./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version b2eff8ba Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0552f986eafe304f33f56d4376c7c6a56e2d691e1035259c5c13e13b2a7157c1 ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-b2eff8b [2021-10-28 22:47:43,798 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-10-28 22:47:43,802 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-10-28 22:47:43,866 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-10-28 22:47:43,867 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-10-28 22:47:43,871 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-10-28 22:47:43,873 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-10-28 22:47:43,881 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-10-28 22:47:43,883 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-10-28 22:47:43,885 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-10-28 22:47:43,887 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-10-28 22:47:43,888 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-10-28 22:47:43,889 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-10-28 22:47:43,891 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-10-28 22:47:43,893 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-10-28 22:47:43,895 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-10-28 22:47:43,896 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-10-28 22:47:43,898 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-10-28 22:47:43,900 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-10-28 22:47:43,903 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-10-28 22:47:43,906 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-10-28 22:47:43,918 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-10-28 22:47:43,922 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-10-28 22:47:43,924 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-10-28 22:47:43,935 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-10-28 22:47:43,936 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-10-28 22:47:43,937 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-10-28 22:47:43,938 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-10-28 22:47:43,939 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-10-28 22:47:43,940 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-10-28 22:47:43,941 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-10-28 22:47:43,942 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-10-28 22:47:43,943 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-10-28 22:47:43,944 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-10-28 22:47:43,946 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-10-28 22:47:43,946 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-10-28 22:47:43,947 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-10-28 22:47:43,948 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-10-28 22:47:43,948 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-10-28 22:47:43,949 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-10-28 22:47:43,950 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-10-28 22:47:43,951 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-10-28 22:47:43,980 INFO L113 SettingsManager]: Loading preferences was successful [2021-10-28 22:47:43,980 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-10-28 22:47:43,981 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-10-28 22:47:43,981 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-10-28 22:47:43,982 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-10-28 22:47:43,983 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-10-28 22:47:43,983 INFO L138 SettingsManager]: * Use SBE=true [2021-10-28 22:47:43,983 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-10-28 22:47:43,984 INFO L138 SettingsManager]: * sizeof long=4 [2021-10-28 22:47:43,984 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-10-28 22:47:43,984 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-10-28 22:47:43,984 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-10-28 22:47:43,985 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-10-28 22:47:43,985 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-10-28 22:47:43,985 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-10-28 22:47:43,985 INFO L138 SettingsManager]: * sizeof long double=12 [2021-10-28 22:47:43,986 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-10-28 22:47:43,986 INFO L138 SettingsManager]: * Use constant arrays=true [2021-10-28 22:47:43,986 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-10-28 22:47:43,986 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-10-28 22:47:43,987 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-10-28 22:47:43,987 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-10-28 22:47:43,987 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-28 22:47:43,988 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-10-28 22:47:43,988 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-10-28 22:47:43,988 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-10-28 22:47:43,988 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-10-28 22:47:43,989 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-10-28 22:47:43,989 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-10-28 22:47:43,989 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-10-28 22:47:43,989 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-10-28 22:47:43,990 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-10-28 22:47:43,990 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0552f986eafe304f33f56d4376c7c6a56e2d691e1035259c5c13e13b2a7157c1 [2021-10-28 22:47:44,298 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-10-28 22:47:44,324 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-10-28 22:47:44,327 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-10-28 22:47:44,328 INFO L271 PluginConnector]: Initializing CDTParser... [2021-10-28 22:47:44,329 INFO L275 PluginConnector]: CDTParser initialized [2021-10-28 22:47:44,330 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/../../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c [2021-10-28 22:47:44,397 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/data/ac4d79467/575dab9efc4046c1a67cede2935c242d/FLAGe5ac492d1 [2021-10-28 22:47:44,921 INFO L306 CDTParser]: Found 1 translation units. [2021-10-28 22:47:44,922 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c [2021-10-28 22:47:44,936 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/data/ac4d79467/575dab9efc4046c1a67cede2935c242d/FLAGe5ac492d1 [2021-10-28 22:47:45,234 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/data/ac4d79467/575dab9efc4046c1a67cede2935c242d [2021-10-28 22:47:45,237 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-10-28 22:47:45,239 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-10-28 22:47:45,244 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-10-28 22:47:45,244 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-10-28 22:47:45,248 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-10-28 22:47:45,250 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:45,253 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@b0c35ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45, skipping insertion in model container [2021-10-28 22:47:45,253 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:45,262 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-10-28 22:47:45,339 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-10-28 22:47:45,642 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c[15143,15156] [2021-10-28 22:47:45,666 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-28 22:47:45,685 INFO L203 MainTranslator]: Completed pre-run [2021-10-28 22:47:45,801 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c[15143,15156] [2021-10-28 22:47:45,837 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-28 22:47:45,869 INFO L208 MainTranslator]: Completed translation [2021-10-28 22:47:45,870 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45 WrapperNode [2021-10-28 22:47:45,870 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-10-28 22:47:45,872 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-10-28 22:47:45,872 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-10-28 22:47:45,872 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-10-28 22:47:45,881 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:45,921 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:46,004 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-10-28 22:47:46,005 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-10-28 22:47:46,005 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-10-28 22:47:46,005 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-10-28 22:47:46,016 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:46,016 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:46,023 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:46,023 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:46,055 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:46,080 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:46,083 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:46,089 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-10-28 22:47:46,090 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-10-28 22:47:46,090 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-10-28 22:47:46,091 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-10-28 22:47:46,092 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45" (1/1) ... [2021-10-28 22:47:46,121 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-28 22:47:46,139 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 22:47:46,160 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-10-28 22:47:46,190 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-10-28 22:47:46,230 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-10-28 22:47:46,230 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-10-28 22:47:46,230 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-10-28 22:47:46,230 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-10-28 22:47:47,414 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-10-28 22:47:47,414 INFO L299 CfgBuilder]: Removed 164 assume(true) statements. [2021-10-28 22:47:47,417 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 10:47:47 BoogieIcfgContainer [2021-10-28 22:47:47,417 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-10-28 22:47:47,421 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-10-28 22:47:47,421 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-10-28 22:47:47,425 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-10-28 22:47:47,425 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.10 10:47:45" (1/3) ... [2021-10-28 22:47:47,426 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3f92853e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.10 10:47:47, skipping insertion in model container [2021-10-28 22:47:47,427 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.10 10:47:45" (2/3) ... [2021-10-28 22:47:47,427 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3f92853e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.10 10:47:47, skipping insertion in model container [2021-10-28 22:47:47,427 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 10:47:47" (3/3) ... [2021-10-28 22:47:47,429 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product50.cil.c [2021-10-28 22:47:47,441 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-10-28 22:47:47,442 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2021-10-28 22:47:47,510 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-10-28 22:47:47,518 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-10-28 22:47:47,519 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2021-10-28 22:47:47,542 INFO L276 IsEmpty]: Start isEmpty. Operand has 123 states, 119 states have (on average 1.5630252100840336) internal successors, (186), 122 states have internal predecessors, (186), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:47,551 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2021-10-28 22:47:47,551 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:47,551 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:47,552 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:47,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:47,556 INFO L85 PathProgramCache]: Analyzing trace with hash -370159664, now seen corresponding path program 1 times [2021-10-28 22:47:47,564 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:47,564 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1525640659] [2021-10-28 22:47:47,565 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:47,565 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:47,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:47,794 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 22:47:47,794 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:47,795 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1525640659] [2021-10-28 22:47:47,796 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1525640659] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:47,796 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:47,796 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-10-28 22:47:47,807 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1653751813] [2021-10-28 22:47:47,813 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-10-28 22:47:47,814 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:47,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-10-28 22:47:47,830 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-28 22:47:47,834 INFO L87 Difference]: Start difference. First operand has 123 states, 119 states have (on average 1.5630252100840336) internal successors, (186), 122 states have internal predecessors, (186), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:47,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:47,889 INFO L93 Difference]: Finished difference Result 240 states and 365 transitions. [2021-10-28 22:47:47,889 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-10-28 22:47:47,891 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2021-10-28 22:47:47,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:47,905 INFO L225 Difference]: With dead ends: 240 [2021-10-28 22:47:47,906 INFO L226 Difference]: Without dead ends: 119 [2021-10-28 22:47:47,910 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-28 22:47:47,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119 states. [2021-10-28 22:47:47,959 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119 to 119. [2021-10-28 22:47:47,962 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 116 states have (on average 1.5) internal successors, (174), 118 states have internal predecessors, (174), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:47,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 174 transitions. [2021-10-28 22:47:47,969 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 174 transitions. Word has length 18 [2021-10-28 22:47:47,970 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:47,971 INFO L470 AbstractCegarLoop]: Abstraction has 119 states and 174 transitions. [2021-10-28 22:47:47,971 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:47,971 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 174 transitions. [2021-10-28 22:47:47,975 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-10-28 22:47:47,975 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:47,976 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:47,976 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-10-28 22:47:47,976 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:47,979 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:47,980 INFO L85 PathProgramCache]: Analyzing trace with hash -37103251, now seen corresponding path program 1 times [2021-10-28 22:47:47,980 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:47,980 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [653824443] [2021-10-28 22:47:47,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:47,981 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:48,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:48,164 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 22:47:48,164 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:48,165 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [653824443] [2021-10-28 22:47:48,165 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [653824443] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:48,165 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:48,165 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 22:47:48,166 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1523511673] [2021-10-28 22:47:48,170 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 22:47:48,170 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:48,171 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 22:47:48,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 22:47:48,172 INFO L87 Difference]: Start difference. First operand 119 states and 174 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:48,198 INFO L93 Difference]: Finished difference Result 119 states and 174 transitions. [2021-10-28 22:47:48,198 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 22:47:48,199 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-10-28 22:47:48,199 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:48,201 INFO L225 Difference]: With dead ends: 119 [2021-10-28 22:47:48,202 INFO L226 Difference]: Without dead ends: 49 [2021-10-28 22:47:48,204 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 22:47:48,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2021-10-28 22:47:48,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2021-10-28 22:47:48,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49 states, 48 states have (on average 1.4791666666666667) internal successors, (71), 48 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 71 transitions. [2021-10-28 22:47:48,217 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 71 transitions. Word has length 19 [2021-10-28 22:47:48,244 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:48,244 INFO L470 AbstractCegarLoop]: Abstraction has 49 states and 71 transitions. [2021-10-28 22:47:48,244 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,245 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 71 transitions. [2021-10-28 22:47:48,245 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-10-28 22:47:48,246 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:48,246 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:48,246 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-10-28 22:47:48,246 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:48,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:48,247 INFO L85 PathProgramCache]: Analyzing trace with hash 1803952717, now seen corresponding path program 1 times [2021-10-28 22:47:48,247 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:48,247 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [491479991] [2021-10-28 22:47:48,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:48,248 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:48,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:48,335 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 22:47:48,335 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:48,336 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [491479991] [2021-10-28 22:47:48,336 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [491479991] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:48,336 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:48,336 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 22:47:48,336 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [964584315] [2021-10-28 22:47:48,337 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 22:47:48,337 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:48,338 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 22:47:48,338 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 22:47:48,338 INFO L87 Difference]: Start difference. First operand 49 states and 71 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:48,395 INFO L93 Difference]: Finished difference Result 92 states and 136 transitions. [2021-10-28 22:47:48,403 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-28 22:47:48,404 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-10-28 22:47:48,404 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:48,405 INFO L225 Difference]: With dead ends: 92 [2021-10-28 22:47:48,406 INFO L226 Difference]: Without dead ends: 49 [2021-10-28 22:47:48,407 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-28 22:47:48,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2021-10-28 22:47:48,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2021-10-28 22:47:48,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49 states, 48 states have (on average 1.4583333333333333) internal successors, (70), 48 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 70 transitions. [2021-10-28 22:47:48,415 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 70 transitions. Word has length 24 [2021-10-28 22:47:48,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:48,415 INFO L470 AbstractCegarLoop]: Abstraction has 49 states and 70 transitions. [2021-10-28 22:47:48,416 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,416 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 70 transitions. [2021-10-28 22:47:48,417 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-10-28 22:47:48,417 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:48,418 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:48,418 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-10-28 22:47:48,418 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:48,419 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:48,420 INFO L85 PathProgramCache]: Analyzing trace with hash -1055002865, now seen corresponding path program 1 times [2021-10-28 22:47:48,420 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:48,421 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [576013341] [2021-10-28 22:47:48,421 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:48,421 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:48,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:48,536 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 22:47:48,537 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:48,537 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [576013341] [2021-10-28 22:47:48,537 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [576013341] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:48,538 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:48,538 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-10-28 