22:19,296 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 00:22:19,297 INFO L87 Difference]: Start difference. First operand 216 states and 295 transitions. Second operand 5 states. [2019-11-28 00:22:19,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:19,440 INFO L93 Difference]: Finished difference Result 701 states and 968 transitions. [2019-11-28 00:22:19,441 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-28 00:22:19,441 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2019-11-28 00:22:19,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:19,444 INFO L225 Difference]: With dead ends: 701 [2019-11-28 00:22:19,444 INFO L226 Difference]: Without dead ends: 491 [2019-11-28 00:22:19,445 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-11-28 00:22:19,446 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 491 states. [2019-11-28 00:22:19,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 491 to 228. [2019-11-28 00:22:19,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 228 states. [2019-11-28 00:22:19,474 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 304 transitions. [2019-11-28 00:22:19,474 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 304 transitions. Word has length 34 [2019-11-28 00:22:19,474 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:19,475 INFO L462 AbstractCegarLoop]: Abstraction has 228 states and 304 transitions. [2019-11-28 00:22:19,475 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 00:22:19,475 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 304 transitions. [2019-11-28 00:22:19,476 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2019-11-28 00:22:19,477 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:19,477 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:19,477 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:19,478 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:19,478 INFO L82 PathProgramCache]: Analyzing trace with hash -598753245, now seen corresponding path program 1 times [2019-11-28 00:22:19,478 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:19,479 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [551165816] [2019-11-28 00:22:19,479 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:19,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:19,624 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:22:19,624 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [551165816] [2019-11-28 00:22:19,624 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:19,624 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 00:22:19,625 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1347617579] [2019-11-28 00:22:19,625 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-11-28 00:22:19,625 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:19,625 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-11-28 00:22:19,626 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-11-28 00:22:19,626 INFO L87 Difference]: Start difference. First operand 228 states and 304 transitions. Second operand 6 states. [2019-11-28 00:22:20,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:20,013 INFO L93 Difference]: Finished difference Result 1339 states and 1752 transitions. [2019-11-28 00:22:20,014 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2019-11-28 00:22:20,014 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 37 [2019-11-28 00:22:20,016 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:20,023 INFO L225 Difference]: With dead ends: 1339 [2019-11-28 00:22:20,023 INFO L226 Difference]: Without dead ends: 1117 [2019-11-28 00:22:20,025 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2019-11-28 00:22:20,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1117 states. [2019-11-28 00:22:20,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1117 to 448. [2019-11-28 00:22:20,083 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 448 states. [2019-11-28 00:22:20,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 588 transitions. [2019-11-28 00:22:20,086 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 588 transitions. Word has length 37 [2019-11-28 00:22:20,086 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:20,086 INFO L462 AbstractCegarLoop]: Abstraction has 448 states and 588 transitions. [2019-11-28 00:22:20,086 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-11-28 00:22:20,087 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 588 transitions. [2019-11-28 00:22:20,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2019-11-28 00:22:20,088 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:20,089 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:20,089 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:20,090 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:20,090 INFO L82 PathProgramCache]: Analyzing trace with hash 81305125, now seen corresponding path program 1 times [2019-11-28 00:22:20,090 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:20,090 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [979871217] [2019-11-28 00:22:20,091 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:20,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:20,178 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:22:20,178 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [979871217] [2019-11-28 00:22:20,178 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:20,178 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-28 00:22:20,179 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1035672388] [2019-11-28 00:22:20,179 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-11-28 00:22:20,179 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:20,179 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-28 00:22:20,180 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-11-28 00:22:20,183 INFO L87 Difference]: Start difference. First operand 448 states and 588 transitions. Second operand 7 states. [2019-11-28 00:22:20,522 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:20,522 INFO L93 Difference]: Finished difference Result 1209 states and 1623 transitions. [2019-11-28 00:22:20,523 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2019-11-28 00:22:20,523 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 37 [2019-11-28 00:22:20,523 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:20,528 INFO L225 Difference]: With dead ends: 1209 [2019-11-28 00:22:20,528 INFO L226 Difference]: Without dead ends: 767 [2019-11-28 00:22:20,530 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=74, Invalid=136, Unknown=0, NotChecked=0, Total=210 [2019-11-28 00:22:20,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 767 states. [2019-11-28 00:22:20,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 767 to 360. [2019-11-28 00:22:20,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 360 states. [2019-11-28 00:22:20,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 360 states to 360 states and 464 transitions. [2019-11-28 00:22:20,588 INFO L78 Accepts]: Start accepts. Automaton has 360 states and 464 transitions. Word has length 37 [2019-11-28 00:22:20,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:20,589 INFO L462 AbstractCegarLoop]: Abstraction has 360 states and 464 transitions. [2019-11-28 00:22:20,589 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-11-28 00:22:20,589 INFO L276 IsEmpty]: Start isEmpty. Operand 360 states and 464 transitions. [2019-11-28 00:22:20,590 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2019-11-28 00:22:20,590 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:20,591 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:20,591 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:20,591 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:20,591 INFO L82 PathProgramCache]: Analyzing trace with hash 1988742173, now seen corresponding path program 1 times [2019-11-28 00:22:20,592 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:20,592 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1188015861] [2019-11-28 00:22:20,592 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:20,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:20,646 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-28 00:22:20,646 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1188015861] [2019-11-28 00:22:20,647 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:20,647 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-28 00:22:20,647 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1267736100] [2019-11-28 00:22:20,647 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-11-28 00:22:20,648 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:20,648 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-28 00:22:20,648 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-28 00:22:20,648 INFO L87 Difference]: Start difference. First operand 360 states and 464 transitions. Second operand 5 states. [2019-11-28 00:22:20,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:20,829 INFO L93 Difference]: Finished difference Result 905 states and 1163 transitions. [2019-11-28 00:22:20,829 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-28 00:22:20,829 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 38 [2019-11-28 00:22:20,831 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:20,834 INFO