./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version b2eff8ba Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 909de5fe3a7d5a638d67615e2b4d48b563eefeab07033d1b2a29843c731be596 ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-b2eff8b [2021-10-28 09:01:50,647 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-10-28 09:01:50,649 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-10-28 09:01:50,679 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-10-28 09:01:50,682 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-10-28 09:01:50,686 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-10-28 09:01:50,689 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-10-28 09:01:50,693 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-10-28 09:01:50,695 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-10-28 09:01:50,700 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-10-28 09:01:50,702 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-10-28 09:01:50,703 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-10-28 09:01:50,704 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-10-28 09:01:50,706 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-10-28 09:01:50,708 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-10-28 09:01:50,714 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-10-28 09:01:50,715 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-10-28 09:01:50,716 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-10-28 09:01:50,721 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-10-28 09:01:50,728 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-10-28 09:01:50,730 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-10-28 09:01:50,732 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-10-28 09:01:50,734 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-10-28 09:01:50,735 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-10-28 09:01:50,747 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-10-28 09:01:50,747 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-10-28 09:01:50,748 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-10-28 09:01:50,749 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-10-28 09:01:50,749 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-10-28 09:01:50,750 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-10-28 09:01:50,751 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-10-28 09:01:50,752 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-10-28 09:01:50,753 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-10-28 09:01:50,754 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-10-28 09:01:50,755 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-10-28 09:01:50,755 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-10-28 09:01:50,756 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-10-28 09:01:50,756 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-10-28 09:01:50,756 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-10-28 09:01:50,757 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-10-28 09:01:50,758 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-10-28 09:01:50,759 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-10-28 09:01:50,782 INFO L113 SettingsManager]: Loading preferences was successful [2021-10-28 09:01:50,782 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-10-28 09:01:50,783 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-10-28 09:01:50,783 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-10-28 09:01:50,784 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-10-28 09:01:50,784 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-10-28 09:01:50,784 INFO L138 SettingsManager]: * Use SBE=true [2021-10-28 09:01:50,785 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-10-28 09:01:50,785 INFO L138 SettingsManager]: * sizeof long=4 [2021-10-28 09:01:50,785 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-10-28 09:01:50,785 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-10-28 09:01:50,786 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-10-28 09:01:50,786 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-10-28 09:01:50,786 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-10-28 09:01:50,786 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-10-28 09:01:50,786 INFO L138 SettingsManager]: * sizeof long double=12 [2021-10-28 09:01:50,787 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-10-28 09:01:50,787 INFO L138 SettingsManager]: * Use constant arrays=true [2021-10-28 09:01:50,787 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-10-28 09:01:50,787 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-10-28 09:01:50,788 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-10-28 09:01:50,788 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-10-28 09:01:50,788 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-28 09:01:50,788 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-10-28 09:01:50,789 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-10-28 09:01:50,789 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-10-28 09:01:50,789 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-10-28 09:01:50,789 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-10-28 09:01:50,789 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-10-28 09:01:50,790 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-10-28 09:01:50,790 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-10-28 09:01:50,790 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-10-28 09:01:50,790 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 909de5fe3a7d5a638d67615e2b4d48b563eefeab07033d1b2a29843c731be596 [2021-10-28 09:01:51,113 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-10-28 09:01:51,140 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-10-28 09:01:51,143 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-10-28 09:01:51,144 INFO L271 PluginConnector]: Initializing CDTParser... [2021-10-28 09:01:51,145 INFO L275 PluginConnector]: CDTParser initialized [2021-10-28 09:01:51,146 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/../../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c [2021-10-28 09:01:51,224 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/data/c930a1fb4/2b55163a8ec445d4bf0a5f9fb08eb145/FLAG5944b9c61 [2021-10-28 09:01:51,687 INFO L306 CDTParser]: Found 1 translation units. [2021-10-28 09:01:51,688 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c [2021-10-28 09:01:51,701 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/data/c930a1fb4/2b55163a8ec445d4bf0a5f9fb08eb145/FLAG5944b9c61 [2021-10-28 09:01:52,046 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/data/c930a1fb4/2b55163a8ec445d4bf0a5f9fb08eb145 [2021-10-28 09:01:52,050 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-10-28 09:01:52,052 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-10-28 09:01:52,056 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-10-28 09:01:52,056 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-10-28 09:01:52,059 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-10-28 09:01:52,060 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,062 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@58f9711f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52, skipping insertion in model container [2021-10-28 09:01:52,063 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,069 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-10-28 09:01:52,133 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-10-28 09:01:52,480 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c[19040,19053] [2021-10-28 09:01:52,483 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-28 09:01:52,491 INFO L203 MainTranslator]: Completed pre-run [2021-10-28 09:01:52,588 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c[19040,19053] [2021-10-28 09:01:52,598 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-28 09:01:52,620 INFO L208 MainTranslator]: Completed translation [2021-10-28 09:01:52,621 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52 WrapperNode [2021-10-28 09:01:52,622 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-10-28 09:01:52,623 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-10-28 09:01:52,624 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-10-28 09:01:52,624 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-10-28 09:01:52,632 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,665 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,741 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-10-28 09:01:52,742 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-10-28 09:01:52,742 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-10-28 09:01:52,742 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-10-28 09:01:52,750 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,751 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,756 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,757 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,771 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,785 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,800 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,805 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-10-28 09:01:52,806 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-10-28 09:01:52,806 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-10-28 09:01:52,806 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-10-28 09:01:52,807 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52" (1/1) ... [2021-10-28 09:01:52,814 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-28 09:01:52,824 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/z3 [2021-10-28 09:01:52,836 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-10-28 09:01:52,862 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-10-28 09:01:52,880 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-10-28 09:01:52,881 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-10-28 09:01:52,881 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-10-28 09:01:52,881 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-10-28 09:01:53,900 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-10-28 09:01:53,901 INFO L299 CfgBuilder]: Removed 194 assume(true) statements. [2021-10-28 09:01:53,903 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 09:01:53 BoogieIcfgContainer [2021-10-28 09:01:53,903 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-10-28 09:01:53,905 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-10-28 09:01:53,905 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-10-28 09:01:53,909 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-10-28 09:01:53,909 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.10 09:01:52" (1/3) ... [2021-10-28 09:01:53,910 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@75688297 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.10 09:01:53, skipping insertion in model container [2021-10-28 09:01:53,910 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 09:01:52" (2/3) ... [2021-10-28 09:01:53,910 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@75688297 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.10 09:01:53, skipping insertion in model container [2021-10-28 09:01:53,910 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 09:01:53" (3/3) ... [2021-10-28 09:01:53,912 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product57.cil.c [2021-10-28 09:01:53,922 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-10-28 09:01:53,923 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2021-10-28 09:01:53,964 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-10-28 09:01:53,970 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-10-28 09:01:53,970 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2021-10-28 09:01:53,988 INFO L276 IsEmpty]: Start isEmpty. Operand has 139 states, 135 states have (on average 1.5407407407407407) internal successors, (208), 138 states have internal predecessors, (208), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:53,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2021-10-28 09:01:53,993 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:53,994 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:53,994 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:53,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:53,999 INFO L85 PathProgramCache]: Analyzing trace with hash -859371484, now seen corresponding path program 1 times [2021-10-28 09:01:54,008 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:54,008 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1615238068] [2021-10-28 09:01:54,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:54,010 