22:47:48,539 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1473311899] [2021-10-28 22:47:48,539 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-28 22:47:48,540 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:48,540 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-28 22:47:48,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 22:47:48,541 INFO L87 Difference]: Start difference. First operand 49 states and 70 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:48,591 INFO L93 Difference]: Finished difference Result 115 states and 167 transitions. [2021-10-28 22:47:48,591 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-28 22:47:48,592 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2021-10-28 22:47:48,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:48,593 INFO L225 Difference]: With dead ends: 115 [2021-10-28 22:47:48,593 INFO L226 Difference]: Without dead ends: 72 [2021-10-28 22:47:48,594 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-28 22:47:48,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2021-10-28 22:47:48,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 70. [2021-10-28 22:47:48,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 69 states have (on average 1.434782608695652) internal successors, (99), 69 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 99 transitions. [2021-10-28 22:47:48,608 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 99 transitions. Word has length 26 [2021-10-28 22:47:48,608 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:48,609 INFO L470 AbstractCegarLoop]: Abstraction has 70 states and 99 transitions. [2021-10-28 22:47:48,609 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,610 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 99 transitions. [2021-10-28 22:47:48,611 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-10-28 22:47:48,612 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:48,613 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:48,613 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-10-28 22:47:48,613 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:48,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:48,616 INFO L85 PathProgramCache]: Analyzing trace with hash -1200859520, now seen corresponding path program 1 times [2021-10-28 22:47:48,617 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:48,617 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1295184505] [2021-10-28 22:47:48,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:48,618 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:48,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:48,702 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 22:47:48,702 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:48,703 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1295184505] [2021-10-28 22:47:48,703 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1295184505] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:48,703 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:48,703 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 22:47:48,704 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [637308906] [2021-10-28 22:47:48,704 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 22:47:48,704 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:48,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 22:47:48,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 22:47:48,706 INFO L87 Difference]: Start difference. First operand 70 states and 99 transitions. Second operand has 5 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:48,773 INFO L93 Difference]: Finished difference Result 187 states and 263 transitions. [2021-10-28 22:47:48,773 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-10-28 22:47:48,773 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-10-28 22:47:48,774 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:48,775 INFO L225 Difference]: With dead ends: 187 [2021-10-28 22:47:48,775 INFO L226 Difference]: Without dead ends: 123 [2021-10-28 22:47:48,776 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-28 22:47:48,777 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2021-10-28 22:47:48,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 76. [2021-10-28 22:47:48,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 75 states have (on average 1.4) internal successors, (105), 75 states have internal predecessors, (105), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 105 transitions. [2021-10-28 22:47:48,787 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 105 transitions. Word has length 32 [2021-10-28 22:47:48,787 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:48,788 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 105 transitions. [2021-10-28 22:47:48,788 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 5 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,788 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 105 transitions. [2021-10-28 22:47:48,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-10-28 22:47:48,789 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:48,790 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:48,790 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-10-28 22:47:48,790 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:48,791 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:48,791 INFO L85 PathProgramCache]: Analyzing trace with hash 1966711683, now seen corresponding path program 1 times [2021-10-28 22:47:48,791 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:48,791 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1479326574] [2021-10-28 22:47:48,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:48,792 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:48,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:48,865 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 22:47:48,866 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:48,866 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1479326574] [2021-10-28 22:47:48,866 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1479326574] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:48,867 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:48,867 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 22:47:48,867 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1298374267] [2021-10-28 22:47:48,868 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 22:47:48,868 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:48,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 22:47:48,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 22:47:48,869 INFO L87 Difference]: Start difference. First operand 76 states and 105 transitions. Second operand has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:48,985 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:48,985 INFO L93 Difference]: Finished difference Result 381 states and 542 transitions. [2021-10-28 22:47:48,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-10-28 22:47:48,986 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-10-28 22:47:48,986 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:48,989 INFO L225 Difference]: With dead ends: 381 [2021-10-28 22:47:48,989 INFO L226 Difference]: Without dead ends: 311 [2021-10-28 22:47:48,990 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-10-28 22:47:48,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 311 states. [2021-10-28 22:47:49,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 311 to 123. [2021-10-28 22:47:49,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 122 states have (on average 1.3688524590163935) internal successors, (167), 122 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 167 transitions. [2021-10-28 22:47:49,012 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 167 transitions. Word has length 32 [2021-10-28 22:47:49,012 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:49,012 INFO L470 AbstractCegarLoop]: Abstraction has 123 states and 167 transitions. [2021-10-28 22:47:49,013 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,013 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 167 transitions. [2021-10-28 22:47:49,018 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-10-28 22:47:49,019 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:49,019 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:49,019 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-10-28 22:47:49,019 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:49,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:49,020 INFO L85 PathProgramCache]: Analyzing trace with hash 895665153, now seen corresponding path program 1 times [2021-10-28 22:47:49,020 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:49,023 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2058842498] [2021-10-28 22:47:49,026 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:49,027 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:49,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:49,092 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 22:47:49,092 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:49,093 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2058842498] [2021-10-28 22:47:49,093 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2058842498] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:49,093 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:49,093 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-28 22:47:49,094 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1574907800] [2021-10-28 22:47:49,094 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-28 22:47:49,094 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:49,095 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-28 22:47:49,095 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-28 22:47:49,095 INFO L87 Difference]: Start difference. First operand 123 states and 167 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:49,227 INFO L93 Difference]: Finished difference Result 254 states and 351 transitions. [2021-10-28 22:47:49,227 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-28 22:47:49,228 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2021-10-28 22:47:49,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:49,229 INFO L225 Difference]: With dead ends: 254 [2021-10-28 22:47:49,229 INFO L226 Difference]: Without dead ends: 184 [2021-10-28 22:47:49,230 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-28 22:47:49,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2021-10-28 22:47:49,247 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 181. [2021-10-28 22:47:49,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 181 states, 180 states have (on average 1.3666666666666667) internal successors, (246), 180 states have internal predecessors, (246), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181 states to 181 states and 246 transitions. [2021-10-28 22:47:49,249 INFO L78 Accepts]: Start accepts. Automaton has 181 states and 246 transitions. Word has length 33 [2021-10-28 22:47:49,249 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:49,249 INFO L470 AbstractCegarLoop]: Abstraction has 181 states and 246 transitions. [2021-10-28 22:47:49,250 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,250 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 246 transitions. [2021-10-28 22:47:49,251 