L225 Difference]: With dead ends: 905 [2019-11-28 00:22:20,834 INFO L226 Difference]: Without dead ends: 551 [2019-11-28 00:22:20,835 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2019-11-28 00:22:20,836 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 551 states. [2019-11-28 00:22:20,875 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 551 to 344. [2019-11-28 00:22:20,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 344 states. [2019-11-28 00:22:20,877 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 433 transitions. [2019-11-28 00:22:20,877 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 433 transitions. Word has length 38 [2019-11-28 00:22:20,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:20,879 INFO L462 AbstractCegarLoop]: Abstraction has 344 states and 433 transitions. [2019-11-28 00:22:20,879 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-11-28 00:22:20,879 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 433 transitions. [2019-11-28 00:22:20,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2019-11-28 00:22:20,880 INFO L402 BasicCegarLoop]: Found error trace [2019-11-28 00:22:20,881 INFO L410 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-28 00:22:20,881 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-11-28 00:22:20,881 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-28 00:22:20,882 INFO L82 PathProgramCache]: Analyzing trace with hash -110145967, now seen corresponding path program 1 times [2019-11-28 00:22:20,882 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-28 00:22:20,883 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1185931560] [2019-11-28 00:22:20,883 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-28 00:22:20,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-28 00:22:20,985 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2019-11-28 00:22:20,986 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1185931560] [2019-11-28 00:22:20,986 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-28 00:22:20,987 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-11-28 00:22:20,987 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [548729849] [2019-11-28 00:22:20,989 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-11-28 00:22:20,989 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-28 00:22:20,989 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-11-28 00:22:20,990 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2019-11-28 00:22:20,990 INFO L87 Difference]: Start difference. First operand 344 states and 433 transitions. Second operand 6 states. [2019-11-28 00:22:21,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-28 00:22:21,304 INFO L93 Difference]: Finished difference Result 1321 states and 1691 transitions. [2019-11-28 00:22:21,305 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2019-11-28 00:22:21,305 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 55 [2019-11-28 00:22:21,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-11-28 00:22:21,306 INFO L225 Difference]: With dead ends: 1321 [2019-11-28 00:22:21,306 INFO L226 Difference]: Without dead ends: 0 [2019-11-28 00:22:21,308 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=35, Invalid=55, Unknown=0, NotChecked=0, Total=90 [2019-11-28 00:22:21,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-11-28 00:22:21,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-11-28 00:22:21,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-11-28 00:22:21,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-11-28 00:22:21,309 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 55 [2019-11-28 00:22:21,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-11-28 00:22:21,310 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-28 00:22:21,310 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-11-28 00:22:21,310 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-11-28 00:22:21,310 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-11-28 00:22:21,313 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-11-28 00:22:21,504 WARN L192 SmtUtils]: Spent 178.00 ms on a formula simplification. DAG size of input: 118 DAG size of output: 106 [2019-11-28 00:22:21,615 WARN L192 SmtUtils]: Spent 104.00 ms on a formula simplification. DAG size of input: 115 DAG size of output: 65 [2019-11-28 00:22:21,846 WARN L192 SmtUtils]: Spent 219.00 ms on a formula simplification. DAG size of input: 118 DAG size of output: 106 [2019-11-28 00:22:22,303 WARN L192 SmtUtils]: Spent 453.00 ms on a formula simplification. DAG size of input: 182 DAG size of output: 152 [2019-11-28 00:22:23,321 WARN L192 SmtUtils]: Spent 1.01 s on a formula simplification. DAG size of input: 295 DAG size of output: 260 [2019-11-28 00:22:23,810 WARN L192 SmtUtils]: Spent 485.00 ms on a formula simplification. DAG size of input: 207 DAG size of output: 165 [2019-11-28 00:22:23,935 WARN L192 SmtUtils]: Spent 122.00 ms on a formula simplification. DAG size of input: 115 DAG size of output: 103 [2019-11-28 00:22:24,059 WARN L192 SmtUtils]: Spent 119.00 ms on a formula simplification. DAG size of input: 132 DAG size of output: 105 [2019-11-28 00:22:24,167 WARN L192 SmtUtils]: Spent 102.00 ms on a formula simplification. DAG size of input: 129 DAG size of output: 104 [2019-11-28 00:22:24,748 WARN L192 SmtUtils]: Spent 576.00 ms on a formula simplification. DAG size of input: 277 DAG size of output: 240 [2019-11-28 00:22:25,207 WARN L192 SmtUtils]: Spent 451.00 ms on a formula simplification. DAG size of input: 261 DAG size of output: 233 [2019-11-28 00:22:25,405 WARN L192 SmtUtils]: Spent 114.00 ms on a formula simplification. DAG size of input: 160 DAG size of output: 122 [2019-11-28 00:22:25,577 WARN L192 SmtUtils]: Spent 164.00 ms on a formula simplification. DAG size of input: 229 DAG size of output: 187 [2019-11-28 00:22:25,943 WARN L192 SmtUtils]: Spent 362.00 ms on a formula simplification. DAG size of input: 221 DAG size of output: 188 [2019-11-28 00:22:26,297 WARN L192 SmtUtils]: Spent 330.00 ms on a formula simplification. DAG size of input: 89 DAG size of output: 36 [2019-11-28 00:22:26,502 WARN L192 SmtUtils]: Spent 196.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 38 [2019-11-28 00:22:26,815 WARN L192 SmtUtils]: Spent 298.00 ms on a formula simplification. DAG size of input: 89 DAG size of output: 36 [2019-11-28 00:22:27,744 WARN L192 SmtUtils]: Spent 927.00 ms on a formula simplification. DAG size of input: 147 DAG size of output: 41 [2019-11-28 00:22:30,023 WARN L192 SmtUtils]: Spent 2.27 s on a formula simplification. DAG size of input: 255 DAG size of output: 35 [2019-11-28 00:22:30,944 WARN L192 SmtUtils]: Spent 917.00 ms on a formula simplification. DAG size of input: 163 DAG size of output: 46 [2019-11-28 00:22:31,282 WARN L192 SmtUtils]: Spent 335.00 ms on a formula simplification. DAG size of input: 86 DAG size of output: 33 [2019-11-28 00:22:31,974 WARN L192 SmtUtils]: Spent 660.00 ms on a formula simplification. DAG size of input: 100 DAG size of output: 45 [2019-11-28 00:22:32,526 WARN L192 SmtUtils]: Spent 534.00 ms on a formula simplification. DAG size of input: 100 DAG size of output: 44 [2019-11-28 00:22:34,570 WARN L192 SmtUtils]: Spent 2.04 s on a formula simplification. DAG size of input: 238 DAG size of output: 45 [2019-11-28 00:22:36,223 WARN L192 SmtUtils]: Spent 1.64 s on a formula simplification. DAG size of input: 230 DAG size of output: 36 [2019-11-28 00:22:36,560 WARN L192 SmtUtils]: Spent 335.00 ms on a formula simplification. DAG size of input: 89 DAG size of output: 36 [2019-11-28 00:22:37,213 WARN L192 SmtUtils]: Spent 623.00 ms on a formula simplification. DAG size of input: 114 DAG size of output: 33 [2019-11-28 00:22:38,415 WARN L192 SmtUtils]: Spent 1.19 s on a formula simplification. DAG size of input: 182 DAG size of output: 37 [2019-11-28 00:22:39,640 WARN L192 SmtUtils]: Spent 1.22 s on a formula simplification. DAG size of input: 186 DAG size of output: 41 [2019-11-28 00:22:39,750 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 467) no Hoare annotation was computed. [2019-11-28 00:22:39,750 INFO L246 CegarLoopResult]: For program point L366(lines 366 370) no Hoare annotation was computed. [2019-11-28 00:22:39,751 INFO L246 CegarLoopResult]: For program point L366-3(lines 366 370) no Hoare annotation was computed. [2019-11-28 00:22:39,751 INFO L246 CegarLoopResult]: For program point L366-6(lines 366 370) no Hoare annotation was computed. [2019-11-28 00:22:39,751 INFO L249 CegarLoopResult]: At program point L566(lines 547 569) the Hoare annotation is: true [2019-11-28 00:22:39,751 INFO L242 CegarLoopResult]: At program point L435(lines 430 438) the Hoare annotation is: (let ((.cse4 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse6 (= ~pumpRunning~0 0)) (.cse8 (<= 0 ~methaneLevelCritical~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse2 (<= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 .cse1 (<= |ULTIMATE.start_getWaterLevel_#res| 1) .cse2 (<= ~waterLevel~0 1) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) (<= ~waterLevel~0 2) (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1)) .