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:54,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:54,312 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:54,313 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:54,313 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1615238068] [2021-10-28 09:01:54,314 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1615238068] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:54,314 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:54,314 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-10-28 09:01:54,322 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [127590009] [2021-10-28 09:01:54,334 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-10-28 09:01:54,334 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:54,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-10-28 09:01:54,379 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-28 09:01:54,382 INFO L87 Difference]: Start difference. First operand has 139 states, 135 states have (on average 1.5407407407407407) internal successors, (208), 138 states have internal predecessors, (208), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:54,442 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:54,443 INFO L93 Difference]: Finished difference Result 271 states and 408 transitions. [2021-10-28 09:01:54,443 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-10-28 09:01:54,444 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2021-10-28 09:01:54,444 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:54,457 INFO L225 Difference]: With dead ends: 271 [2021-10-28 09:01:54,457 INFO L226 Difference]: Without dead ends: 135 [2021-10-28 09:01:54,462 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-28 09:01:54,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 135 states. [2021-10-28 09:01:54,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 135 to 135. [2021-10-28 09:01:54,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 135 states, 132 states have (on average 1.4848484848484849) internal successors, (196), 134 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:54,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135 states to 135 states and 196 transitions. [2021-10-28 09:01:54,525 INFO L78 Accepts]: Start accepts. Automaton has 135 states and 196 transitions. Word has length 18 [2021-10-28 09:01:54,526 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:54,526 INFO L470 AbstractCegarLoop]: Abstraction has 135 states and 196 transitions. [2021-10-28 09:01:54,527 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:54,527 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states and 196 transitions. [2021-10-28 09:01:54,528 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-10-28 09:01:54,528 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:54,528 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:54,529 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-10-28 09:01:54,529 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:54,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:54,532 INFO L85 PathProgramCache]: Analyzing trace with hash -1078207453, now seen corresponding path program 1 times [2021-10-28 09:01:54,532 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:54,533 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1402628160] [2021-10-28 09:01:54,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:54,533 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:54,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:54,686 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:54,687 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:54,687 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1402628160] [2021-10-28 09:01:54,687 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1402628160] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:54,687 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:54,688 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 09:01:54,688 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [916800146] [2021-10-28 09:01:54,689 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:01:54,690 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:54,692 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:01:54,693 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:01:54,693 INFO L87 Difference]: Start difference. First operand 135 states and 196 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:54,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:54,714 INFO L93 Difference]: Finished difference Result 135 states and 196 transitions. [2021-10-28 09:01:54,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:01:54,715 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-10-28 09:01:54,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:54,718 INFO L225 Difference]: With dead ends: 135 [2021-10-28 09:01:54,718 INFO L226 Difference]: Without dead ends: 55 [2021-10-28 09:01:54,720 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:01:54,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2021-10-28 09:01:54,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2021-10-28 09:01:54,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 54 states have (on average 1.462962962962963) internal successors, (79), 54 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:54,731 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 79 transitions. [2021-10-28 09:01:54,731 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 79 transitions. Word has length 19 [2021-10-28 09:01:54,731 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:54,732 INFO L470 AbstractCegarLoop]: Abstraction has 55 states and 79 transitions. [2021-10-28 09:01:54,732 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:54,732 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 79 transitions. [2021-10-28 09:01:54,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-10-28 09:01:54,734 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:54,734 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:54,734 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-10-28 09:01:54,735 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:54,735 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:54,735 INFO L85 PathProgramCache]: Analyzing trace with hash -1475398090, now seen corresponding path program 1 times [2021-10-28 09:01:54,736 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:54,736 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [69716524] [2021-10-28 09:01:54,736 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:54,737 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:54,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:54,899 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:54,900 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:54,900 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [69716524] [2021-10-28 09:01:54,900 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [69716524] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:54,900 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:54,901 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 09:01:54,901 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [783163555] [2021-10-28 09:01:54,901 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-10-28 09:01:54,901 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:54,902 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-10-28 09:01:54,902 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-10-28 09:01:54,903 INFO L87 Difference]: Start difference. First operand 55 states and 79 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:55,036 INFO L93 Difference]: Finished difference Result 103 states and 151 transitions. [2021-10-28 09:01:55,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-28 09:01:55,039 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-10-28 09:01:55,039 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:55,040 INFO L225 Difference]: With dead ends: 103 [2021-10-28 09:01:55,040 INFO L226 Difference]: Without dead ends: 55 [2021-10-28 09:01:55,043 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-10-28 09:01:55,044 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2021-10-28 09:01:55,052 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2021-10-28 09:01:55,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 54 states have (on average 1.4444444444444444) internal successors, (78), 54 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 78 transitions. [2021-10-28 09:01:55,053 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 78 transitions. Word has length 24 [2021-10-28 09:01:55,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:55,054 INFO L470 AbstractCegarLoop]: Abstraction has 55 states and 78 transitions. [2021-10-28 09:01:55,054 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,055 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 78 transitions. [2021-10-28 09:01:55,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-10-28 09:01:55,056 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:55,056 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:55,057 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-10-28 09:01:55,057 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:55,058 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:55,059 INFO L85 PathProgramCache]: Analyzing trace with hash 597219871, now seen corresponding path program 1 times [2021-10-28 09:01:55,059 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:55,060 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [130074900] [2021-10-28 09:01:55,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:55,060 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:55,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:55,164 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:55,165 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:55,166 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [130074900] [2021-10-28 09:01:55,166 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [130074900] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:55,167 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:55,167 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-10-28 09:01:55,168 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [167663636] [2021-10-28 09:01:55,168 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:01:55,168 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:55,169 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:01:55,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:01:55,169 INFO L87 Difference]: Start difference. First operand 55 states and 78 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:55,206 INFO L93 Difference]: Finished difference Result 125 states and 181 transitions. [2021-10-28 09:01:55,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:01:55,207 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2021-10-28 09:01:55,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:55,209 INFO L225 Difference]: With dead ends: 125 [2021-10-28 09:01:55,210 INFO L226 Difference]: Without dead ends: 77 [2021-10-28 09:01:55,211 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:01:55,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2021-10-28 09:01:55,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 75. [2021-10-28 09:01:55,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 74 states have (on average 1.4324324324324325) internal successors, (106), 74 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 106 transitions. [2021-10-28 09:01:55,223 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 106 transitions. Word has length 26 [2021-10-28 09:01:55,223 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:55,223 INFO L470 AbstractCegarLoop]: Abstraction has 75 states and 106 transitions. [2021-10-28 09:01:55,224 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,224 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 106 transitions. [2021-10-28 09:01:55,226 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-10-28 09:01:55,227 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:55,227 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:55,227 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-10-28 09:01:55,227 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:55,228 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:55,228 INFO L85 PathProgramCache]: Analyzing trace with hash -105705555, now seen corresponding path program 1 times [2021-10-28 09:01:55,228 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:55,229 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [821908246] [2021-10-28 