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-10-28 22:47:49,251 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:49,251 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:49,251 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-10-28 22:47:49,252 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:49,252 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:49,252 INFO L85 PathProgramCache]: Analyzing trace with hash -115452097, now seen corresponding path program 1 times [2021-10-28 22:47:49,252 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:49,253 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1532322932] [2021-10-28 22:47:49,253 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:49,253 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:49,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:49,296 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 22:47:49,297 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:49,297 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1532322932] [2021-10-28 22:47:49,297 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1532322932] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:49,297 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:49,298 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 22:47:49,298 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1639267601] [2021-10-28 22:47:49,298 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-28 22:47:49,298 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:49,299 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-28 22:47:49,299 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-28 22:47:49,299 INFO L87 Difference]: Start difference. First operand 181 states and 246 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:49,363 INFO L93 Difference]: Finished difference Result 428 states and 593 transitions. [2021-10-28 22:47:49,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-28 22:47:49,364 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2021-10-28 22:47:49,364 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:49,366 INFO L225 Difference]: With dead ends: 428 [2021-10-28 22:47:49,366 INFO L226 Difference]: Without dead ends: 299 [2021-10-28 22:47:49,367 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-28 22:47:49,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2021-10-28 22:47:49,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 175. [2021-10-28 22:47:49,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 174 states have (on average 1.367816091954023) internal successors, (238), 174 states have internal predecessors, (238), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 238 transitions. [2021-10-28 22:47:49,387 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 238 transitions. Word has length 33 [2021-10-28 22:47:49,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:49,388 INFO L470 AbstractCegarLoop]: Abstraction has 175 states and 238 transitions. [2021-10-28 22:47:49,388 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,388 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 238 transitions. [2021-10-28 22:47:49,389 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-10-28 22:47:49,390 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:49,390 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:49,390 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-10-28 22:47:49,390 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:49,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:49,391 INFO L85 PathProgramCache]: Analyzing trace with hash 1270109434, now seen corresponding path program 1 times [2021-10-28 22:47:49,391 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:49,391 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [409521486] [2021-10-28 22:47:49,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:49,392 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:49,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:49,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 22:47:49,448 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:49,449 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [409521486] [2021-10-28 22:47:49,449 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [409521486] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:49,449 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:49,449 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 22:47:49,450 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2141420111] [2021-10-28 22:47:49,450 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 22:47:49,450 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:49,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 22:47:49,451 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 22:47:49,451 INFO L87 Difference]: Start difference. First operand 175 states and 238 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:49,631 INFO L93 Difference]: Finished difference Result 465 states and 646 transitions. [2021-10-28 22:47:49,632 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-10-28 22:47:49,632 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2021-10-28 22:47:49,633 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:49,634 INFO L225 Difference]: With dead ends: 465 [2021-10-28 22:47:49,635 INFO L226 Difference]: Without dead ends: 296 [2021-10-28 22:47:49,636 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-10-28 22:47:49,636 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2021-10-28 22:47:49,654 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 154. [2021-10-28 22:47:49,655 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 154 states, 153 states have (on average 1.3202614379084967) internal successors, (202), 153 states have internal predecessors, (202), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 202 transitions. [2021-10-28 22:47:49,656 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 202 transitions. Word has length 33 [2021-10-28 22:47:49,656 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:49,657 INFO L470 AbstractCegarLoop]: Abstraction has 154 states and 202 transitions. [2021-10-28 22:47:49,657 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,657 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 202 transitions. [2021-10-28 22:47:49,658 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-10-28 22:47:49,658 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:49,658 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:49,658 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-10-28 22:47:49,659 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:49,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:49,659 INFO L85 PathProgramCache]: Analyzing trace with hash 142713341, now seen corresponding path program 1 times [2021-10-28 22:47:49,660 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:49,660 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [873799575] [2021-10-28 22:47:49,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:49,660 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:49,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:49,715 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 22:47:49,716 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:49,716 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [873799575] [2021-10-28 22:47:49,716 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [873799575] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:49,716 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:49,717 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 22:47:49,717 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [102423795] [2021-10-28 22:47:49,717 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 22:47:49,717 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:49,718 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 22:47:49,718 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 22:47:49,718 INFO L87 Difference]: Start difference. First operand 154 states and 202 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,774 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:49,774 INFO L93 Difference]: Finished difference Result 391 states and 522 transitions. [2021-10-28 22:47:49,775 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-28 22:47:49,775 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2021-10-28 22:47:49,775 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:49,777 INFO L225 Difference]: With dead ends: 391 [2021-10-28 22:47:49,777 INFO L226 Difference]: Without dead ends: 243 [2021-10-28 22:47:49,777 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-28 22:47:49,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2021-10-28 22:47:49,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 142. [2021-10-28 22:47:49,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 141 states have (on average 1.297872340425532) internal successors, (183), 141 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 183 transitions. [2021-10-28 22:47:49,794 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 183 transitions. Word has length 33 [2021-10-28 22:47:49,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:49,794 INFO L470 AbstractCegarLoop]: Abstraction has 142 states and 183 transitions. [2021-10-28 22:47:49,794 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,794 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 183 transitions. [2021-10-28 22:47:49,795 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-10-28 22:47:49,795 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:49,796 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:49,796 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-10-28 22:47:49,796 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:49,797 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:49,797 INFO L85 PathProgramCache]: Analyzing trace with hash 749127781, now seen corresponding path program 1 times [2021-10-28 22:47:49,797 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:49,797 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [736402517] [2021-10-28 22:47:49,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:49,798 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:49,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:49,860 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-10-28 22:47:49,860 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:49,860 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [736402517] [2021-10-28 22:47:49,860 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [736402517] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:49,861 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:49,861 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-10-28 22:47:49,861 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1711281061] [2021-10-28 22:47:49,861 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-10-28 22:47:49,862 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:49,862 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-10-28 22:47:49,862 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-10-28 22:47:49,863 INFO L87 Difference]: Start difference. First operand 142 states and 183 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 6 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:49,942 INFO L93 Difference]: Finished difference Result 285 states and 375 transitions. [2021-10-28 22:47:49,943 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-10-28 