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (not .cse6) .cse8 .cse0 .cse1 .cse2 .cse3 .cse5 (<= ULTIMATE.start_activatePump_~tmp~4 0) .cse7))) [2019-11-28 00:22:39,751 INFO L242 CegarLoopResult]: At program point L435-1(lines 430 438) the Hoare annotation is: false [2019-11-28 00:22:39,752 INFO L242 CegarLoopResult]: At program point L435-2(lines 430 438) the Hoare annotation is: false [2019-11-28 00:22:39,752 INFO L242 CegarLoopResult]: At program point L635(lines 630 638) the Hoare annotation is: (and (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (= 1 ~waterLevel~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ~pumpRunning~0 0) (<= 0 ~methaneLevelCritical~0)) [2019-11-28 00:22:39,752 INFO L246 CegarLoopResult]: For program point L443(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,752 INFO L246 CegarLoopResult]: For program point L443-1(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,752 INFO L246 CegarLoopResult]: For program point L443-2(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,753 INFO L246 CegarLoopResult]: For program point L443-3(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,753 INFO L246 CegarLoopResult]: For program point L443-4(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,753 INFO L246 CegarLoopResult]: For program point L443-5(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,753 INFO L246 CegarLoopResult]: For program point L443-6(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,753 INFO L246 CegarLoopResult]: For program point L443-7(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,753 INFO L246 CegarLoopResult]: For program point L443-8(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,754 INFO L246 CegarLoopResult]: For program point L443-9(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,754 INFO L246 CegarLoopResult]: For program point L443-10(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,754 INFO L246 CegarLoopResult]: For program point L443-11(lines 443 449) no Hoare annotation was computed. [2019-11-28 00:22:39,754 INFO L246 CegarLoopResult]: For program point L378(lines 378 382) no Hoare annotation was computed. [2019-11-28 00:22:39,754 INFO L246 CegarLoopResult]: For program point L246(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,754 INFO L246 CegarLoopResult]: For program point L246-2(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,754 INFO L246 CegarLoopResult]: For program point L246-4(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,754 INFO L246 CegarLoopResult]: For program point L246-6(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,754 INFO L246 CegarLoopResult]: For program point L246-8(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,754 INFO L246 CegarLoopResult]: For program point L246-10(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,755 INFO L246 CegarLoopResult]: For program point L246-12(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,755 INFO L246 CegarLoopResult]: For program point L246-14(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,755 INFO L246 CegarLoopResult]: For program point L246-16(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,755 INFO L246 CegarLoopResult]: For program point L246-18(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,755 INFO L246 CegarLoopResult]: For program point L246-20(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,755 INFO L246 CegarLoopResult]: For program point L246-22(lines 246 252) no Hoare annotation was computed. [2019-11-28 00:22:39,755 INFO L246 CegarLoopResult]: For program point L580(lines 580 600) no Hoare annotation was computed. [2019-11-28 00:22:39,755 INFO L246 CegarLoopResult]: For program point L580-2(lines 580 600) no Hoare annotation was computed. [2019-11-28 00:22:39,755 INFO L242 CegarLoopResult]: At program point L448(lines 439 452) the Hoare annotation is: false [2019-11-28 00:22:39,755 INFO L246 CegarLoopResult]: For program point L580-4(lines 580 600) no Hoare annotation was computed. [2019-11-28 00:22:39,756 INFO L242 CegarLoopResult]: At program point L448-1(lines 439 452) the Hoare annotation is: false [2019-11-28 00:22:39,756 INFO L242 CegarLoopResult]: At program point L448-2(lines 439 452) the Hoare annotation is: false [2019-11-28 00:22:39,756 INFO L242 CegarLoopResult]: At program point L448-3(lines 439 452) the Hoare annotation is: (let ((.cse1 (= 1 ~systemActive~0)) (.cse2 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse9 (<= ~waterLevel~0 1)) (.cse7 (= 1 ~methaneLevelCritical~0)) (.cse0 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse8 (<= ~methaneLevelCritical~0 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse10 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse1 .cse2 .cse8 .cse9 .cse4 .cse5 .cse6 .cse10) (and .cse1 .cse2 .cse9 .cse4 .cse5 .cse6 .cse7) (and .cse0 (= |ULTIMATE.start_valid_product_#res| 1) (= 1 ULTIMATE.start_main_~tmp~7) .cse8 .cse3 .cse4 .cse5 .cse6 .cse10))) [2019-11-28 00:22:39,756 INFO L242 CegarLoopResult]: At program point L448-4(lines 439 452) the Hoare annotation is: false [2019-11-28 00:22:39,756 INFO L242 CegarLoopResult]: At program point L448-5(lines 439 452) the Hoare annotation is: false [2019-11-28 00:22:39,756 INFO L242 CegarLoopResult]: At program point L448-6(lines 439 452) the Hoare annotation is: false [2019-11-28 00:22:39,756 INFO L242 CegarLoopResult]: At program point L448-7(lines 439 452) the Hoare annotation is: false [2019-11-28 00:22:39,756 INFO L246 CegarLoopResult]: For program point L184(lines 184 201) no Hoare annotation was computed. [2019-11-28 00:22:39,757 INFO L242 CegarLoopResult]: At program point L448-8(lines 439 452) the Hoare annotation is: false [2019-11-28 00:22:39,757 INFO L246 CegarLoopResult]: For program point L184-1(lines 184 201) no Hoare annotation was computed. [2019-11-28 00:22:39,757 INFO L242 CegarLoopResult]: At program point L448-9(lines 439 452) the Hoare annotation is: false [2019-11-28 00:22:39,757 INFO L246 CegarLoopResult]: For program point L184-2(lines 184 201) no Hoare annotation was computed. [2019-11-28 00:22:39,757 INFO L242 CegarLoopResult]: At program point L448-10(lines 439 452) the Hoare annotation is: false [2019-11-28 00:22:39,757 INFO L246 CegarLoopResult]: For program point L184-3(lines 184 201) no Hoare annotation was computed. [2019-11-28 00:22:39,757 INFO L242 CegarLoopResult]: At program point L448-11(lines 439 452) the Hoare annotation is: false [2019-11-28 00:22:39,757 INFO L246 CegarLoopResult]: For program point L184-4(lines 184 201) no Hoare annotation was computed. [2019-11-28 00:22:39,757 INFO L246 CegarLoopResult]: For program point L184-5(lines 184 201) no Hoare annotation was computed. [2019-11-28 00:22:39,757 INFO L246 CegarLoopResult]: For program point L55(lines 54 99) no Hoare annotation was computed. [2019-11-28 00:22:39,758 INFO L246 CegarLoopResult]: For program point L188(lines 188 196) no Hoare annotation was computed. [2019-11-28 00:22:39,758 INFO L246 CegarLoopResult]: For program point L188-1(lines 188 196) no Hoare annotation was computed. [2019-11-28 00:22:39,758 INFO L246 CegarLoopResult]: For program point L188-2(lines 188 196) no Hoare annotation was computed. [2019-11-28 00:22:39,758 INFO L246 CegarLoopResult]: For program point L188-3(lines 188 196) no Hoare annotation was computed. [2019-11-28 00:22:39,758 INFO L246 CegarLoopResult]: For program point L56(lines 56 60) no Hoare annotation was computed. [2019-11-28 00:22:39,758 INFO L246 CegarLoopResult]: For program point L188-4(lines 188 196) no Hoare annotation was computed. [2019-11-28 00:22:39,758 INFO L246 CegarLoopResult]: For program point L188-5(lines 188 196) no Hoare annotation was computed. [2019-11-28 00:22:39,758 INFO L246 CegarLoopResult]: For program point L586(lines 586 599) no Hoare annotation was computed. [2019-11-28 00:22:39,759 INFO L242 CegarLoopResult]: At program point L586-1(lines 1 1004) the Hoare annotation is: (let ((.cse4 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse5 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse2 (<= ~methaneLevelCritical~0 0)) (.cse8 (<= 0 ~methaneLevelCritical~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse12 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse13 (= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8)) (.cse10 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse3 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse11 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse14 (= 1 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse9 .cse10 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (not .cse6) .cse8 .cse0 .cse1 .cse2 .cse3 .cse5 .cse11 .cse7) (and .cse0 .cse1 .cse2 (= 1 ~waterLevel~0) .cse3 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse9 .cse12 .cse13 .cse3 .cse6 .cse7 .cse14) (and .cse0 .cse1 .cse9 .cse12 .cse13 .cse10 .cse3 .cse11 .cse7 .cse14))) [2019-11-28 00:22:39,759 INFO L246 CegarLoopResult]: For program point L586-2(lines 586 599) no Hoare annotation was computed. [2019-11-28 00:22:39,759 INFO L242 CegarLoopResult]: At program point L586-3(lines 1 1004) the Hoare annotation is: false [2019-11-28 00:22:39,759 INFO L246 CegarLoopResult]: For program point L586-4(lines 586 599) no Hoare annotation was computed. [2019-11-28 00:22:39,759 INFO L242 CegarLoopResult]: At program point L586-5(lines 1 1004) the Hoare annotation is: false [2019-11-28 00:22:39,759 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-11-28 00:22:39,759 INFO L246 CegarLoopResult]: For program point L390(lines 390 394) no Hoare annotation was computed. [2019-11-28 00:22:39,759 INFO