09:01:55,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:55,229 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:55,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:55,306 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:55,307 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:55,307 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [821908246] [2021-10-28 09:01:55,307 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [821908246] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:55,308 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:55,308 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-10-28 09:01:55,308 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1739037936] [2021-10-28 09:01:55,309 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:01:55,309 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:55,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:01:55,310 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:01:55,310 INFO L87 Difference]: Start difference. First operand 75 states and 106 transitions. Second operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 2 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,338 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:55,338 INFO L93 Difference]: Finished difference Result 194 states and 279 transitions. [2021-10-28 09:01:55,339 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:01:55,339 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 2 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-10-28 09:01:55,339 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:55,341 INFO L225 Difference]: With dead ends: 194 [2021-10-28 09:01:55,341 INFO L226 Difference]: Without dead ends: 126 [2021-10-28 09:01:55,342 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:01:55,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2021-10-28 09:01:55,360 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 124. [2021-10-28 09:01:55,360 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 124 states, 123 states have (on average 1.4227642276422765) internal successors, (175), 123 states have internal predecessors, (175), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 124 states to 124 states and 175 transitions. [2021-10-28 09:01:55,361 INFO L78 Accepts]: Start accepts. Automaton has 124 states and 175 transitions. Word has length 32 [2021-10-28 09:01:55,361 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:55,361 INFO L470 AbstractCegarLoop]: Abstraction has 124 states and 175 transitions. [2021-10-28 09:01:55,361 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 2 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,361 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 175 transitions. [2021-10-28 09:01:55,362 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-10-28 09:01:55,362 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:55,362 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:55,363 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-10-28 09:01:55,363 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:55,363 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:55,363 INFO L85 PathProgramCache]: Analyzing trace with hash 481100459, now seen corresponding path program 1 times [2021-10-28 09:01:55,364 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:55,364 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1886718488] [2021-10-28 09:01:55,364 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:55,364 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:55,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:55,459 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:55,459 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:55,459 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1886718488] [2021-10-28 09:01:55,459 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1886718488] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:55,460 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:55,460 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 09:01:55,461 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [874822137] [2021-10-28 09:01:55,461 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 09:01:55,464 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:55,465 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 09:01:55,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:01:55,465 INFO L87 Difference]: Start difference. First operand 124 states and 175 transitions. Second operand has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,596 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:55,597 INFO L93 Difference]: Finished difference Result 622 states and 885 transitions. [2021-10-28 09:01:55,597 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-10-28 09:01:55,597 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-10-28 09:01:55,598 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:55,607 INFO L225 Difference]: With dead ends: 622 [2021-10-28 09:01:55,608 INFO L226 Difference]: Without dead ends: 505 [2021-10-28 09:01:55,609 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-28 09:01:55,610 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 505 states. [2021-10-28 09:01:55,645 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 505 to 227. [2021-10-28 09:01:55,646 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 226 states have (on average 1.3893805309734513) internal successors, (314), 226 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 314 transitions. [2021-10-28 09:01:55,647 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 314 transitions. Word has length 32 [2021-10-28 09:01:55,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:55,648 INFO L470 AbstractCegarLoop]: Abstraction has 227 states and 314 transitions. [2021-10-28 09:01:55,648 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,648 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 314 transitions. [2021-10-28 09:01:55,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-10-28 09:01:55,655 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:55,655 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:55,655 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-10-28 09:01:55,656 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:55,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:55,656 INFO L85 PathProgramCache]: Analyzing trace with hash 480943923, now seen corresponding path program 1 times [2021-10-28 09:01:55,656 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:55,661 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1933871175] [2021-10-28 09:01:55,661 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:55,661 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:55,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:55,732 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:55,732 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:55,732 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1933871175] [2021-10-28 09:01:55,733 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1933871175] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:55,733 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:55,733 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 09:01:55,733 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [568361371] [2021-10-28 09:01:55,733 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 09:01:55,733 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:55,734 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 09:01:55,734 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:01:55,734 INFO L87 Difference]: Start difference. First operand 227 states and 314 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:55,891 INFO L93 Difference]: Finished difference Result 865 states and 1197 transitions. [2021-10-28 09:01:55,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-10-28 09:01:55,891 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2021-10-28 09:01:55,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:55,895 INFO L225 Difference]: With dead ends: 865 [2021-10-28 09:01:55,895 INFO L226 Difference]: Without dead ends: 645 [2021-10-28 09:01:55,896 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-28 09:01:55,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 645 states. [2021-10-28 09:01:55,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 645 to 225. [2021-10-28 09:01:55,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 225 states, 224 states have (on average 1.375) internal successors, (308), 224 states have internal predecessors, (308), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 225 states to 225 states and 308 transitions. [2021-10-28 09:01:55,928 INFO L78 Accepts]: Start accepts. Automaton has 225 states and 308 transitions. Word has length 33 [2021-10-28 09:01:55,929 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:55,929 INFO L470 AbstractCegarLoop]: Abstraction has 225 states and 308 transitions. [2021-10-28 09:01:55,929 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:55,929 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 308 transitions. [2021-10-28 09:01:55,930 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-10-28 09:01:55,930 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:55,930 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:55,930 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-10-28 09:01:55,931 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:55,931 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:55,931 INFO L85 PathProgramCache]: Analyzing trace with hash -1552355764, now seen corresponding path program 1 times [2021-10-28 09:01:55,931 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:55,931 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1266156347] [2021-10-28 09:01:55,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:55,932 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:55,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:55,983 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:55,983 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:55,983 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1266156347] [2021-10-28 09:01:55,983 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1266156347] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:55,983 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:55,984 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 09:01:55,984 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1990618278] [2021-10-28 09:01:55,984 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 09:01:55,984 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:55,985 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 09:01:55,985 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:01:55,985 INFO L87 Difference]: Start difference. First operand 225 states and 308 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:56,054 INFO L93 Difference]: Finished difference Result 609 states and 825 transitions. [2021-10-28 09:01:56,055 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-10-28 09:01:56,055 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2021-10-28 09:01:56,055 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:56,057 INFO L225 Difference]: With dead ends: 609 [2021-10-28 09:01:56,057 INFO L226 Difference]: Without dead ends: 391 [2021-10-28 09:01:56,058 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-28 09:01:56,059 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 391 states. [2021-10-28 09:01:56,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 391 to 243. [2021-10-28 09:01:56,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 242 states have (on average 1.3471074380165289) internal successors, (326), 242 states have internal predecessors, (326), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 326 transitions. [2021-10-28 09:01:56,080 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 326 transitions. Word has length 36 [2021-10-28 09:01:56,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:56,080 INFO L470 AbstractCegarLoop]: Abstraction has 243 states and 326 transitions. [2021-10-28 09:01:56,080 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,081 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 326 transitions. [2021-10-28 09:01:56,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-10-28 09:01:56,081 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:56,082 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:56,082 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-10-28 09:01:56,082 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:56,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:56,082 INFO L85 PathProgramCache]: Analyzing trace with