22:47:49,943 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 6 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2021-10-28 22:47:49,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:49,944 INFO L225 Difference]: With dead ends: 285 [2021-10-28 22:47:49,945 INFO L226 Difference]: Without dead ends: 175 [2021-10-28 22:47:49,945 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-28 22:47:49,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2021-10-28 22:47:49,959 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 126. [2021-10-28 22:47:49,960 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 126 states, 125 states have (on average 1.304) internal successors, (163), 125 states have internal predecessors, (163), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 126 states to 126 states and 163 transitions. [2021-10-28 22:47:49,961 INFO L78 Accepts]: Start accepts. Automaton has 126 states and 163 transitions. Word has length 52 [2021-10-28 22:47:49,961 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:49,961 INFO L470 AbstractCegarLoop]: Abstraction has 126 states and 163 transitions. [2021-10-28 22:47:49,962 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 6 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:49,962 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 163 transitions. [2021-10-28 22:47:49,962 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-10-28 22:47:49,962 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:49,963 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:49,963 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-10-28 22:47:49,963 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:49,964 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:49,964 INFO L85 PathProgramCache]: Analyzing trace with hash 176703009, now seen corresponding path program 1 times [2021-10-28 22:47:49,964 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:49,964 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1735725183] [2021-10-28 22:47:49,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:49,965 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:49,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:50,018 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-28 22:47:50,018 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:50,018 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1735725183] [2021-10-28 22:47:50,019 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1735725183] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:50,019 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:50,019 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-28 22:47:50,019 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [291235506] [2021-10-28 22:47:50,019 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 22:47:50,020 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:50,020 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 22:47:50,020 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 22:47:50,021 INFO L87 Difference]: Start difference. First operand 126 states and 163 transitions. Second operand has 5 states, 5 states have (on average 10.6) internal successors, (53), 4 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:50,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:50,129 INFO L93 Difference]: Finished difference Result 656 states and 844 transitions. [2021-10-28 22:47:50,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-10-28 22:47:50,129 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.6) internal successors, (53), 4 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2021-10-28 22:47:50,129 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:50,132 INFO L225 Difference]: With dead ends: 656 [2021-10-28 22:47:50,133 INFO L226 Difference]: Without dead ends: 536 [2021-10-28 22:47:50,133 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-10-28 22:47:50,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 536 states. [2021-10-28 22:47:50,166 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 536 to 244. [2021-10-28 22:47:50,167 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 244 states, 243 states have (on average 1.2757201646090535) internal successors, (310), 243 states have internal predecessors, (310), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:50,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 310 transitions. [2021-10-28 22:47:50,168 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 310 transitions. Word has length 53 [2021-10-28 22:47:50,169 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:50,169 INFO L470 AbstractCegarLoop]: Abstraction has 244 states and 310 transitions. [2021-10-28 22:47:50,169 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.6) internal successors, (53), 4 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:50,169 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 310 transitions. [2021-10-28 22:47:50,170 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-10-28 22:47:50,170 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:50,170 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:50,170 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-10-28 22:47:50,171 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:50,171 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:50,171 INFO L85 PathProgramCache]: Analyzing trace with hash 53419547, now seen corresponding path program 1 times [2021-10-28 22:47:50,171 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:50,172 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [684878530] [2021-10-28 22:47:50,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:50,172 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:50,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:50,225 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-10-28 22:47:50,226 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:50,226 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [684878530] [2021-10-28 22:47:50,226 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [684878530] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-28 22:47:50,226 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-28 22:47:50,226 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-28 22:47:50,227 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1815252003] [2021-10-28 22:47:50,227 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-28 22:47:50,227 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:50,228 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-28 22:47:50,228 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-28 22:47:50,228 INFO L87 Difference]: Start difference. First operand 244 states and 310 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 5 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:50,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:50,314 INFO L93 Difference]: Finished difference Result 516 states and 670 transitions. [2021-10-28 22:47:50,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-10-28 22:47:50,314 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 5 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2021-10-28 22:47:50,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:50,317 INFO L225 Difference]: With dead ends: 516 [2021-10-28 22:47:50,317 INFO L226 Difference]: Without dead ends: 330 [2021-10-28 22:47:50,317 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-28 22:47:50,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 330 states. [2021-10-28 22:47:50,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 330 to 250. [2021-10-28 22:47:50,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 250 states, 249 states have (on average 1.2690763052208835) internal successors, (316), 249 states have internal predecessors, (316), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:50,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 316 transitions. [2021-10-28 22:47:50,355 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 316 transitions. Word has length 54 [2021-10-28 22:47:50,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:50,356 INFO L470 AbstractCegarLoop]: Abstraction has 250 states and 316 transitions. [2021-10-28 22:47:50,357 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 5 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:50,357 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 316 transitions. [2021-10-28 22:47:50,358 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-10-28 22:47:50,358 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:50,358 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:50,358 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-10-28 22:47:50,359 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:50,359 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:50,359 INFO L85 PathProgramCache]: Analyzing trace with hash 311584985, now seen corresponding path program 1 times [2021-10-28 22:47:50,359 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:50,359 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [886215582] [2021-10-28 22:47:50,360 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:50,360 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:50,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:50,455 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-10-28 22:47:50,456 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:50,456 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [886215582] [2021-10-28 22:47:50,456 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [886215582] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-28 22:47:50,456 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1837687559] [2021-10-28 22:47:50,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:50,457 INFO L170 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-28 22:47:50,457 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 22:47:50,459 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-10-28 22:47:50,474 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-10-28 22:47:50,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:50,603 INFO L263 TraceCheckSpWp]: Trace formula consists of 440 conjuncts, 5 conjunts are in the unsatisfiable core [2021-10-28 22:47:50,609 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-28 22:47:50,852 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2021-10-28 22:47:50,852 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1837687559] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-28 22:47:50,852 INFO L186 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2021-10-28 22:47:50,853 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5] total 10 [2021-10-28 22:47:50,853 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [369387451] [2021-10-28 22:47:50,854 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-10-28 22:47:50,854 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:50,855 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-10-28 22:47:50,855 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-10-28 22:47:50,855 INFO L87 Difference]: Start difference. First operand 250 states and 316 transitions. Second operand has 10 states, 10 states have (on average 8.7) internal successors, (87), 10 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:51,226 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:51,226 INFO L93 Difference]: Finished difference Result 608 states and 764 