L242 CegarLoopResult]: At program point L126(lines 125 144) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 1)) (.cse4 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse2 (<= ~methaneLevelCritical~0 0)) (.cse8 (<= 0 ~methaneLevelCritical~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse10 (<= ~waterLevel~0 2)) (.cse5 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse9 (= 1 ~methaneLevelCritical~0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse6 .cse7 .cse9) (and .cse0 .cse1 .cse2 .cse10 .cse5 .cse11 .cse7 .cse8) (and .cse0 .cse1 .cse10 .cse5 .cse11 .cse9 .cse7))) [2019-11-28 00:22:39,759 INFO L246 CegarLoopResult]: For program point L126-1(lines 126 132) no Hoare annotation was computed. [2019-11-28 00:22:39,760 INFO L242 CegarLoopResult]: At program point L126-2(lines 125 144) the Hoare annotation is: false [2019-11-28 00:22:39,760 INFO L242 CegarLoopResult]: At program point L126-3(lines 125 144) the Hoare annotation is: false [2019-11-28 00:22:39,760 INFO L246 CegarLoopResult]: For program point L590(lines 590 596) no Hoare annotation was computed. [2019-11-28 00:22:39,760 INFO L246 CegarLoopResult]: For program point L590-2(lines 590 596) no Hoare annotation was computed. [2019-11-28 00:22:39,760 INFO L242 CegarLoopResult]: At program point L458(lines 453 461) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse3 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse7 (not (= ~pumpRunning~0 0))) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 .cse1 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= 1 ~methaneLevelCritical~0)) (and (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse2 .cse3 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse7 (<= 0 ~methaneLevelCritical~0) .cse0 .cse1 (<= ~methaneLevelCritical~0 0) .cse4 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse5 .cse6))) [2019-11-28 00:22:39,760 INFO L246 CegarLoopResult]: For program point L590-4(lines 590 596) no Hoare annotation was computed. [2019-11-28 00:22:39,760 INFO L242 CegarLoopResult]: At program point L458-1(lines 453 461) the Hoare annotation is: false [2019-11-28 00:22:39,761 INFO L242 CegarLoopResult]: At program point L458-2(lines 453 461) the Hoare annotation is: false [2019-11-28 00:22:39,761 INFO L242 CegarLoopResult]: At program point L458-3(lines 453 461) the Hoare annotation is: false [2019-11-28 00:22:39,761 INFO L242 CegarLoopResult]: At program point L458-4(lines 453 461) the Hoare annotation is: false [2019-11-28 00:22:39,761 INFO L242 CegarLoopResult]: At program point L458-5(lines 453 461) the Hoare annotation is: false [2019-11-28 00:22:39,761 INFO L246 CegarLoopResult]: For program point L64(lines 64 70) no Hoare annotation was computed. [2019-11-28 00:22:39,761 INFO L242 CegarLoopResult]: At program point L64-1(lines 64 70) the Hoare annotation is: (let ((.cse5 (<= ~methaneLevelCritical~0 0)) (.cse11 (= ~pumpRunning~0 0)) (.cse2 (<= 0 ~methaneLevelCritical~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse0 (<= ~waterLevel~0 2)) (.cse9 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse10 (= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8)) (.cse1 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse7 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse8 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse12 (= 1 ~methaneLevelCritical~0))) (or (and (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse0 .cse1 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse2 .cse3 .cse4 .cse5 .cse6 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse7 .cse8) (and .cse3 .cse4 .cse0 .cse9 .cse10 .cse6 .cse11 .cse8 .cse12) (and .cse3 .cse4 .cse5 .cse0 .cse6 .cse11 .cse8 .cse2) (and .cse3 .cse4 .cse0 .cse9 .cse10 .cse1 .cse6 .cse7 .cse8 .cse12))) [2019-11-28 00:22:39,761 INFO L246 CegarLoopResult]: For program point L329(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,761 INFO L246 CegarLoopResult]: For program point L329-2(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,761 INFO L246 CegarLoopResult]: For program point L329-3(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,762 INFO L246 CegarLoopResult]: For program point L329-5(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,762 INFO L246 CegarLoopResult]: For program point L329-6(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,762 INFO L246 CegarLoopResult]: For program point L329-8(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,762 INFO L246 CegarLoopResult]: For program point L329-9(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,762 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-11-28 00:22:39,762 INFO L246 CegarLoopResult]: For program point L329-11(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,762 INFO L246 CegarLoopResult]: For program point L329-12(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,762 INFO L246 CegarLoopResult]: For program point L329-14(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,762 INFO L246 CegarLoopResult]: For program point L329-15(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,763 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 467) no Hoare annotation was computed. [2019-11-28 00:22:39,763 INFO L246 CegarLoopResult]: For program point L329-17(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,763 INFO L246 CegarLoopResult]: For program point L329-18(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,763 INFO L246 CegarLoopResult]: For program point L329-20(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,763 INFO L246 CegarLoopResult]: For program point L329-21(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,763 INFO L246 CegarLoopResult]: For program point L329-23(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,763 INFO L246 CegarLoopResult]: For program point L329-24(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,763 INFO L246 CegarLoopResult]: For program point L329-26(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,763 INFO L246 CegarLoopResult]: For program point L329-27(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,763 INFO L246 CegarLoopResult]: For program point L329-29(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,764 INFO L246 CegarLoopResult]: For program point L329-30(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,764 INFO L246 CegarLoopResult]: For program point L329-32(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,764 INFO L246 CegarLoopResult]: For program point L329-33(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,764 INFO L246 CegarLoopResult]: For program point L329-35(lines 329 333) no Hoare annotation was computed. [2019-11-28 00:22:39,764 INFO L242 CegarLoopResult]: At program point L133(lines 133 139) the Hoare annotation is: (let ((.cse4 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse11 (<= ~methaneLevelCritical~0 0)) (.cse10 (<= 0 ~methaneLevelCritical~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse12 (<= ~waterLevel~0 1)) (.cse5 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse9 (= ~pumpRunning~0 0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse8 (= 1 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse2 .cse4 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (not .cse9) .cse10 .cse0 .cse1 .cse11 .cse5 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse6 .cse7) (and .cse0 .cse1 .cse11 .cse12 .cse5 .cse9 .cse7 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse9 .cse7 .cse8) (and .cse0 .cse1 .cse12 .cse5 .cse9 .cse7 .cse8))) [2019-11-28 00:22:39,764 INFO L242 CegarLoopResult]: At program point L133-1(lines 133 139) the Hoare annotation is: false [2019-11-28 00:22:39,764 INFO L242 CegarLoopResult]: At program point L133-2(lines 133 139) the Hoare annotation is: false [2019-11-28 00:22:39,764 INFO L242 CegarLoopResult]: At program point L531(lines 527 533) the Hoare annotation is: (and (= 1 ULTIMATE.start_main_~tmp~7) (= ULTIMATE.start_main_~tmp~7 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (= 1 ~waterLevel~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ~pumpRunning~0 0) (<= 0 ~methaneLevelCritical~0)) [2019-11-28 00:22:39,765 INFO L246 CegarLoopResult]: For program point L467(line 467) no Hoare annotation was computed. [2019-11-28 00:22:39,765 INFO L246 CegarLoopResult]: For program point L467-1(line 467) no Hoare annotation was computed. [2019-11-28 00:22:39,765 INFO L246 CegarLoopResult]: For program point L467-2(line 467) no Hoare annotation was computed. [2019-11-28 00:22:39,765 INFO L242 CegarLoopResult]: At program point L335(lines 320 338) the Hoare annotation is: false [2019-11-28 00:22:39,765 INFO L242 CegarLoopResult]: At program point L335-1(lines 320 338) the Hoare annotation is: false [2019-11-28 00:22:39,765 INFO L242 CegarLoopResult]: At program point L335-2(lines 320 338) the Hoare annotation is: false [2019-11-28 00:22:39,765 INFO L242 CegarLoopResult]: At program point L335-3(lines 320 338) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse11 (<= ~methaneLevelCritical~0 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse5 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5)) (.cse6 (= 1 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse13 (<= 0 ~methaneLevelCritical~0)) (.cse9 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse12 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse10 (= 1 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse1 .cse2 .cse11 .cse12 .cse4 .cse7 .cse8 .cse13) (and .cse0 .cse1 .cse2 .cse11 .cse3 .cse4 .cse5 .cse6 .cse7 .cse13 .cse8 .cse9) (and .cse1 .cse2 .cse12 .cse4 .cse7 .cse8 .cse10))) [2019-11-28 00:22:39,765 INFO L242 CegarLoopResult]: At program point L335-4(lines 320 338) the Hoare annotation is: false [2019-11-28 00:22:39,765 INFO L242 CegarLoopResult]: At program point L335-5(lines 320 338) the Hoare annotation is: false [2019-11-28 00:22:39,766 INFO L242 CegarLoopResult]: At program point L335-6(lines 320 338) the Hoare annotation is: false [2019-11-28 00:22:39,766 INFO L242 CegarLoopResult]: At program point L335-7(lines 320 338) the Hoare annotation is: false [2019-11-28 00:22:39,766 INFO L242 CegarLoopResult]: At program point L335-8(lines 320 338) the Hoare annotation is: false [2019-11-28 00:22:39,766 INFO L242 CegarLoopResult]: At program point L335-9(lines 320 338) the Hoare annotation is: false [2019-11-28 00:22:39,766 INFO L242 CegarLoopResult]: At program point L335-10(lines 320 338) the Hoare annotation is: false [2019-11-28 00:22:39,766 INFO L242 CegarLoopResult]: At program point L335-11(lines 320 338) the Hoare annotation is: false [2019-11-28 00:22:39,766 INFO L242 CegarLoopResult]: At program point L403(lines 398 406) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse7 (not (= ~pumpRunning~0 0)))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse5 .cse6 .cse7 (<= 0 ~methaneLevelCritical~0)) (and .cse0 .cse1 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= 1 ~methaneLevelCritical~0)))) [2019-11-28 00:22:39,766 INFO L242 CegarLoopResult]: At program point L403-1(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,767 INFO L242 CegarLoopResult]: At program point L403-2(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,767 INFO L242 CegarLoopResult]: At program point L403-3(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,767 INFO L242 CegarLoopResult]: At program point L271(lines 264 274) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse3 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse7 (not (= ~pumpRunning~0 0))) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 .cse1 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= 1 ~methaneLevelCritical~0)) (and (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse2 .cse3 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse7 (<= 0 ~methaneLevelCritical~0) .cse0 .cse1 (<= ~methaneLevelCritical~0 0) .cse4 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse5 .cse6))) [2019-11-28 00:22:39,767 INFO L242 CegarLoopResult]: At program point L403-4(lines 398 406) the Hoare annotation is: (let ((.cse10 (<= ~waterLevel~0 2)) (.cse11 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse5 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse12 (= 1 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse9 (<= 0 ~methaneLevelCritical~0)) (.cse13 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse14 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse2 (<= ~methaneLevelCritical~0 0)) (.cse16 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5)) (.cse6 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse17 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse3 (<= ~waterLevel~0 1)) (.cse15 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse18 (= 1 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse11 .cse12 .cse13 .cse1 .cse14 .cse15 .cse4 .cse16 .cse7 .cse8 .cse17 .cse18) (and .cse10 .cse11 .cse5 .cse12 .cse9 .cse13 .cse1 .cse14 .cse2 .cse4 .cse16 .cse6 .cse7 .cse8 .cse17) (and .cse0 .cse1 .cse3 .cse15 .cse4 .cse7 .cse8 .cse18))) [2019-11-28 00:22:39,767 INFO L242 CegarLoopResult]: At program point L271-1(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,767 INFO L242 CegarLoopResult]: At program point L403-5(lines 398 406) the Hoare annotation is: (let ((.cse4 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse10 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse13 (<= 0 ~methaneLevelCritical~0)) (.cse9 (<= ~methaneLevelCritical~0 0)) (.cse11 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse5 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse12 (= ~pumpRunning~0 0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse8 (= 1 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse9 (<= ~waterLevel~0 1) .cse5 .cse10 .cse11 .cse12 .cse7 .cse13) (and (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse2 .cse4 .cse10 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (not .cse12) .cse13 .cse0 .cse1 .cse9 .cse5 .cse11 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse12 .cse7 .cse8))) [2019-11-28 00:22:39,768 INFO L242 CegarLoopResult]: At program point L271-2(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,768 INFO L242 CegarLoopResult]: At program point L403-6(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,768 INFO L242 CegarLoopResult]: At program point L271-3(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,768 INFO L242 CegarLoopResult]: At program point L403-7(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,768 INFO L242 CegarLoopResult]: At program point L271-4(lines 264 274) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0 2)) (.cse2 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse5 (= 1 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse7 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse9 (= 1 ULTIMATE.start_main_~tmp~7)) (.cse12 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5)) (.cse16 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse17 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse18 (= 1 ~methaneLevelCritical~0)) (.cse19 (= 1 ~systemActive~0)) (.cse8 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse0 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse10 (<= ~methaneLevelCritical~0 0)) (.cse20 (<= ~waterLevel~0 1)) (.cse11 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse13 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse14 (= ~pumpRunning~0 0)) (.cse15 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse6 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16) (and .cse1 .cse2 .cse5 .cse7 .cse8 .cse9 .cse17 .cse11 .cse12 .cse14 .cse15 .cse16 .cse18) (and .cse19 .cse8 .cse20 .cse17 .cse11 .cse14 .cse15 .cse18) (and .cse19 .cse8 .cse0 .cse10 .cse20 .cse11 .cse3 .cse4 .cse13 .cse14 .cse15 .cse6))) [2019-11-28 00:22:39,768 INFO L242 CegarLoopResult]: At program point L403-8(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,768 INFO L242 CegarLoopResult]: At program point L271-5(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,768 INFO L242 CegarLoopResult]: At program point L403-9(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,769 INFO L242 CegarLoopResult]: At program point L271-6(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,769 INFO L242 CegarLoopResult]: At program point L403-10(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,769 INFO L242 CegarLoopResult]: At program point L271-7(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,769 INFO L242 CegarLoopResult]: At program point L403-11(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,769 INFO L242 CegarLoopResult]: At program point L271-8(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,769 INFO L242 CegarLoopResult]: At program point L403-12(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,769 INFO L242 CegarLoopResult]: At program point L271-9(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,769 INFO L242 CegarLoopResult]: At program point L403-13(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,769 INFO L242 CegarLoopResult]: At program point L271-10(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,770 INFO L242 CegarLoopResult]: At program point L403-14(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,770 INFO L242 CegarLoopResult]: At program point L271-11(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,770 INFO L242 CegarLoopResult]: At program point L403-15(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,770 INFO L242 CegarLoopResult]: At program point L271-12(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,770 INFO L242 CegarLoopResult]: At program point L403-16(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,770 INFO L242 CegarLoopResult]: At program point L271-13(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,770 INFO L242 CegarLoopResult]: At program point L403-17(lines 398 406) the Hoare annotation is: false [2019-11-28 00:22:39,770 INFO L242 CegarLoopResult]: At program point L271-14(lines 264 274) the Hoare annotation is: false [2019-11-28 00:22:39,770 INFO L246 CegarLoopResult]: For program point L74(lines 74 80) no Hoare annotation was computed. [2019-11-28 00:22:39,771 INFO L242 CegarLoopResult]: At program point L74-1(lines 74 80) the Hoare annotation is: (let ((.cse4 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse2 (<= ~methaneLevelCritical~0 0)) (.cse8 (<= 0 ~methaneLevelCritical~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse3 (<= ~waterLevel~0 2)) (.cse5 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse9 (= 1 ~methaneLevelCritical~0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse6 .cse7 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse10 .cse7 .cse8) (and .cse0 .cse1 .cse3 .cse5 .cse10 .cse9 .cse7))) [2019-11-28 00:22:39,771 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 