hash 1731494282, now seen corresponding path program 1 times [2021-10-28 09:01:56,083 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:56,083 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773726252] [2021-10-28 09:01:56,083 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:56,083 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:56,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:56,135 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:56,136 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:56,137 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773726252] [2021-10-28 09:01:56,137 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773726252] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:56,137 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:56,137 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 09:01:56,138 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1791579745] [2021-10-28 09:01:56,139 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-28 09:01:56,141 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:56,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-28 09:01:56,142 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-28 09:01:56,146 INFO L87 Difference]: Start difference. First operand 243 states and 326 transitions. Second operand has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:56,211 INFO L93 Difference]: Finished difference Result 512 states and 682 transitions. [2021-10-28 09:01:56,212 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-28 09:01:56,212 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2021-10-28 09:01:56,213 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:56,214 INFO L225 Difference]: With dead ends: 512 [2021-10-28 09:01:56,215 INFO L226 Difference]: Without dead ends: 276 [2021-10-28 09:01:56,215 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:01:56,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 276 states. [2021-10-28 09:01:56,237 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 276 to 204. [2021-10-28 09:01:56,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 203 states have (on average 1.3152709359605912) internal successors, (267), 203 states have internal predecessors, (267), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 267 transitions. [2021-10-28 09:01:56,239 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 267 transitions. Word has length 36 [2021-10-28 09:01:56,241 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:56,241 INFO L470 AbstractCegarLoop]: Abstraction has 204 states and 267 transitions. [2021-10-28 09:01:56,241 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.0) internal successors, (36), 4 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,242 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 267 transitions. [2021-10-28 09:01:56,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-10-28 09:01:56,242 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:56,243 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:56,243 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-10-28 09:01:56,243 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:56,244 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:56,244 INFO L85 PathProgramCache]: Analyzing trace with hash -764052856, now seen corresponding path program 1 times [2021-10-28 09:01:56,244 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:56,246 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2061132978] [2021-10-28 09:01:56,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:56,246 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:56,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:56,327 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:56,327 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:56,328 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2061132978] [2021-10-28 09:01:56,328 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2061132978] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:56,328 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:56,328 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-10-28 09:01:56,328 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1208579771] [2021-10-28 09:01:56,329 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-10-28 09:01:56,329 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:56,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-10-28 09:01:56,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-10-28 09:01:56,330 INFO L87 Difference]: Start difference. First operand 204 states and 267 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:56,543 INFO L93 Difference]: Finished difference Result 615 states and 805 transitions. [2021-10-28 09:01:56,543 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-10-28 09:01:56,543 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2021-10-28 09:01:56,544 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:56,546 INFO L225 Difference]: With dead ends: 615 [2021-10-28 09:01:56,546 INFO L226 Difference]: Without dead ends: 418 [2021-10-28 09:01:56,547 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-10-28 09:01:56,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 418 states. [2021-10-28 09:01:56,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 418 to 204. [2021-10-28 09:01:56,568 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 203 states have (on average 1.29064039408867) internal successors, (262), 203 states have internal predecessors, (262), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 262 transitions. [2021-10-28 09:01:56,569 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 262 transitions. Word has length 37 [2021-10-28 09:01:56,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:56,570 INFO L470 AbstractCegarLoop]: Abstraction has 204 states and 262 transitions. [2021-10-28 09:01:56,570 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 6 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,570 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 262 transitions. [2021-10-28 09:01:56,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-10-28 09:01:56,571 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:56,571 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:56,572 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-10-28 09:01:56,572 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:56,572 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:56,573 INFO L85 PathProgramCache]: Analyzing trace with hash -1177012586, now seen corresponding path program 1 times [2021-10-28 09:01:56,573 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:56,575 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [185262330] [2021-10-28 09:01:56,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:56,575 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:56,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:56,681 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-10-28 09:01:56,682 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:56,682 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [185262330] [2021-10-28 09:01:56,682 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [185262330] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:56,682 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:56,683 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-10-28 09:01:56,683 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [555719579] [2021-10-28 09:01:56,683 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-10-28 09:01:56,683 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:56,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-10-28 09:01:56,685 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-10-28 09:01:56,685 INFO L87 Difference]: Start difference. First operand 204 states and 262 transitions. Second operand has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 7 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:56,799 INFO L93 Difference]: Finished difference Result 516 states and 678 transitions. [2021-10-28 09:01:56,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-10-28 09:01:56,800 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 7 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-10-28 09:01:56,801 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:56,803 INFO L225 Difference]: With dead ends: 516 [2021-10-28 09:01:56,804 INFO L226 Difference]: Without dead ends: 369 [2021-10-28 09:01:56,804 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-10-28 09:01:56,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 369 states. [2021-10-28 09:01:56,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 369 to 210. [2021-10-28 09:01:56,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 209 states have (on average 1.2822966507177034) internal successors, (268), 209 states have internal predecessors, (268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 268 transitions. [2021-10-28 09:01:56,831 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 268 transitions. Word has length 58 [2021-10-28 09:01:56,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:56,832 INFO L470 AbstractCegarLoop]: Abstraction has 210 states and 268 transitions. [2021-10-28 09:01:56,833 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 7 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,833 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 268 transitions. [2021-10-28 09:01:56,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-10-28 09:01:56,834 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:56,834 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:56,834 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-10-28 09:01:56,835 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:56,835 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:56,835 INFO L85 PathProgramCache]: Analyzing trace with hash -1435178024, now seen corresponding path program 1 times [2021-10-28 09:01:56,835 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:56,836 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1102399890] [2021-10-28 09:01:56,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:56,836 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:56,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:56,903 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:56,904 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:56,904 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1102399890] [2021-10-28 09:01:56,905 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1102399890] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:56,905 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:56,905 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 09:01:56,905 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [573466351] [2021-10-28 09:01:56,906 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 09:01:56,906 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:56,906 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 09:01:56,907 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:01:56,907 INFO L87 Difference]: Start difference. First operand 210 states and 268 transitions. Second operand has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:56,955 INFO L93 Difference]: Finished difference Result 331 states and 425 transitions. [2021-10-28 09:01:56,956 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 09:01:56,956 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2021-10-28 09:01:56,956 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:56,958 INFO L225 Difference]: With dead ends: 331 [2021-10-28 09:01:56,958 INFO L226 Difference]: Without dead ends: 329 [2021-10-28 09:01:56,959 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 09:01:56,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2021-10-28 09:01:56,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 236. [2021-10-28 09:01:56,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 235 states have (on average 1.3063829787234043) internal successors, (307), 235 states have internal predecessors, (307), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 307 transitions. [2021-10-28 09:01:56,984 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 307 transitions. Word has length 58 [2021-10-28 09:01:56,984 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:56,984 INFO L470 AbstractCegarLoop]: Abstraction has 236 states and 307 transitions. [2021-10-28 09:01:56,985 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:56,985 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 307 transitions. [2021-10-28 09:01:56,986 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2021-10-28 09:01:56,986 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:56,986 