transitions. [2021-10-28 22:47:51,227 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-10-28 22:47:51,227 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.7) internal successors, (87), 10 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2021-10-28 22:47:51,227 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:51,229 INFO L225 Difference]: With dead ends: 608 [2021-10-28 22:47:51,230 INFO L226 Difference]: Without dead ends: 364 [2021-10-28 22:47:51,231 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=64, Invalid=146, Unknown=0, NotChecked=0, Total=210 [2021-10-28 22:47:51,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 364 states. [2021-10-28 22:47:51,281 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 364 to 236. [2021-10-28 22:47:51,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 235 states have (on average 1.2297872340425533) internal successors, (289), 235 states have internal predecessors, (289), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:51,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 289 transitions. [2021-10-28 22:47:51,283 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 289 transitions. Word has length 54 [2021-10-28 22:47:51,283 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:51,283 INFO L470 AbstractCegarLoop]: Abstraction has 236 states and 289 transitions. [2021-10-28 22:47:51,284 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.7) internal successors, (87), 10 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:51,284 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 289 transitions. [2021-10-28 22:47:51,285 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-10-28 22:47:51,285 INFO L505 BasicCegarLoop]: Found error trace [2021-10-28 22:47:51,285 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:47:51,324 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-10-28 22:47:51,503 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-10-28 22:47:51,503 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-28 22:47:51,503 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-28 22:47:51,503 INFO L85 PathProgramCache]: Analyzing trace with hash -1497135604, now seen corresponding path program 1 times [2021-10-28 22:47:51,503 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-28 22:47:51,504 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [484483440] [2021-10-28 22:47:51,504 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:51,504 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-28 22:47:51,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:51,587 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-10-28 22:47:51,588 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-28 22:47:51,588 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [484483440] [2021-10-28 22:47:51,588 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [484483440] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-28 22:47:51,588 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [292693976] [2021-10-28 22:47:51,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-28 22:47:51,589 INFO L170 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-28 22:47:51,589 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-28 22:47:51,590 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-10-28 22:47:51,617 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-10-28 22:47:51,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-28 22:47:51,754 INFO L263 TraceCheckSpWp]: Trace formula consists of 447 conjuncts, 7 conjunts are in the unsatisfiable core [2021-10-28 22:47:51,758 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-28 22:47:51,954 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-10-28 22:47:51,954 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [292693976] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-28 22:47:51,954 INFO L186 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2021-10-28 22:47:51,955 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 8 [2021-10-28 22:47:51,958 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1565846235] [2021-10-28 22:47:51,958 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-10-28 22:47:51,959 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-28 22:47:51,959 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-10-28 22:47:51,960 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2021-10-28 22:47:51,960 INFO L87 Difference]: Start difference. First operand 236 states and 289 transitions. Second operand has 9 states, 9 states have (on average 7.222222222222222) internal successors, (65), 8 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:52,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-28 22:47:52,264 INFO L93 Difference]: Finished difference Result 858 states and 1074 transitions. [2021-10-28 22:47:52,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-10-28 22:47:52,265 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 7.222222222222222) internal successors, (65), 8 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2021-10-28 22:47:52,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-28 22:47:52,265 INFO L225 Difference]: With dead ends: 858 [2021-10-28 22:47:52,265 INFO L226 Difference]: Without dead ends: 0 [2021-10-28 22:47:52,268 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 40 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=89, Invalid=183, Unknown=0, NotChecked=0, Total=272 [2021-10-28 22:47:52,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-10-28 22:47:52,268 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-10-28 22:47:52,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:52,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-10-28 22:47:52,269 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 55 [2021-10-28 22:47:52,269 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-28 22:47:52,269 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-28 22:47:52,270 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 7.222222222222222) internal successors, (65), 8 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-28 22:47:52,270 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-10-28 22:47:52,270 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-10-28 22:47:52,273 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 22:47:52,273 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 22:47:52,273 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-10-28 22:47:52,314 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-10-28 22:47:52,495 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2021-10-28 22:47:52,496 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-10-28 22:47:52,500 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:52,502 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:52,503 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:52,503 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:52,504 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,074 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,075 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,077 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,319 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,321 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,396 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,465 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,467 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,467 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,467 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,468 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,469 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,470 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,470 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:53,666 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,044 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,045 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,299 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,299 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,300 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,300 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,301 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,301 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,302 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,329 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,329 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,330 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,330 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,336 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,337 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,338 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,338 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,339 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,339 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,340 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,444 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,444 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,494 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,495 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,575 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:47:54,575 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-28 22:48:00,759 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 704) no Hoare annotation was computed. [2021-10-28 22:48:00,760 INFO L857 garLoopResultBuilder]: For program point L730(lines 730 736) no Hoare annotation was computed. [2021-10-28 22:48:00,760 INFO L853 garLoopResultBuilder]: At program point L730-1(lines 730 736) the Hoare annotation is: (let ((.cse16 (= ~waterLevel~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse15 (<= 2 ~waterLevel~0)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0)) (.cse11 (not (= 0 ~systemActive~0))) (.cse12 (= ~pumpRunning~0 1))) (let ((.cse9 (= ULTIMATE.start_processEnvironment_~tmp~7 0)) (.cse0 (<= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3)) (.cse2 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse3 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1)) (.cse8 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse19 (or (and .cse1 .cse16 .cse10 .cse11 .cse12) (and .cse1 .cse15 .cse10 .cse11 .cse12))) (.cse20 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse13 (= ~pumpRunning~0 0)) (.cse17 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3 0)) (.cse18 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse5 (= ULTIMATE.start_main_~tmp~4 1)) (.cse6 (<= ~waterLevel~0 2)) (.cse7 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse21 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse1 .cse13 .cse14 .cse15 .cse5 .cse6 .cse7 .cse11) (and .cse1 .cse13 .cse14 .cse5 .cse7 .cse16 .cse11) (and .cse2 .cse17 .cse18 .cse14 .cse4 .cse5 .cse6 .cse7 .cse19) (and .cse0 .cse1 .cse13 .cse3 .cse5 .cse6 .cse7 .cse8 .cse11) (and .cse20 .cse1 .cse2 .cse17 .cse18 .cse14 .cse4 (<= ~waterLevel~0 1) .cse5 .cse7 .cse9 .cse21 .cse10 .cse11 .cse12) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse19) (and .cse20 .cse1 .cse13 .cse17 .cse18 .cse14 .cse5 .cse6 .cse7 .cse21 .cse11)))) [2021-10-28 22:48:00,761 INFO L857 garLoopResultBuilder]: For program point L466(lines 466 470) no Hoare annotation was computed. [2021-10-28 22:48:00,761 INFO L857 garLoopResultBuilder]: For program point L466-3(lines 466 470) no Hoare annotation was computed. [2021-10-28 