467) no Hoare annotation was computed. [2019-11-28 00:22:39,771 INFO L246 CegarLoopResult]: For program point L210(lines 210 227) no Hoare annotation was computed. [2019-11-28 00:22:39,771 INFO L246 CegarLoopResult]: For program point L210-1(lines 210 227) no Hoare annotation was computed. [2019-11-28 00:22:39,771 INFO L246 CegarLoopResult]: For program point L210-2(lines 210 227) no Hoare annotation was computed. [2019-11-28 00:22:39,771 INFO L242 CegarLoopResult]: At program point L280(lines 275 283) the Hoare annotation is: (and (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) (not (= |ULTIMATE.start_isPumpRunning_#res| 0)) (<= ~waterLevel~0 2) (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1)) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (not (= ~pumpRunning~0 0)) (<= 0 ~methaneLevelCritical~0) (= 1 ~systemActive~0) (= ULTIMATE.start_main_~tmp~7 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (<= ULTIMATE.start_activatePump_~tmp~4 0) (= 0 ULTIMATE.start_test_~splverifierCounter~0)) [2019-11-28 00:22:39,771 INFO L242 CegarLoopResult]: At program point L280-1(lines 275 283) the Hoare annotation is: false [2019-11-28 00:22:39,771 INFO L246 CegarLoopResult]: For program point L214(lines 214 222) no Hoare annotation was computed. [2019-11-28 00:22:39,771 INFO L242 CegarLoopResult]: At program point L280-2(lines 275 283) the Hoare annotation is: false [2019-11-28 00:22:39,772 INFO L246 CegarLoopResult]: For program point L214-1(lines 214 222) no Hoare annotation was computed. [2019-11-28 00:22:39,772 INFO L246 CegarLoopResult]: For program point L214-2(lines 214 222) no Hoare annotation was computed. [2019-11-28 00:22:39,772 INFO L246 CegarLoopResult]: For program point L348(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,772 INFO L246 CegarLoopResult]: For program point L348-2(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,772 INFO L246 CegarLoopResult]: For program point L348-3(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,772 INFO L246 CegarLoopResult]: For program point L348-5(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,772 INFO L246 CegarLoopResult]: For program point L348-6(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,772 INFO L246 CegarLoopResult]: For program point L84(lines 84 95) no Hoare annotation was computed. [2019-11-28 00:22:39,772 INFO L246 CegarLoopResult]: For program point L348-8(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,772 INFO L246 CegarLoopResult]: For program point L348-9(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,773 INFO L246 CegarLoopResult]: For program point L348-11(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,773 INFO L246 CegarLoopResult]: For program point L348-12(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,773 INFO L246 CegarLoopResult]: For program point L348-14(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,773 INFO L246 CegarLoopResult]: For program point L348-15(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,773 INFO L246 CegarLoopResult]: For program point L348-17(lines 348 352) no Hoare annotation was computed. [2019-11-28 00:22:39,773 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-11-28 00:22:39,773 INFO L242 CegarLoopResult]: At program point L483-2(lines 483 497) the Hoare annotation is: false [2019-11-28 00:22:39,773 INFO L246 CegarLoopResult]: For program point L484(line 484) no Hoare annotation was computed. [2019-11-28 00:22:39,773 INFO L242 CegarLoopResult]: At program point L354(lines 339 357) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse3 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse7 (not (= ~pumpRunning~0 0))) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0))) (or (and .cse0 .cse1 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= 1 ~methaneLevelCritical~0)) (and (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse2 .cse3 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse7 (<= 0 ~methaneLevelCritical~0) .cse0 .cse1 (<= ~methaneLevelCritical~0 0) .cse4 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse5 .cse6))) [2019-11-28 00:22:39,774 INFO L242 CegarLoopResult]: At program point L354-1(lines 339 357) the Hoare annotation is: false [2019-11-28 00:22:39,774 INFO L242 CegarLoopResult]: At program point L354-2(lines 339 357) the Hoare annotation is: false [2019-11-28 00:22:39,774 INFO L242 CegarLoopResult]: At program point L354-3(lines 339 357) the Hoare annotation is: false [2019-11-28 00:22:39,774 INFO L242 CegarLoopResult]: At program point L354-4(lines 339 357) the Hoare annotation is: false [2019-11-28 00:22:39,774 INFO L242 CegarLoopResult]: At program point L354-5(lines 339 357) the Hoare annotation is: false [2019-11-28 00:22:39,774 INFO L246 CegarLoopResult]: For program point L90(lines 90 94) no Hoare annotation was computed. [2019-11-28 00:22:39,774 INFO L246 CegarLoopResult]: For program point L90-2(lines 126 132) no Hoare annotation was computed. [2019-11-28 00:22:39,774 INFO L246 CegarLoopResult]: For program point L487(lines 487 491) no Hoare annotation was computed. [2019-11-28 00:22:39,774 INFO L246 CegarLoopResult]: For program point L487-1(lines 126 132) no Hoare annotation was computed. [2019-11-28 00:22:39,774 INFO L246 CegarLoopResult]: For program point L158(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,774 INFO L246 CegarLoopResult]: For program point L158-1(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,775 INFO L246 CegarLoopResult]: For program point L158-2(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,775 INFO L246 CegarLoopResult]: For program point L158-3(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,775 INFO L246 CegarLoopResult]: For program point L158-4(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,775 INFO L246 CegarLoopResult]: For program point L158-5(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,775 INFO L246 CegarLoopResult]: For program point L158-6(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,775 INFO L246 CegarLoopResult]: For program point L158-7(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,775 INFO L246 CegarLoopResult]: For program point L158-8(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,775 INFO L246 CegarLoopResult]: For program point L158-9(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,775 INFO L246 CegarLoopResult]: For program point L158-10(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,775 INFO L246 CegarLoopResult]: For program point L158-11(lines 158 175) no Hoare annotation was computed. [2019-11-28 00:22:39,776 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-11-28 00:22:39,776 INFO L246 CegarLoopResult]: For program point L557(lines 557 564) no Hoare annotation was computed. [2019-11-28 00:22:39,776 INFO L249 CegarLoopResult]: At program point L557-1(lines 557 564) the Hoare annotation is: true [2019-11-28 00:22:39,776 INFO L246 CegarLoopResult]: For program point L162(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,776 INFO L246 CegarLoopResult]: For program point L162-1(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,776 INFO L246 CegarLoopResult]: For program point L162-2(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,776 INFO L246 CegarLoopResult]: For program point L162-3(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,776 INFO L246 CegarLoopResult]: For program point L162-4(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,776 INFO L246 CegarLoopResult]: For program point L162-5(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,776 INFO L246 CegarLoopResult]: For program point L162-6(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,776 INFO L246 CegarLoopResult]: For program point L162-7(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,777 INFO L246 CegarLoopResult]: For program point L162-8(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,777 INFO L246 CegarLoopResult]: For program point L162-9(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,777 INFO L246 CegarLoopResult]: For program point L162-10(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,777 INFO L246 CegarLoopResult]: For program point L162-11(lines 162 170) no Hoare annotation was computed. [2019-11-28 00:22:39,777 INFO L242 CegarLoopResult]: At program point L627(lines 1 1004) the Hoare annotation is: (and (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (= 1 ~waterLevel~0) (= ~pumpRunning~0 0) (<= 0 ~methaneLevelCritical~0)) [2019-11-28 00:22:39,777 INFO L242 CegarLoopResult]: At program point L100(lines 53 101) the Hoare annotation is: false [2019-11-28 00:22:39,825 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.11 12:22:39 BoogieIcfgContainer [2019-11-28 00:22:39,825 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-11-28 00:22:39,826 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-11-28 00:22:39,826 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-11-28 00:22:39,826 INFO L275 PluginConnector]: Witness Printer initialized [2019-11-28 00:22:39,827 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.11 12:22:17" (3/4) ... [2019-11-28 00:22:39,831 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-11-28 00:22:39,863 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2019-11-28 00:22:39,865 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2019-11-28 00:22:39,868 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2019-11-28 