INFO L513 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:56,986 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-10-28 09:01:56,986 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:56,987 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:56,987 INFO L85 PathProgramCache]: Analyzing trace with hash 200937625, now seen corresponding path program 1 times [2021-10-28 09:01:56,987 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:56,987 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [516168678] [2021-10-28 09:01:56,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:56,988 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:57,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:57,137 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-10-28 09:01:57,138 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:57,138 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [516168678] [2021-10-28 09:01:57,138 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [516168678] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:57,138 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:57,138 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 09:01:57,139 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1040179566] [2021-10-28 09:01:57,139 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 09:01:57,139 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:57,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 09:01:57,140 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-28 09:01:57,140 INFO L87 Difference]: Start difference. First operand 236 states and 307 transitions. Second operand has 5 states, 5 states have (on average 15.0) internal successors, (75), 5 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:57,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:57,469 INFO L93 Difference]: Finished difference Result 589 states and 784 transitions. [2021-10-28 09:01:57,469 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-28 09:01:57,470 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 5 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 82 [2021-10-28 09:01:57,470 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:57,472 INFO L225 Difference]: With dead ends: 589 [2021-10-28 09:01:57,472 INFO L226 Difference]: Without dead ends: 410 [2021-10-28 09:01:57,473 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2021-10-28 09:01:57,474 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 410 states. [2021-10-28 09:01:57,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 410 to 269. [2021-10-28 09:01:57,517 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 269 states, 268 states have (on average 1.3059701492537314) internal successors, (350), 268 states have internal predecessors, (350), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:57,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 269 states to 269 states and 350 transitions. [2021-10-28 09:01:57,518 INFO L78 Accepts]: Start accepts. Automaton has 269 states and 350 transitions. Word has length 82 [2021-10-28 09:01:57,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:57,519 INFO L470 AbstractCegarLoop]: Abstraction has 269 states and 350 transitions. [2021-10-28 09:01:57,519 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 5 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:57,519 INFO L276 IsEmpty]: Start isEmpty. Operand 269 states and 350 transitions. [2021-10-28 09:01:57,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2021-10-28 09:01:57,521 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:57,521 INFO L513 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:57,521 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-10-28 09:01:57,521 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:57,522 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:57,522 INFO L85 PathProgramCache]: Analyzing trace with hash -820130729, now seen corresponding path program 1 times [2021-10-28 09:01:57,522 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:57,522 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1939056309] [2021-10-28 09:01:57,523 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:57,523 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:57,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:57,614 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 39 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:57,614 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:57,614 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1939056309] [2021-10-28 09:01:57,614 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1939056309] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-28 09:01:57,615 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [357966926] [2021-10-28 09:01:57,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:57,615 INFO L170 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-28 09:01:57,615 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/z3 [2021-10-28 09:01:57,619 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-10-28 09:01:57,640 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-10-28 09:01:57,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:57,774 INFO L263 TraceCheckSpWp]: Trace formula consists of 514 conjuncts, 3 conjunts are in the unsatisfiable core [2021-10-28 09:01:57,782 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-28 09:01:58,012 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 39 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 09:01:58,012 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [357966926] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-28 09:01:58,012 INFO L186 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2021-10-28 09:01:58,013 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4] total 4 [2021-10-28 09:01:58,013 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1894129874] [2021-10-28 09:01:58,013 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-28 09:01:58,013 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:58,014 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-28 09:01:58,014 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-10-28 09:01:58,014 INFO L87 Difference]: Start difference. First operand 269 states and 350 transitions. Second operand has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:58,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:58,143 INFO L93 Difference]: Finished difference Result 559 states and 728 transitions. [2021-10-28 09:01:58,144 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-28 09:01:58,144 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 82 [2021-10-28 09:01:58,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:58,146 INFO L225 Difference]: With dead ends: 559 [2021-10-28 09:01:58,146 INFO L226 Difference]: Without dead ends: 294 [2021-10-28 09:01:58,147 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-10-28 09:01:58,147 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2021-10-28 09:01:58,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 274. [2021-10-28 09:01:58,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 273 states have (on average 1.2527472527472527) internal successors, (342), 273 states have internal predecessors, (342), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:58,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 342 transitions. [2021-10-28 09:01:58,181 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 342 transitions. Word has length 82 [2021-10-28 09:01:58,182 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:58,182 INFO L470 AbstractCegarLoop]: Abstraction has 274 states and 342 transitions. [2021-10-28 09:01:58,182 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 20.5) internal successors, (82), 4 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:58,182 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 342 transitions. [2021-10-28 09:01:58,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2021-10-28 09:01:58,183 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 09:01:58,183 INFO L513 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:01:58,222 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-10-28 09:01:58,406 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-10-28 09:01:58,406 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 09:01:58,407 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 09:01:58,407 INFO L85 PathProgramCache]: Analyzing trace with hash 364797879, now seen corresponding path program 2 times [2021-10-28 09:01:58,407 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 09:01:58,407 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1626930305] [2021-10-28 09:01:58,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 09:01:58,407 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 09:01:58,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 09:01:58,546 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 43 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2021-10-28 09:01:58,546 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 09:01:58,546 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1626930305] [2021-10-28 09:01:58,546 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1626930305] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 09:01:58,546 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 09:01:58,546 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-10-28 09:01:58,549 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1988583887] [2021-10-28 09:01:58,551 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-10-28 09:01:58,551 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 09:01:58,552 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-10-28 09:01:58,552 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-10-28 09:01:58,552 INFO L87 Difference]: Start difference. First operand 274 states and 342 transitions. Second operand has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:58,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 09:01:58,947 INFO L93 Difference]: Finished difference Result 608 states and 761 transitions. [2021-10-28 09:01:58,947 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-10-28 09:01:58,948 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 83 [2021-10-28 09:01:58,948 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 09:01:58,948 INFO L225 Difference]: With dead ends: 608 [2021-10-28 09:01:58,948 INFO L226 Difference]: Without dead ends: 0 [2021-10-28 09:01:58,949 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2021-10-28 09:01:58,949 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-10-28 09:01:58,949 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-10-28 09:01:58,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:58,950 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-10-28 09:01:58,950 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 83 [2021-10-28 09:01:58,950 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 09:01:58,950 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-28 09:01:58,950 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.333333333333334) internal successors, (74), 6 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 09:01:58,950 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-10-28 09:01:58,950 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-10-28 09:01:58,952 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 09:01:58,953 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 09:01:58,953 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 09:01:58,953 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-10-28 09:01:58,955 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-10-28 09:01:58,962 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,177 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,178 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,179 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,179 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,181 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,217 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,252 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,253 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,254 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,277 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,279 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,279 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,280 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,280 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,281 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,414 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,415 