22:48:00,761 INFO L857 garLoopResultBuilder]: For program point L466-6(lines 466 470) no Hoare annotation was computed. [2021-10-28 22:48:00,761 INFO L853 garLoopResultBuilder]: At program point L897(lines 892 900) the Hoare annotation is: (and (= ULTIMATE.start_test_~splverifierCounter~0 0) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3 0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1) (<= 2 ~waterLevel~0) (= ULTIMATE.start_main_~tmp~4 1) (<= ~waterLevel~0 2) (= |ULTIMATE.start_valid_product_#res| 1) (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6 1) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) (= |ULTIMATE.start_isPumpRunning_#res| 1) (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 1)) [2021-10-28 22:48:00,761 INFO L853 garLoopResultBuilder]: At program point L897-1(lines 892 900) the Hoare annotation is: false [2021-10-28 22:48:00,761 INFO L853 garLoopResultBuilder]: At program point L897-2(lines 892 900) the Hoare annotation is: false [2021-10-28 22:48:00,762 INFO L857 garLoopResultBuilder]: For program point L435(lines 435 448) no Hoare annotation was computed. [2021-10-28 22:48:00,762 INFO L853 garLoopResultBuilder]: At program point L435-1(lines 1 982) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse16 (<= 2 ~waterLevel~0)) (.cse17 (<= ~waterLevel~0 2)) (.cse18 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6 1)) (.cse19 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse0 (<= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3)) (.cse3 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse10 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse14 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse11 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3 0)) (.cse12 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse15 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1)) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (= ULTIMATE.start_main_~tmp~4 1)) (.cse6 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse22 (= ULTIMATE.start_processEnvironment_~tmp~7 0)) (.cse13 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)) (.cse20 (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0)) (.cse8 (not (= 0 ~systemActive~0))) (.cse21 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse1 .cse2 .cse9 .cse5 .cse6 (= ~waterLevel~0 1) .cse8) (and .cse10 .cse1 .cse2 .cse11 .cse12 .cse9 .cse4 .cse5 .cse6 .cse13 .cse8) (and .cse0 .cse1 .cse14 .cse3 .cse15 .cse16 .cse5 .cse17 .cse6 .cse7 .cse18 .cse19 .cse20 .cse8 .cse21) (and .cse1 .cse14 .cse11 .cse12 .cse9 .cse15 .cse16 .cse5 .cse17 .cse6 .cse18 .cse19 .cse20 .cse8 .cse21) (and .cse0 .cse1 .cse14 .cse3 .cse15 .cse4 .cse5 .cse6 .cse7 .cse22 .cse20 .cse8 .cse21) (and .cse10 .cse1 .cse14 .cse11 .cse12 .cse9 .cse15 .cse4 .cse5 .cse6 .cse22 .cse13 .cse20 .cse8 .cse21))) [2021-10-28 22:48:00,762 INFO L857 garLoopResultBuilder]: For program point L435-2(lines 435 448) no Hoare annotation was computed. [2021-10-28 22:48:00,762 INFO L853 garLoopResultBuilder]: At program point L435-3(lines 1 982) the Hoare annotation is: false [2021-10-28 22:48:00,762 INFO L857 garLoopResultBuilder]: For program point L435-4(lines 435 448) no Hoare annotation was computed. [2021-10-28 22:48:00,763 INFO L853 garLoopResultBuilder]: At program point L435-5(lines 1 982) the Hoare annotation is: false [2021-10-28 22:48:00,763 INFO L853 garLoopResultBuilder]: At program point L535(lines 530 538) the Hoare annotation is: (let ((.cse2 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse6 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0)) (.cse12 (= ~pumpRunning~0 1)) (.cse0 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse3 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3 0)) (.cse4 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse8 (= ULTIMATE.start_main_~tmp~4 1)) (.cse9 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse11 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (= ULTIMATE.start_processEnvironment_~tmp~7 0) .cse10 .cse11 .cse12) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (<= 2 ~waterLevel~0) .cse8 (<= ~waterLevel~0 2) .cse9 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6 1) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) .cse10 .cse11 .cse12) (and .cse0 .cse1 (= ~pumpRunning~0 0) .cse3 .cse4 .cse5 .cse7 .cse8 .cse9 .cse11))) [2021-10-28 22:48:00,763 INFO L853 garLoopResultBuilder]: At program point L535-1(lines 530 538) the Hoare annotation is: false [2021-10-28 22:48:00,764 INFO L853 garLoopResultBuilder]: At program point L535-2(lines 530 538) the Hoare annotation is: false [2021-10-28 22:48:00,764 INFO L857 garLoopResultBuilder]: For program point L965(lines 965 969) no Hoare annotation was computed. [2021-10-28 22:48:00,764 INFO L857 garLoopResultBuilder]: For program point L965-2(lines 965 969) no Hoare annotation was computed. [2021-10-28 22:48:00,764 INFO L857 garLoopResultBuilder]: For program point L965-3(lines 965 969) no Hoare annotation was computed. [2021-10-28 22:48:00,764 INFO L857 garLoopResultBuilder]: For program point L965-5(lines 965 969) no Hoare annotation was computed. [2021-10-28 22:48:00,764 INFO L857 garLoopResultBuilder]: For program point L965-6(lines 965 969) no Hoare annotation was computed. [2021-10-28 22:48:00,765 INFO L857 garLoopResultBuilder]: For program point L965-8(lines 965 969) no Hoare annotation was computed. [2021-10-28 22:48:00,765 INFO L853 garLoopResultBuilder]: At program point L503(lines 498 506) the Hoare annotation is: (let ((.cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse15 (= ULTIMATE.start_processEnvironment_~tmp~7 0)) (.cse16 (= ~pumpRunning~0 0)) (.cse14 (<= ~waterLevel~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse17 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= ULTIMATE.start_main_~tmp~4 1)) (.cse7 (<= ~waterLevel~0 2)) (.cse8 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse18 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse9 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6 1)) (.cse10 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse11 (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0)) (.cse12 (not (= 0 ~systemActive~0))) (.cse13 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse14 .cse6 .cse8 .cse15 .cse11 .cse12 .cse13) (and .cse0 .cse16 .cse2 .cse3 .cse14 .cse6 .cse8 .cse12) (and .cse0 .cse1 .cse17 .cse4 .cse14 .cse6 .cse8 .cse18 .cse15 .cse11 .cse12 .cse13) (and .cse0 .cse16 .cse17 .cse14 .cse6 .cse8 .cse18 .cse12) (and .cse0 .cse1 .cse17 .cse4 .cse5 .cse6 .cse7 .cse8 .cse18 .cse9 .cse10 .cse11 .cse12 .cse13))) [2021-10-28 22:48:00,765 INFO L853 garLoopResultBuilder]: At program point L503-1(lines 498 506) the Hoare annotation is: false [2021-10-28 22:48:00,765 INFO L853 garLoopResultBuilder]: At program point L503-2(lines 498 506) the Hoare annotation is: false [2021-10-28 22:48:00,765 INFO L853 garLoopResultBuilder]: At program point L768(lines 719 769) the Hoare annotation is: false [2021-10-28 22:48:00,766 INFO L857 garLoopResultBuilder]: For program point L439(lines 439 445) no Hoare annotation was computed. [2021-10-28 22:48:00,766 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 704) no Hoare annotation was computed. [2021-10-28 22:48:00,766 INFO L857 garLoopResultBuilder]: For program point L439-2(lines 439 445) no Hoare annotation was computed. [2021-10-28 22:48:00,767 INFO L857 garLoopResultBuilder]: For program point L439-4(lines 439 445) no Hoare annotation was computed. [2021-10-28 22:48:00,767 INFO L857 garLoopResultBuilder]: For program point L704(line 704) no Hoare annotation was computed. [2021-10-28 22:48:00,768 INFO L857 garLoopResultBuilder]: For program point L704-1(line 704) no Hoare annotation was computed. [2021-10-28 22:48:00,768 INFO L857 garLoopResultBuilder]: For program point L704-2(line 704) no Hoare annotation was computed. [2021-10-28 22:48:00,768 INFO L853 garLoopResultBuilder]: At program point L971(lines 956 974) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1)) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= ULTIMATE.start_main_~tmp~4 1)) (.cse5 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse6 (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0)) (.cse7 (not (= 0 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8))) [2021-10-28 22:48:00,771 INFO L853 garLoopResultBuilder]: At program point L971-1(lines 956 974) the Hoare annotation is: false [2021-10-28 22:48:00,771 INFO L853 garLoopResultBuilder]: At program point L971-2(lines 956 974) the Hoare annotation is: false [2021-10-28 22:48:00,771 INFO L857 garLoopResultBuilder]: For program point L740(lines 740 746) no Hoare annotation was computed. [2021-10-28 22:48:00,772 INFO L853 garLoopResultBuilder]: At program point L740-1(lines 740 746) the Hoare annotation is: (let ((.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse9 (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0)) (.cse10 (not (= 0 ~systemActive~0))) (.cse11 (= ~pumpRunning~0 1))) (let ((.cse6 (or (and .cse7 (= ~waterLevel~0 1) .cse9 .cse10 .cse11) (and .cse7 (<= 2 ~waterLevel~0) .cse9 .cse10 .cse11))) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse13 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse12 (= ~methaneLevelCritical~0 0)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1)) (.cse3 (= ULTIMATE.start_main_~tmp~4 1)) (.cse5 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse8 (= ULTIMATE.start_processEnvironment_~tmp~7 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse12 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse13 .cse1 .cse3 .cse4 .cse5 .cse10) (and .cse7 .cse13 .cse12 .cse3 .cse4 .cse5 .cse10) (and .cse7 .cse0 .cse12 .cse2 (<= ~waterLevel~0 1) .cse3 .cse5 .cse8 .cse9 .cse10 .cse11)))) [2021-10-28 22:48:00,772 INFO L853 garLoopResultBuilder]: At program point L575-2(lines 575 589) the Hoare annotation is: false [2021-10-28 22:48:00,773 INFO L857 garLoopResultBuilder]: For program point L576(line 576) no Hoare annotation was computed. [2021-10-28 22:48:00,773 INFO L857 garLoopResultBuilder]: For program point L543(lines 543 549) no Hoare annotation was computed. [2021-10-28 22:48:00,773 INFO L857 garLoopResultBuilder]: For program point L543-1(lines 543 549) no Hoare annotation was computed. [2021-10-28 22:48:00,774 INFO L857 garLoopResultBuilder]: For program point L543-2(lines 543 549) no Hoare annotation was computed. [2021-10-28 22:48:00,775 INFO L857 garLoopResultBuilder]: For program point L543-3(lines 543 549) no Hoare annotation was computed. [2021-10-28 22:48:00,775 INFO L857 garLoopResultBuilder]: For program point L543-4(lines 543 549) no Hoare annotation was computed. [2021-10-28 22:48:00,775 INFO L857 garLoopResultBuilder]: For program point L543-5(lines 543 549) no Hoare annotation was computed. [2021-10-28 22:48:00,775 INFO L857 garLoopResultBuilder]: For program point L478(lines 478 482) no Hoare annotation was computed. [2021-10-28 22:48:00,775 INFO L857 garLoopResultBuilder]: For program point L579(lines 579 583) no Hoare annotation was computed. [2021-10-28 22:48:00,775 INFO L857 garLoopResultBuilder]: For program point L579-1(lines 786 792) no Hoare annotation was computed. [2021-10-28 22:48:00,776 INFO L857 garLoopResultBuilder]: For program point L844(lines 844 861) no Hoare annotation was computed. [2021-10-28 22:48:00,776 INFO L857 garLoopResultBuilder]: For program point L844-1(lines 844 861) no Hoare annotation was computed. [2021-10-28 22:48:00,777 INFO L857 garLoopResultBuilder]: For program point L844-2(lines 844 861) no Hoare annotation was computed. [2021-10-28 22:48:00,777 INFO L853 garLoopResultBuilder]: At program point L548(lines 539 552) the Hoare annotation is: false [2021-10-28 22:48:00,777 INFO L853 garLoopResultBuilder]: At program point L548-1(lines 539 552) the Hoare annotation is: (let ((.cse7 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0))) (let ((.