00:22:39,870 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2019-11-28 00:22:39,872 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-11-28 00:22:39,874 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-11-28 00:22:39,876 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-11-28 00:22:39,909 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == systemActive && methaneLevelCritical <= 0) && 1 == waterLevel) && \result == systemActive) && pumpRunning == 0) && 0 <= methaneLevelCritical [2019-11-28 00:22:39,909 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == tmp && tmp == systemActive) && methaneLevelCritical <= 0) && 1 == waterLevel) && \result == systemActive) && pumpRunning == 0) && 0 <= methaneLevelCritical [2019-11-28 00:22:39,910 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter)) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && 1 == waterLevel) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 1 == tmp) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 1 == tmp) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) [2019-11-28 00:22:39,910 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((\result <= 0 && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) || ((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 1 == tmp) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || (((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 1 == tmp) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) [2019-11-28 00:22:39,911 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 2) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 1 == methaneLevelCritical) && 0 == splverifierCounter) [2019-11-28 00:22:39,911 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 1 == methaneLevelCritical) && 0 == splverifierCounter) [2019-11-28 00:22:39,911 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter)) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || ((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) [2019-11-28 00:22:39,913 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) || (((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || (((((((((((((\result <= 0 && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter)) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) [2019-11-28 00:22:39,913 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && 0 <= \result) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) || (((((((((1 == systemActive && tmp == systemActive) && 1 == \result) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && !(pumpRunning == 0)) && 1 == methaneLevelCritical) [2019-11-28 00:22:39,914 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == systemActive && tmp == systemActive) && 1 == \result) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && !(pumpRunning == 0)) && 1 == methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 1) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) [2019-11-28 00:22:39,915 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == systemActive && tmp == systemActive) && \result <= 1) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) [2019-11-28 00:22:39,915 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((\result == 0 && 1 == systemActive) && tmp == systemActive) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || ((((((((\result == 0 && \result == 1) && 1 == tmp) && methaneLevelCritical <= 0) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) [2019-11-28 00:22:39,917 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((\result == 0 && 1 == systemActive) && tmp == systemActive) && waterLevel <= 2) && \result == systemActive) && 0 == tmp) && 1 == \result) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == tmp___0) && 1 == methaneLevelCritical) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || (((((((((((\result == 0 && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 2) && \result == systemActive) && 0 == tmp) && 1 == \result) && pumpRunning == 0) && 0 <= methaneLevelCritical) && 0 == splverifierCounter) && 1 == tmp___0)) || ((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) [2019-11-28 00:22:39,917 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((\result <= 0 && !(\result == 0)) && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter [2019-11-28 00:22:39,918 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == systemActive && tmp == systemActive) && 1 == \result) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && !(pumpRunning == 0)) && 1 == methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 1) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) [2019-11-28 00:22:39,919 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == systemActive && tmp == systemActive) && 1 == \result) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && !(pumpRunning == 0)) && 1 == methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 1) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) [2019-11-28 00:22:39,920 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || ((((((((((((waterLevel <= 2 && tmp == 1) && 1 == \result) && \result == 0) && tmp == systemActive) && 1 == tmp) && 1 == \result) && \result == systemActive) && 0 == tmp) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == tmp___0) && 1 == methaneLevelCritical)) || ((((((((((((((waterLevel <= 2 && tmp == 1) && 0 <= \result) && 1 == \result) && 0 <= methaneLevelCritical) && \result == 0) && tmp == systemActive) && 1 == tmp) && methaneLevelCritical <= 0) && \result == systemActive) && 0 == tmp) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == tmp___0)) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && 1 == \result) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) [2019-11-28 00:22:39,920 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((\result <= 0 && waterLevel <= 2) && tmp == 1) && 0 <= \result) && 0 <= \result) && 1 == \result) && 0 <= methaneLevelCritical) && \result == 0) && tmp == systemActive) && 1 == tmp) && methaneLevelCritical <= 0) && \result == systemActive) && 0 == tmp) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == tmp___0) || ((((((((((((waterLevel <= 2 && tmp == 1) && 1 == \result) && \result == 0) && tmp == systemActive) && 1 == tmp) && 1 == \result) && \result == systemActive) && 0 == tmp) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == tmp___0) && 1 == methaneLevelCritical)) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && 1 == \result) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((((((((1 == systemActive && tmp == systemActive) && \result <= 0) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && 0 <= \result) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) [2019-11-28 00:22:40,080 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2019-11-28 00:22:40,080 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-11-28 00:22:40,082 INFO L168 Benchmark]: Toolchain (without parser) took 25245.20 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 582.0 MB). Free memory was 955.0 MB in the beginning and 1.1 GB in the end (delta: -150.7 MB). Peak memory consumption was 431.3 MB. Max. memory is 11.5 GB. [2019-11-28 00:22:40,082 INFO L168 Benchmark]: CDTParser took 0.54 ms. Allocated memory is still 1.0 GB. Free memory is still 981.8 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-28 00:22:40,082 INFO L168 Benchmark]: CACSL2BoogieTranslator took 719.79 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 137.4 MB). Free memory was 955.0 MB in the beginning and 1.1 GB in the end (delta: -152.5 MB). Peak memory consumption was 26.9 MB. Max. memory is 11.5 GB. [2019-11-28 00:22:40,082 INFO L168 Benchmark]: Boogie Procedure Inliner took 108.50 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-28 00:22:40,083 INFO L168 Benchmark]: Boogie Preprocessor took 73.26 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2019-11-28 00:22:40,083 INFO L168 Benchmark]: RCFGBuilder took 1268.10 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 90.7 MB). Peak memory consumption was 90.7 MB. Max. memory is 11.5 GB. [2019-11-28 00:22:40,084 INFO L168 Benchmark]: TraceAbstraction took 22815.76 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 444.6 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -125.8 MB). Peak memory consumption was 631.8 MB. Max. memory is 11.5 GB. [2019-11-28 00:22:40,084 INFO L168 Benchmark]: Witness Printer took 254.49 ms. Allocated memory is still 1.6 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 30.3 MB). Peak memory consumption was 30.3 MB. Max. memory is 11.5 GB. [2019-11-28 00:22:40,087 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.54 ms. Allocated memory is still 1.0 GB. Free memory is still 981.8 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 719.79 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 137.4 MB). Free memory was 955.0 MB in the beginning and 1.1 GB in the end (delta: -152.5 MB). Peak memory consumption was 26.9 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 108.50 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Boogie Preprocessor took 73.26 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1268.10 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 90.7 MB). Peak memory consumption was 90.7 MB. Max. memory is 11.5 GB. * TraceAbstraction took 22815.76 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 444.6 MB). Free memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: -125.8 MB). Peak memory consumption was 631.8 MB. Max. memory is 11.5 GB. * Witness Printer took 254.49 ms. Allocated memory is still 1.6 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 30.3 MB). Peak memory consumption was 30.3 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 467]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 467]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 467]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 339]: Loop Invariant Derived loop invariant: (((((((((1 == systemActive && tmp == systemActive) && 1 == \result) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && !(pumpRunning == 0)) && 1 == methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 1) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 339]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 547]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 339]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 339]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: ((((((((((1 == systemActive && tmp == systemActive) && \result <= 1) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: (((((((((1 == systemActive && tmp == systemActive) && 1 == \result) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && !(pumpRunning == 0)) && 1 == methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 1) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: ((((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) || (((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || (((((((((((((\result <= 0 && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter)) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 74]: Loop Invariant Derived loop invariant: ((((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 2) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 1 == methaneLevelCritical) && 0 == splverifierCounter) - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter)) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && 1 == waterLevel) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 1 == tmp) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 1 == tmp) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: (((((1 == tmp && tmp == systemActive) && methaneLevelCritical <= 0) && 1 == waterLevel) && \result == systemActive) && pumpRunning == 0) && 0 <= methaneLevelCritical - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: (((((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && 0 <= \result) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) || (((((((((1 == systemActive && tmp == systemActive) && 1 == \result) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && !(pumpRunning == 0)) && 1 == methaneLevelCritical) - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: ((((((((((((((((((\result <= 0 && waterLevel <= 2) && tmp == 1) && 0 <= \result) && 0 <= \result) && 1 == \result) && 0 <= methaneLevelCritical) && \result == 0) && tmp == systemActive) && 1 == tmp) && methaneLevelCritical <= 0) && \result == systemActive) && 0 == tmp) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == tmp___0) || ((((((((((((waterLevel <= 2 && tmp == 1) && 1 == \result) && \result == 0) && tmp == systemActive) && 1 == tmp) && 1 == \result) && \result == systemActive) && 0 == tmp) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == tmp___0) && 1 == methaneLevelCritical)) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && 1 == \result) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((((((((1 == systemActive && tmp == systemActive) && \result <= 0) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && 0 <= \result) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: (((((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && 0 <= \result) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || ((((((((((((waterLevel <= 2 && tmp == 1) && 1 == \result) && \result == 0) && tmp == systemActive) && 1 == tmp) && 1 == \result) && \result == systemActive) && 0 == tmp) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == tmp___0) && 1 == methaneLevelCritical)) || ((((((((((((((waterLevel <= 2 && tmp == 1) && 0 <= \result) && 1 == \result) && 0 <= methaneLevelCritical) && \result == 0) && tmp == systemActive) && 1 == tmp) && methaneLevelCritical <= 0) && \result == systemActive) && 0 == tmp) && \result <= 0) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == tmp___0)) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && 1 == \result) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: (((((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter)) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || ((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 125]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 125]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 557]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 125]: Loop Invariant Derived loop invariant: ((((((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) || (((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 1 == methaneLevelCritical) && 0 == splverifierCounter) - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: (((((((((1 == systemActive && tmp == systemActive) && 1 == \result) && waterLevel <= 1) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && !(pumpRunning == 0)) && 1 == methaneLevelCritical) || (((((((((((((\result <= 0 && waterLevel <= 1) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((1 == systemActive && methaneLevelCritical <= 0) && 1 == waterLevel) && pumpRunning == 0) && 0 <= methaneLevelCritical - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: (((((((((\result == 0 && 1 == systemActive) && tmp == systemActive) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || ((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || ((((((((\result == 0 && \result == 1) && 1 == tmp) && methaneLevelCritical <= 0) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical) - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 53]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: ((((((((((((\result == 0 && 1 == systemActive) && tmp == systemActive) && waterLevel <= 2) && \result == systemActive) && 0 == tmp) && 1 == \result) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == tmp___0) && 1 == methaneLevelCritical) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || (((((((((((\result == 0 && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 2) && \result == systemActive) && 0 == tmp) && 1 == \result) && pumpRunning == 0) && 0 <= methaneLevelCritical) && 0 == splverifierCounter) && 1 == tmp___0)) || ((((((1 == systemActive && tmp == systemActive) && waterLevel <= 1) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((((((((((((((\result <= 0 && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter) || ((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 1 == tmp) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical)) || (((((((1 == systemActive && tmp == systemActive) && methaneLevelCritical <= 0) && waterLevel <= 2) && \result == systemActive) && pumpRunning == 0) && 0 == splverifierCounter) && 0 <= methaneLevelCritical)) || (((((((((1 == systemActive && tmp == systemActive) && waterLevel <= 2) && 1 == \result) && 1 == tmp) && 0 < tmp + 1) && \result == systemActive) && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) - InvariantResult [Line: 339]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 339]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: ((((1 == systemActive && methaneLevelCritical <= 0) && 1 == waterLevel) && \result == systemActive) && pumpRunning == 0) && 0 <= methaneLevelCritical - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: (((((((((((((\result <= 0 && !(\result == 0)) && waterLevel <= 2) && 0 < tmp + 1) && 0 <= \result) && 0 <= \result) && !(pumpRunning == 0)) && 0 <= methaneLevelCritical) && 1 == systemActive) && tmp == systemActive) && methaneLevelCritical <= 0) && \result == systemActive) && \result <= 0) && tmp <= 0) && 0 == splverifierCounter - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 231 locations, 3 error locations. Result: SAFE, OverallTime: 4.2s, OverallIterations: 12, TraceHistogramMax: 2, AutomataDifference: 2.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 18.4s, HoareTripleCheckerStatistics: 1968 SDtfs, 3223 SDslu, 3002 SDs, 0 SdLazy, 490 SolverSat, 107 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.7s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 105 GetRequests, 37 SyntacticMatches, 0 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 59 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=448occurred in iteration=9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 2417 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 93 LocationsWithAnnotation, 93 PreInvPairs, 470 NumberOfFragments, 1883 HoareAnnotationTreeSize, 93 FomulaSimplifications, 4524116 FormulaSimplificationTreeSizeReduction, 4.6s HoareSimplificationTime, 93 FomulaSimplificationsInter, 914628 FormulaSimplificationTreeSizeReductionInter, 13.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 390 NumberOfCodeBlocks, 390 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 378 ConstructedInterpolants, 0 QuantifiedInterpolants, 30637 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 14/14 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...