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,415 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,416 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,416 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,417 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,417 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,418 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,419 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,419 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,420 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,420 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,420 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,438 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,438 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,440 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,440 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,441 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,586 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,927 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,927 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,928 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,928 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,929 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,930 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,930 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:01:59,931 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,092 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,096 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,097 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,256 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,530 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,531 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,531 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,532 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,533 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,737 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,739 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:00,739 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 09:02:05,272 INFO L857 garLoopResultBuilder]: For program point L993(line 993) no Hoare annotation was computed. [2021-10-28 09:02:05,272 INFO L857 garLoopResultBuilder]: For program point L993-1(line 993) no Hoare annotation was computed. [2021-10-28 09:02:05,272 INFO L857 garLoopResultBuilder]: For program point L993-2(line 993) no Hoare annotation was computed. [2021-10-28 09:02:05,273 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 993) no Hoare annotation was computed. [2021-10-28 09:02:05,273 INFO L857 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2021-10-28 09:02:05,273 INFO L857 garLoopResultBuilder]: For program point L102-3(lines 102 106) no Hoare annotation was computed. [2021-10-28 09:02:05,273 INFO L857 garLoopResultBuilder]: For program point L102-6(lines 102 106) no Hoare annotation was computed. [2021-10-28 09:02:05,273 INFO L857 garLoopResultBuilder]: For program point L598(lines 598 609) no Hoare annotation was computed. [2021-10-28 09:02:05,273 INFO L853 garLoopResultBuilder]: At program point L534(lines 519 537) the Hoare annotation is: false [2021-10-28 09:02:05,274 INFO L853 garLoopResultBuilder]: At program point L534-1(lines 519 537) the Hoare annotation is: (let ((.cse1 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 0)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 0)) (.cse6 (<= 1 ~waterLevel~0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse10 (<= 2 ~waterLevel~0)) (.cse4 (= 1 ~systemActive~0)) (.cse7 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse8 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse9 .cse3 .cse4 .cse6 .cse7 .cse8) (and .cse0 .cse2 .cse10 .cse4 .cse5 .cse7 .cse8) (and .cse0 .cse2 .cse9 .cse10 .cse4 .cse7 .cse8))) [2021-10-28 09:02:05,274 INFO L853 garLoopResultBuilder]: At program point L534-2(lines 519 537) the Hoare annotation is: false [2021-10-28 09:02:05,274 INFO L853 garLoopResultBuilder]: At program point L534-3(lines 519 537) the Hoare annotation is: false [2021-10-28 09:02:05,274 INFO L853 garLoopResultBuilder]: At program point L534-4(lines 519 537) the Hoare annotation is: false [2021-10-28 09:02:05,274 INFO L853 garLoopResultBuilder]: At program point L534-5(lines 519 537) the Hoare annotation is: false [2021-10-28 09:02:05,274 INFO L853 garLoopResultBuilder]: At program point L139(lines 134 142) the Hoare annotation is: false [2021-10-28 09:02:05,275 INFO L853 garLoopResultBuilder]: At program point L139-1(lines 134 142) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse5 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 (= ~methaneLevelCritical~0 1) .cse4 .cse5 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)))) [2021-10-28 09:02:05,275 INFO L853 garLoopResultBuilder]: At program point L139-2(lines 134 142) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse3 (<= 1 ~waterLevel~0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse5 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse7 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 .cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) .cse2 (= ~methaneLevelCritical~0 1) .cse3 .cse4 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 .cse5 .cse6 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse5 .cse6 (<= 2 ~waterLevel~0) .cse2 .cse7 .cse4))) [2021-10-28 09:02:05,275 INFO L853 garLoopResultBuilder]: At program point L139-3(lines 134 142) the Hoare annotation is: false [2021-10-28 09:02:05,275 INFO L853 garLoopResultBuilder]: At program point L139-4(lines 134 142) the Hoare annotation is: false [2021-10-28 09:02:05,275 INFO L853 garLoopResultBuilder]: At program point L139-5(lines 134 142) the Hoare annotation is: false [2021-10-28 09:02:05,275 INFO L853 garLoopResultBuilder]: At program point L139-6(lines 134 142) the Hoare annotation is: false [2021-10-28 09:02:05,275 INFO L853 garLoopResultBuilder]: At program point L139-7(lines 134 142) the Hoare annotation is: false [2021-10-28 09:02:05,276 INFO L853 garLoopResultBuilder]: At program point L139-8(lines 134 142) the Hoare annotation is: false [2021-10-28 09:02:05,276 INFO L857 garLoopResultBuilder]: For program point L569(lines 568 613) no Hoare annotation was computed. [2021-10-28 09:02:05,276 INFO L853 garLoopResultBuilder]: At program point L470(lines 463 473) the Hoare annotation is: false [2021-10-28 09:02:05,276 INFO L853 garLoopResultBuilder]: At program point L470-1(lines 463 473) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse5 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= |ULTIMATE.start_isMethaneAlarm_#res| 1) (= ~methaneLevelCritical~0 1) .cse4 .cse5 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5))) [2021-10-28 09:02:05,276 INFO L853 garLoopResultBuilder]: At program point L470-2(lines 463 473) the Hoare annotation is: false [2021-10-28 09:02:05,276 INFO L853 garLoopResultBuilder]: At program point L470-3(lines 463 473) the Hoare annotation is: false [2021-10-28 09:02:05,276 INFO L853 garLoopResultBuilder]: At program point L470-4(lines 463 473) the Hoare annotation is: false [2021-10-28 09:02:05,277 INFO L853 garLoopResultBuilder]: At program point L470-5(lines 463 473) the Hoare annotation is: false [2021-10-28 09:02:05,277 INFO L857 garLoopResultBuilder]: For program point L570(lines 570 574) no Hoare annotation was computed. [2021-10-28 09:02:05,277 INFO L853 garLoopResultBuilder]: At program point L75(lines 1 996) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-10-28 09:02:05,277 INFO L857 garLoopResultBuilder]: For program point L604(lines 604 608) no Hoare annotation was computed. [2021-10-28 09:02:05,277 INFO L857 garLoopResultBuilder]: For program point L604-2(lines 350 356) no Hoare annotation was computed. [2021-10-28 09:02:05,277 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 993) no Hoare annotation was computed. [2021-10-28 09:02:05,278 INFO L853 garLoopResultBuilder]: At program point L308(lines 303 310) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res| 1) (= ~waterLevel~0 1) (= ULTIMATE.start_main_~tmp~0 ~systemActive~0)) [2021-10-28 09:02:05,278 INFO L857 garLoopResultBuilder]: For program point L408(lines 408 425) no Hoare annotation was computed. [2021-10-28 09:02:05,278 INFO L857 garLoopResultBuilder]: For program point L408-1(lines 408 425) no Hoare annotation was computed. [2021-10-28 09:02:05,281 INFO L857 garLoopResultBuilder]: For program point L408-2(lines 408 425) no Hoare annotation was computed. [2021-10-28 09:02:05,282 INFO L853 garLoopResultBuilder]: At program point L211-2(lines 211 225) the Hoare annotation is: false [2021-10-28 09:02:05,282 INFO L857 garLoopResultBuilder]: For program point L212(line 212) no Hoare annotation was computed. [2021-10-28 09:02:05,282 INFO L857 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2021-10-28 09:02:05,282 INFO L857 garLoopResultBuilder]: For program point L179-1(lines 179 185) no Hoare annotation was computed. [2021-10-28 09:02:05,282 INFO L857 garLoopResultBuilder]: For program point L179-2(lines 179 185) no Hoare annotation was computed. [2021-10-28 09:02:05,282 INFO L857 garLoopResultBuilder]: For program point L179-3(lines 179 185) no Hoare annotation was computed. [2021-10-28 09:02:05,282 INFO L857 garLoopResultBuilder]: For program point L179-4(lines 179 185) no Hoare annotation was computed. [2021-10-28 09:02:05,282 INFO L857 garLoopResultBuilder]: For program point L179-5(lines 179 185) no Hoare annotation was computed. [2021-10-28 09:02:05,283 INFO L857 garLoopResultBuilder]: For program point L114(lines 114 118) no Hoare annotation was computed. [2021-10-28 09:02:05,283 INFO L857 garLoopResultBuilder]: For program point L445(lines 445 451) no Hoare annotation was computed. [2021-10-28 09:02:05,283 INFO L857 garLoopResultBuilder]: For program point L412(lines 412 420) no Hoare annotation was computed. [2021-10-28 09:02:05,283 INFO L857 garLoopResultBuilder]: For program point L445-2(lines 445 451) no Hoare annotation was computed. [2021-10-28 09:02:05,283 INFO L857 garLoopResultBuilder]: For program point L412-1(lines 412 420) no Hoare annotation was computed. [2021-10-28 09:02:05,283 INFO L857 garLoopResultBuilder]: For program point L412-2(lines 412 420) no Hoare annotation was computed. [2021-10-28 09:02:05,283 INFO L857 garLoopResultBuilder]: For program point L445-4(lines 445 451) no Hoare annotation was computed. [2021-10-28 09:02:05,283 INFO L857 garLoopResultBuilder]: For program point L445-6(lines 445 451) no Hoare annotation was computed. [2021-10-28 09:02:05,284 INFO L857 garLoopResultBuilder]: For program point L445-8(lines 445 451) no Hoare annotation was computed. [2021-10-28 09:02:05,284 INFO L857 garLoopResultBuilder]: For program point L445-10(lines 445 451) no Hoare annotation was computed. [2021-10-28 09:02:05,284 INFO L857 garLoopResultBuilder]: For program point L578(lines 578 584) no Hoare annotation was computed. [2021-10-28 09:02:05,284 INFO L853 garLoopResultBuilder]: At program point L578-1(lines 578 584) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse6 (<= 1 ~waterLevel~0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse7 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse5 (= ~methaneLevelCritical~0 1) .cse6 .cse7 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse3 (= ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse4 (<= 2 ~waterLevel~0) .cse5 (= |ULTIMATE.start_valid_product_#res| 1) .cse7))) [2021-10-28 09:02:05,284 INFO L853 garLoopResultBuilder]: At program point L479(lines 474 482) the Hoare annotation is: (and (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ~pumpRunning~0 0) (= |ULTIMATE.start_isPumpRunning_#res| 0) (= 1 ~systemActive~0) (= ~methaneLevelCritical~0 1) (<= 1 ~waterLevel~0) (= |ULTIMATE.start_valid_product_#res| 1) (= ULTIMATE.start_main_~tmp~0 ~systemActive~0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) [2021-10-28 09:02:05,284 INFO L853 garLoopResultBuilder]: At program point L479-1(lines 474 482) the Hoare annotation is: false [2021-10-28 09:02:05,284 INFO L853 garLoopResultBuilder]: At program point L479-2(lines 474 482) the Hoare annotation is: false [2021-10-28 09:02:05,285 INFO L857 garLoopResultBuilder]: For program point L215(lines 215 219) no Hoare annotation was computed. [2021-10-28 09:02:05,285 INFO L857 garLoopResultBuilder]: For program point L215-1(lines 350 356) no Hoare annotation was computed. [2021-10-28 09:02:05,286 INFO L853 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res| 1) (= ~waterLevel~0 1)) [2021-10-28 09:02:05,286 INFO L857 garLoopResultBuilder]: For program point L547(lines 547 551) no Hoare annotation was computed. [2021-10-28 09:02:05,286 INFO L857 garLoopResultBuilder]: For program point L547-2(lines 547 551) no Hoare annotation was computed. [2021-10-28 09:02:05,286 INFO L857 garLoopResultBuilder]: For program point L547-3(lines 547 551) no Hoare annotation was computed. [2021-10-28 09:02:05,286 INFO L857 garLoopResultBuilder]: For program point L382(lines 382 399) no Hoare annotation was computed. [2021-10-28 09:02:05,286 INFO L857 garLoopResultBuilder]: For program point L547-5(lines 547 551) no Hoare annotation was computed. [2021-10-28 09:02:05,286 INFO L857 garLoopResultBuilder]: For program point L382-1(lines 382 399) no Hoare annotation was computed. [2021-10-28 09:02:05,288 INFO L857 garLoopResultBuilder]: For program point L547-6(lines 547 551) no Hoare annotation was computed. [2021-10-28 09:02:05,288 INFO L857 garLoopResultBuilder]: For program point L382-2(lines 382 399) no Hoare annotation was computed. [2021-10-28 09:02:05,288 INFO L857 garLoopResultBuilder]: For program point L382-3(lines 382 399) no Hoare annotation was computed. [2021-10-28 09:02:05,288 INFO L857 garLoopResultBuilder]: For program point L547-8(lines 547 551) no Hoare annotation was computed. [2021-10-28 09:02:05,288 INFO L857 garLoopResultBuilder]: For program point L382-4(lines 382 399) no Hoare annotation was computed. [2021-10-28 09:02:05,288 INFO L857 garLoopResultBuilder]: For program point L382-5(lines 382 399) no Hoare annotation was computed. [2021-10-28 09:02:05,289 INFO L853 garLoopResultBuilder]: At program point L184(lines 175 188) the Hoare annotation is: false [2021-10-28 09:02:05,289 INFO L853 garLoopResultBuilder]: At program point L184-1(lines 175 188) the Hoare annotation is: (let ((.cse2 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1)) (.cse5 (<= 1 ~waterLevel~0)) (.cse4 (= ~methaneLevelCritical~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse9 (<= 2 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse6 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse7 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse8 .cse2 .cse3 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse6 .cse7) (and .cse0 .cse1 .cse8 .cse9 .cse3 .cse6 .cse7))) [2021-10-28 09:02:05,289 INFO L853 garLoopResultBuilder]: At program point L184-2(lines 175 188) the Hoare annotation is: false [2021-10-28 09:02:05,289 INFO L853 garLoopResultBuilder]: At program point L184-3(lines 175 188) the Hoare annotation is: false [2021-10-28 09:02:05,289 INFO L853 garLoopResultBuilder]: At program point L184-4(lines 175 188) the Hoare annotation is: false [2021-10-28 09:02:05,290 INFO L853 garLoopResultBuilder]: At program point L184-5(lines 175 188) the Hoare annotation is: false [2021-10-28 09:02:05,291 INFO L853 garLoopResultBuilder]: At program point L614(lines 567 615) the Hoare annotation is: false [2021-10-28 09:02:05,291 INFO L853 garLoopResultBuilder]: At program point L350(lines 349 368) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse2 (<= 1 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse5 .cse2 .cse3 .cse4) (and .cse0 (= ~pumpRunning~0 0) .cse1 .cse5 .cse2 .cse3 .cse4))) [2021-10-28 09:02:05,291 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-10-28 09:02:05,291 INFO L857 garLoopResultBuilder]: For program point L350-1(lines 350 356) no Hoare annotation was computed. [2021-10-28 09:02:05,291 INFO L853 garLoopResultBuilder]: At program point L350-2(lines 349 368) the Hoare annotation is: false [2021-10-28 09:02:05,291 INFO L853 garLoopResultBuilder]: At program point L350-3(lines 349 368) the Hoare annotation is: false [2021-10-28 09:02:05,291 INFO L857 garLoopResultBuilder]: For program point L319(lines 319 336) no Hoare annotation was computed. [2021-10-28 09:02:05,291 INFO L857 garLoopResultBuilder]: For program point L286(lines 286 293) no Hoare annotation was computed. [2021-10-28 09:02:05,292 INFO L853 garLoopResultBuilder]: At program point L319-1(lines 1 996) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse6 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse4 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 .cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) .cse2 .cse3 (= ~methaneLevelCritical~0 1) (<= 1 ~waterLevel~0) .cse4 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 .cse2 .cse5 .cse3 .cse6 (= ~waterLevel~0 1) .cse4) (and .cse0 .cse2 (= ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse5 (<= 2 ~waterLevel~0) .cse3 .cse6 .cse4))) [2021-10-28 09:02:05,292 INFO L857 garLoopResultBuilder]: For program point L319-2(lines 319 336) no Hoare annotation was computed. [2021-10-28 09:02:05,292 INFO L860 garLoopResultBuilder]: At program point L286-1(lines 286 293) the Hoare annotation is: true [2021-10-28 09:02:05,292 INFO L853 garLoopResultBuilder]: At program point L319-3(lines 1 996) the Hoare annotation is: false [2021-10-28 09:02:05,292 INFO L857 garLoopResultBuilder]: For program point L319-4(lines 319 336) no Hoare annotation was computed. [2021-10-28 09:02:05,292 INFO L853 garLoopResultBuilder]: At program point L319-5(lines 1 996) the Hoare annotation is: false [2021-10-28 09:02:05,292 INFO L857 garLoopResultBuilder]: For program point L386(lines 386 394) no Hoare annotation was computed. [2021-10-28 09:02:05,293 INFO L857 garLoopResultBuilder]: For program point L386-1(lines 386 394) no Hoare annotation was computed. [2021-10-28 09:02:05,293 INFO L857 garLoopResultBuilder]: For program point L386-2(lines 386 394) no Hoare annotation was computed. [2021-10-28 09:02:05,293 INFO L857 garLoopResultBuilder]: For program point L386-3(lines 386 394) no Hoare annotation was computed. [2021-10-28 09:02:05,293 INFO L857 garLoopResultBuilder]: For program point L386-4(lines 386 394) no Hoare annotation was computed. [2021-10-28 09:02:05,293 INFO L857 garLoopResultBuilder]: For program point L386-5(lines 386 394) no Hoare annotation was computed. [2021-10-28 09:02:05,293 INFO L853 garLoopResultBuilder]: At program point L553(lines 538 556) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_isLowWaterSensorDry_#res| 0)) (.cse2 (not (= ULTIMATE.start_isLowWaterLevel_~tmp___0~2 0))) (.cse3 (not (= |ULTIMATE.start_isLowWaterLevel_#res| 0))) (.cse4 (= 1 ~systemActive~0)) (.cse5 (= ULTIMATE.start_isLowWaterLevel_~tmp~6 0)) (.cse6 (<= 1 ~waterLevel~0)) (.cse7 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse8 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 .cse7 .cse8))) [2021-10-28 09:02:05,293 INFO L853 garLoopResultBuilder]: At program point L553-1(lines 538 556) the Hoare annotation is: false [2021-10-28 09:02:05,293 INFO L853 garLoopResultBuilder]: At program point L553-2(lines 538 556) the Hoare annotation is: false [2021-10-28 09:02:05,294 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-10-28 09:02:05,294 INFO L857 garLoopResultBuilder]: For program point L323(lines 323 333) no Hoare annotation was computed. [2021-10-28 09:02:05,294 INFO L857 garLoopResultBuilder]: For program point L323-2(lines 323 333) no Hoare annotation was computed. [2021-10-28 09:02:05,294 INFO L857 garLoopResultBuilder]: For program point L323-4(lines 323 333) no Hoare annotation was computed. [2021-10-28 09:02:05,294 INFO L857 garLoopResultBuilder]: For program point L588(lines 588 594) no Hoare annotation was computed. [2021-10-28 09:02:05,294 INFO L853 garLoopResultBuilder]: At program point L588-1(lines 588 594) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (<= 1 ~waterLevel~0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse8 (= ~methaneLevelCritical~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse9 (<= 2 ~waterLevel~0)) (.cse4 (= 1 ~systemActive~0)) (.cse6 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse7 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) .cse2 .cse4 .cse8 .cse5 .cse7) (and .cse0 .cse2 .cse9 .cse4 .cse8 .cse6 .cse7) (and .cse0 .cse3 .cse9 .cse4 .cse6 .cse7))) [2021-10-28 09:02:05,294 INFO L853 garLoopResultBuilder]: At program point L357(lines 357 363) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~waterLevel~0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse6 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse5 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 .cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse3 (= ~methaneLevelCritical~0 1) .cse4 .cse6 .cse5) (and .cse0 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse6 .cse5))) [2021-10-28 09:02:05,294 INFO L857 garLoopResultBuilder]: For program point L324(lines 324 330) no Hoare annotation was computed. [2021-10-28 09:02:05,295 INFO L853 garLoopResultBuilder]: At program point L357-1(lines 357 363) the Hoare annotation is: false [2021-10-28 09:02:05,295 INFO L853 garLoopResultBuilder]: At program point L357-2(lines 357 363) the Hoare annotation is: false [2021-10-28 09:02:05,295 INFO L857 garLoopResultBuilder]: For program point L324-2(lines 324 330) no Hoare annotation was computed. [2021-10-28 09:02:05,295 INFO L857 garLoopResultBuilder]: For program point L324-4(lines 324 330) no Hoare annotation was computed. [2021-10-28 09:02:05,295 INFO L857 garLoopResultBuilder]: For program point L126(lines 126 130) no Hoare annotation was computed. [2021-10-28 09:02:05,296 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-10-28 09:02:05,296 INFO L853 garLoopResultBuilder]: At program point L260(lines 256 262) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res| 1) (= ~waterLevel~0 1) (= ULTIMATE.start_main_~tmp~0 ~systemActive~0)) [2021-10-28 09:02:05,296 INFO L853 garLoopResultBuilder]: At program point L194(lines 189 197) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_isLowWaterSensorDry_#res| 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (<= 1 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse5 (= ULTIMATE.start_main_~tmp~0 ~systemActive~0))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0 0) .cse2 (= ~methaneLevelCritical~0 1) .cse3 .cse4 .cse5) (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5))) [2021-10-28 09:02:05,296 INFO L853 garLoopResultBuilder]: At program point L194-1(lines 189 197) the Hoare annotation is: false [2021-10-28 09:02:05,296 INFO L853 garLoopResultBuilder]: At program point L194-2(lines 189 197) the Hoare annotation is: false [2021-10-28 09:02:05,296 INFO L860 garLoopResultBuilder]: At program point L295(lines 276 298) the Hoare annotation is: true [2021-10-28 09:02:05,296 INFO L857 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-10-28 09:02:05,297 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 993) no Hoare annotation was computed. [2021-10-28 09:02:05,297 INFO L857 garLoopResultBuilder]: For program point L528(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,297 INFO L857 garLoopResultBuilder]: For program point L528-2(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,297 INFO L857 garLoopResultBuilder]: For program point L528-3(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,297 INFO L857 garLoopResultBuilder]: For program point L528-5(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,298 INFO L857 garLoopResultBuilder]: For program point L528-6(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,298 INFO L857 garLoopResultBuilder]: For program point L528-8(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,298 INFO L857 garLoopResultBuilder]: For program point L528-9(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,298 INFO L857 garLoopResultBuilder]: For program point L528-11(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,298 INFO L857 garLoopResultBuilder]: For program point L528-12(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,299 INFO L857 garLoopResultBuilder]: For program point L528-14(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,299 INFO L857 garLoopResultBuilder]: For program point L528-15(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,299 INFO L857 garLoopResultBuilder]: For program point L528-17(lines 528 532) no Hoare annotation was computed. [2021-10-28 09:02:05,302 INFO L731 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 09:02:05,303 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-10-28 09:02:05,358 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.10 09:02:05 BoogieIcfgContainer [2021-10-28 09:02:05,358 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-10-28 09:02:05,366 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-10-28 09:02:05,367 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-10-28 09:02:05,367 INFO L275 PluginConnector]: Witness Printer initialized [2021-10-28 09:02:05,367 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 09:01:53" (3/4) ... [2021-10-28 09:02:05,370 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-10-28 09:02:05,396 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 41 nodes and edges [2021-10-28 09:02:05,398 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2021-10-28 09:02:05,399 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2021-10-28 09:02:05,400 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-10-28 09:02:05,402 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-10-28 09:02:05,403 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-28 09:02:05,404 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-28 09:02:05,433 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1 [2021-10-28 09:02:05,434 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1) && tmp == systemActive [2021-10-28 09:02:05,434 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1) && tmp == systemActive [2021-10-28 09:02:05,434 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && tmp == systemActive) && \result == 1) || (((((((splverifierCounter == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1) && tmp == systemActive)) || ((((((((splverifierCounter == 0 && methAndRunningLastTime == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) [2021-10-28 09:02:05,435 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && tmp == systemActive) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && tmp == systemActive) && \result == 1)) || ((((((((splverifierCounter == 0 && methAndRunningLastTime == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) [2021-10-28 09:02:05,436 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && tmp == systemActive)) || ((((((splverifierCounter == 0 && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) && tmp == systemActive)) || (((((splverifierCounter == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) [2021-10-28 09:02:05,437 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((splverifierCounter == 0 && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || ((((((splverifierCounter == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) [2021-10-28 09:02:05,437 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && tmp == systemActive) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive)) || (((((splverifierCounter == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) [2021-10-28 09:02:05,439 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && tmp == systemActive) && \result == 1) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) [2021-10-28 09:02:05,440 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((splverifierCounter == 0 && \result == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || ((((((splverifierCounter == 0 && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) [2021-10-28 09:02:05,443 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 1) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || (((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) [2021-10-28 09:02:05,444 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) && \result == 1 [2021-10-28 09:02:05,447 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && \result == 0) && methaneLevelCritical == 0) && !(tmp___0 == 0)) && !(\result == 0)) && 1 == systemActive) && tmp == 0) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || (((((((((splverifierCounter == 0 && \result == 0) && !(tmp___0 == 0)) && !(\result == 0)) && 1 == systemActive) && methaneLevelCritical == 1) && tmp == 0) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) [2021-10-28 09:02:05,447 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || ((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 0) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) [2021-10-28 09:02:05,450 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) || (((((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) && tmp == systemActive) && \result == 1) [2021-10-28 09:02:05,450 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && methaneLevelCritical == 1) && \result == 1) && tmp == systemActive) && \result == 1) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) [2021-10-28 09:02:05,522 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/witness.graphml [2021-10-28 09:02:05,522 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-10-28 09:02:05,524 INFO L168 Benchmark]: Toolchain (without parser) took 13471.04 ms. Allocated memory was 98.6 MB in the beginning and 220.2 MB in the end (delta: 121.6 MB). Free memory was 59.7 MB in the beginning and 135.6 MB in the end (delta: -75.9 MB). Peak memory consumption was 43.8 MB. Max. memory is 16.1 GB. [2021-10-28 09:02:05,524 INFO L168 Benchmark]: CDTParser took 0.22 ms. Allocated memory is still 98.6 MB. Free memory is still 76.9 MB. There was no memory consumed. Max. memory is 16.1 GB. [2021-10-28 09:02:05,525 INFO L168 Benchmark]: CACSL2BoogieTranslator took 566.68 ms. Allocated memory is still 98.6 MB. Free memory was 59.6 MB in the beginning and 66.8 MB in the end (delta: -7.3 MB). Peak memory consumption was 8.4 MB. Max. memory is 16.1 GB. [2021-10-28 09:02:05,525 INFO L168 Benchmark]: Boogie Procedure Inliner took 118.05 ms. Allocated memory is still 98.6 MB. Free memory was 66.8 MB in the beginning and 62.5 MB in the end (delta: 4.3 MB). Peak memory consumption was 4.2 MB. Max. memory is 16.1 GB. [2021-10-28 09:02:05,525 INFO L168 Benchmark]: Boogie Preprocessor took 63.43 ms. Allocated memory is still 98.6 MB. Free memory was 62.5 MB in the beginning and 59.8 MB in the end (delta: 2.7 MB). Peak memory consumption was 4.2 MB. Max. memory is 16.1 GB. [2021-10-28 09:02:05,526 INFO L168 Benchmark]: RCFGBuilder took 1096.79 ms. Allocated memory is still 98.6 MB. Free memory was 59.5 MB in the beginning and 51.4 MB in the end (delta: 8.0 MB). Peak memory consumption was 29.1 MB. Max. memory is 16.1 GB. [2021-10-28 09:02:05,526 INFO L168 Benchmark]: TraceAbstraction took 11453.89 ms. Allocated memory was 98.6 MB in the beginning and 220.2 MB in the end (delta: 121.6 MB). Free memory was 51.0 MB in the beginning and 147.2 MB in the end (delta: -96.2 MB). Peak memory consumption was 111.3 MB. Max. memory is 16.1 GB. [2021-10-28 09:02:05,526 INFO L168 Benchmark]: Witness Printer took 156.01 ms. Allocated memory is still 220.2 MB. Free memory was 147.2 MB in the beginning and 135.6 MB in the end (delta: 11.5 MB). Peak memory consumption was 10.5 MB. Max. memory is 16.1 GB. [2021-10-28 09:02:05,528 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22 ms. Allocated memory is still 98.6 MB. Free memory is still 76.9 MB. There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 566.68 ms. Allocated memory is still 98.6 MB. Free memory was 59.6 MB in the beginning and 66.8 MB in the end (delta: -7.3 MB). Peak memory consumption was 8.4 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 118.05 ms. Allocated memory is still 98.6 MB. Free memory was 66.8 MB in the beginning and 62.5 MB in the end (delta: 4.3 MB). Peak memory consumption was 4.2 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 63.43 ms. Allocated memory is still 98.6 MB. Free memory was 62.5 MB in the beginning and 59.8 MB in the end (delta: 2.7 MB). Peak memory consumption was 4.2 MB. Max. memory is 16.1 GB. * RCFGBuilder took 1096.79 ms. Allocated memory is still 98.6 MB. Free memory was 59.5 MB in the beginning and 51.4 MB in the end (delta: 8.0 MB). Peak memory consumption was 29.1 MB. Max. memory is 16.1 GB. * TraceAbstraction took 11453.89 ms. Allocated memory was 98.6 MB in the beginning and 220.2 MB in the end (delta: 121.6 MB). Free memory was 51.0 MB in the beginning and 147.2 MB in the end (delta: -96.2 MB). Peak memory consumption was 111.3 MB. Max. memory is 16.1 GB. * Witness Printer took 156.01 ms. Allocated memory is still 220.2 MB. Free memory was 147.2 MB in the beginning and 135.6 MB in the end (delta: 11.5 MB). Peak memory consumption was 10.5 MB. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 993]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 993]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 993]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 139 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 11.3s, OverallIterations: 15, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 2.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 1688 SDtfs, 2191 SDslu, 2595 SDs, 0 SdLazy, 369 SolverSat, 73 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.9s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 185 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=274occurred in iteration=14, InterpolantAutomatonStates: 80, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 15 MinimizatonAttempts, 1549 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 55 LocationsWithAnnotation, 55 PreInvPairs, 174 NumberOfFragments, 1018 HoareAnnotationTreeSize, 55 FomulaSimplifications, 2516883 FormulaSimplificationTreeSizeReduction, 1.8s HoareSimplificationTime, 55 FomulaSimplificationsInter, 660293 FormulaSimplificationTreeSizeReductionInter, 4.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 738 NumberOfCodeBlocks, 738 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 722 ConstructedInterpolants, 0 QuantifiedInterpolants, 1359 SizeOfPredicates, 0 NumberOfNonLiveVariables, 514 ConjunctsInSsa, 3 ConjunctsInUnsatCore, 16 InterpolantComputations, 14 PerfectInterpolantSequences, 211/237 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 519]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || ((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 0) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && methaneLevelCritical == 1) && \result == 1) && tmp == systemActive) && \result == 1) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) || (((((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) && tmp == systemActive) && \result == 1) - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && \result == 0) && methaneLevelCritical == 0) && !(tmp___0 == 0)) && !(\result == 0)) && 1 == systemActive) && tmp == 0) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || (((((((((splverifierCounter == 0 && \result == 0) && !(tmp___0 == 0)) && !(\result == 0)) && 1 == systemActive) && methaneLevelCritical == 1) && tmp == 0) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 519]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && tmp == systemActive) && \result == 1) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) - InvariantResult [Line: 519]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 519]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1 - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 286]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: (((((((splverifierCounter == 0 && \result == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || ((((((splverifierCounter == 0 && \result == 0) && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 349]: Loop Invariant Derived loop invariant: ((((((splverifierCounter == 0 && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || ((((((splverifierCounter == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && tmp == systemActive) && \result == 1) || (((((((splverifierCounter == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1) && tmp == systemActive)) || ((((((((splverifierCounter == 0 && methAndRunningLastTime == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 349]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 519]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 578]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && tmp == systemActive) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && tmp == systemActive) && \result == 1)) || ((((((((splverifierCounter == 0 && methAndRunningLastTime == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 1) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || (((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && \result == 1) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) && tmp == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && tmp == systemActive) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive)) || (((((splverifierCounter == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 519]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 349]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 588]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && tmp == systemActive)) || ((((((splverifierCounter == 0 && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) && tmp == systemActive)) || (((((splverifierCounter == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == 1) && tmp == systemActive) - InvariantResult [Line: 256]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 1) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && 1 == systemActive) && methaneLevelCritical == 1) && 1 <= waterLevel) && \result == 1) && tmp == systemActive) && \result == 1 RESULT: Ultimate proved your program to be correct! [2021-10-28 09:02:05,602 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_27814086-f43b-4d41-a7d9-f474d4a4064e/bin/uautomizer-UnR33cPsHg/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...