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse9 (not .cse7)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse4 (= ULTIMATE.start_main_~tmp~4 1)) (.cse6 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse8 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse0 .cse1 .cse2 .cse10 .cse4 .cse6 .cse8) (and .cse0 .cse1 .cse11 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse0 .cse1 .cse11 .cse10 .cse4 .cse6 .cse8)))) [2021-10-28 22:48:00,777 INFO L853 garLoopResultBuilder]: At program point L548-2(lines 539 552) the Hoare annotation is: false [2021-10-28 22:48:00,777 INFO L853 garLoopResultBuilder]: At program point L548-3(lines 539 552) the Hoare annotation is: false [2021-10-28 22:48:00,778 INFO L853 garLoopResultBuilder]: At program point L548-4(lines 539 552) the Hoare annotation is: false [2021-10-28 22:48:00,778 INFO L853 garLoopResultBuilder]: At program point L548-5(lines 539 552) the Hoare annotation is: false [2021-10-28 22:48:00,778 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-10-28 22:48:00,778 INFO L857 garLoopResultBuilder]: For program point L946(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,778 INFO L857 garLoopResultBuilder]: For program point L946-2(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,778 INFO L857 garLoopResultBuilder]: For program point L946-3(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,779 INFO L857 garLoopResultBuilder]: For program point L946-5(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,779 INFO L857 garLoopResultBuilder]: For program point L946-6(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,779 INFO L857 garLoopResultBuilder]: For program point L946-8(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,779 INFO L857 garLoopResultBuilder]: For program point L946-9(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,779 INFO L857 garLoopResultBuilder]: For program point L946-11(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,779 INFO L857 garLoopResultBuilder]: For program point L946-12(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,779 INFO L857 garLoopResultBuilder]: For program point L946-14(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,780 INFO L857 garLoopResultBuilder]: For program point L946-15(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,780 INFO L857 garLoopResultBuilder]: For program point L946-17(lines 946 950) no Hoare annotation was computed. [2021-10-28 22:48:00,780 INFO L857 garLoopResultBuilder]: For program point L848(lines 848 856) no Hoare annotation was computed. [2021-10-28 22:48:00,780 INFO L857 garLoopResultBuilder]: For program point L848-1(lines 848 856) no Hoare annotation was computed. [2021-10-28 22:48:00,780 INFO L857 garLoopResultBuilder]: For program point L848-2(lines 848 856) no Hoare annotation was computed. [2021-10-28 22:48:00,780 INFO L857 garLoopResultBuilder]: For program point L750(lines 750 763) no Hoare annotation was computed. [2021-10-28 22:48:00,781 INFO L857 garLoopResultBuilder]: For program point L651(lines 651 658) no Hoare annotation was computed. [2021-10-28 22:48:00,781 INFO L860 garLoopResultBuilder]: At program point L651-1(lines 651 658) the Hoare annotation is: true [2021-10-28 22:48:00,781 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-10-28 22:48:00,781 INFO L857 garLoopResultBuilder]: For program point L818(lines 818 835) no Hoare annotation was computed. [2021-10-28 22:48:00,781 INFO L857 garLoopResultBuilder]: For program point L818-1(lines 818 835) no Hoare annotation was computed. [2021-10-28 22:48:00,781 INFO L857 garLoopResultBuilder]: For program point L818-2(lines 818 835) no Hoare annotation was computed. [2021-10-28 22:48:00,782 INFO L857 garLoopResultBuilder]: For program point L818-3(lines 818 835) no Hoare annotation was computed. [2021-10-28 22:48:00,782 INFO L857 garLoopResultBuilder]: For program point L818-4(lines 818 835) no Hoare annotation was computed. [2021-10-28 22:48:00,782 INFO L857 garLoopResultBuilder]: For program point L818-5(lines 818 835) no Hoare annotation was computed. [2021-10-28 22:48:00,783 INFO L853 garLoopResultBuilder]: At program point L786(lines 785 804) the Hoare annotation is: (let ((.cse1 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse3 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1)) (.cse4 (<= ~waterLevel~0 1)) (.cse7 (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0)) (.cse9 (= ~pumpRunning~0 1)) (.cse10 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse11 (= ~pumpRunning~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse5 (= ULTIMATE.start_main_~tmp~4 1)) (.cse12 (<= ~waterLevel~0 2)) (.cse6 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse8 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse10 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse11 .cse10 .cse5 .cse12 .cse6 .cse8) (and .cse0 .cse11 .cse2 .cse5 .cse12 .cse6 .cse8))) [2021-10-28 22:48:00,783 INFO L857 garLoopResultBuilder]: For program point L786-1(lines 786 792) no Hoare annotation was computed. [2021-10-28 22:48:00,783 INFO L853 garLoopResultBuilder]: At program point L786-2(lines 785 804) the Hoare annotation is: false [2021-10-28 22:48:00,783 INFO L853 garLoopResultBuilder]: At program point L687(lines 1 982) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-10-28 22:48:00,783 INFO L853 garLoopResultBuilder]: At program point L786-3(lines 785 804) the Hoare annotation is: false [2021-10-28 22:48:00,784 INFO L853 garLoopResultBuilder]: At program point L952(lines 937 955) the Hoare annotation is: false [2021-10-28 22:48:00,784 INFO L853 garLoopResultBuilder]: At program point L952-1(lines 937 955) the Hoare annotation is: (let ((.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0)) (.cse9 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0))) (let ((.cse12 (not .cse9)) (.cse3 (<= 1 ~methaneLevelCritical~0)) (.cse13 (not .cse10)) (.cse15 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 0)) (.cse16 (<= ~waterLevel~0 1)) (.cse17 (= |ULTIMATE.start_isHighWaterLevel_#res| 0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse4 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= ULTIMATE.start_main_~tmp~4 1)) (.cse7 (<= ~waterLevel~0 2)) (.cse8 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse11 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse12 .cse0 .cse1 .cse13 .cse14 .cse15 .cse16 .cse17 .cse6 .cse8 .cse11) (and .cse12 .cse0 .cse1 .cse3 .cse13 .cse15 .cse16 .cse17 .cse6 .cse8 .cse11) (and .cse0 .cse1 .cse2 .cse14 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11)))) [2021-10-28 22:48:00,784 INFO L853 garLoopResultBuilder]: At program point L952-2(lines 937 955) the Hoare annotation is: false [2021-10-28 22:48:00,784 INFO L853 garLoopResultBuilder]: At program point L952-3(lines 937 955) the Hoare annotation is: false [2021-10-28 22:48:00,784 INFO L853 garLoopResultBuilder]: At program point L952-4(lines 937 955) the Hoare annotation is: false [2021-10-28 22:48:00,785 INFO L853 garLoopResultBuilder]: At program point L952-5(lines 937 955) the Hoare annotation is: false [2021-10-28 22:48:00,785 INFO L857 garLoopResultBuilder]: For program point L721(lines 720 767) no Hoare annotation was computed. [2021-10-28 22:48:00,786 INFO L857 garLoopResultBuilder]: For program point L490(lines 490 494) no Hoare annotation was computed. [2021-10-28 22:48:00,786 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-10-28 22:48:00,786 INFO L857 garLoopResultBuilder]: For program point L722(lines 722 726) no Hoare annotation was computed. [2021-10-28 22:48:00,786 INFO L857 garLoopResultBuilder]: For program point L822(lines 822 830) no Hoare annotation was computed. [2021-10-28 22:48:00,786 INFO L857 garLoopResultBuilder]: For program point L822-1(lines 822 830) no Hoare annotation was computed. [2021-10-28 22:48:00,786 INFO L857 garLoopResultBuilder]: For program point L822-2(lines 822 830) no Hoare annotation was computed. [2021-10-28 22:48:00,786 INFO L857 garLoopResultBuilder]: For program point L822-3(lines 822 830) no Hoare annotation was computed. [2021-10-28 22:48:00,787 INFO L857 garLoopResultBuilder]: For program point L822-4(lines 822 830) no Hoare annotation was computed. [2021-10-28 22:48:00,787 INFO L857 garLoopResultBuilder]: For program point L822-5(lines 822 830) no Hoare annotation was computed. [2021-10-28 22:48:00,787 INFO L853 garLoopResultBuilder]: At program point L624(lines 620 626) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ULTIMATE.start_main_~tmp~4 1) (= |ULTIMATE.start_valid_product_#res| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-10-28 22:48:00,787 INFO L853 garLoopResultBuilder]: At program point L558(lines 553 561) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1)) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= ULTIMATE.start_main_~tmp~4 1)) (.cse5 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse6 (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0)) (.cse7 (not (= 0 ~systemActive~0))) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8))) [2021-10-28 22:48:00,787 INFO L853 garLoopResultBuilder]: At program point L558-1(lines 553 561) the Hoare annotation is: false [2021-10-28 22:48:00,788 INFO L853 garLoopResultBuilder]: At program point L558-2(lines 553 561) the Hoare annotation is: false [2021-10-28 22:48:00,788 INFO L857 garLoopResultBuilder]: For program point L758(lines 758 762) no Hoare annotation was computed. [2021-10-28 22:48:00,788 INFO L853 garLoopResultBuilder]: At program point L758-2(lines 786 792) the Hoare annotation is: (let ((.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse9 (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0)) (.cse10 (not (= 0 ~systemActive~0))) (.cse11 (= ~pumpRunning~0 1))) (let ((.cse6 (or (and .cse7 (= ~waterLevel~0 1) .cse9 .cse10 .cse11) (and .cse7 (<= 2 ~waterLevel~0) .cse9 .cse10 .cse11))) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse13 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse0 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse12 (= ~methaneLevelCritical~0 0)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1)) (.cse3 (= ULTIMATE.start_main_~tmp~4 1)) (.cse5 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse8 (= ULTIMATE.start_processEnvironment_~tmp~7 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse12 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse13 .cse1 .cse3 .cse4 .cse5 .cse10) (and .cse7 .cse13 .cse12 .cse3 .cse4 .cse5 .cse10) (and .cse7 .cse0 .cse12 .cse2 (<= ~waterLevel~0 1) .cse3 .cse5 .cse8 .cse9 .cse10 .cse11)))) [2021-10-28 22:48:00,788 INFO L857 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-10-28 22:48:00,788 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 704) no Hoare annotation was computed. [2021-10-28 22:48:00,788 INFO L860 garLoopResultBuilder]: At program point L660(lines 641 663) the Hoare annotation is: true [2021-10-28 22:48:00,789 INFO L857 garLoopResultBuilder]: For program point L429(lines 429 449) no Hoare annotation was computed. [2021-10-28 22:48:00,789 INFO L857 garLoopResultBuilder]: For program point L429-2(lines 429 449) no Hoare annotation was computed. [2021-10-28 22:48:00,789 INFO L857 garLoopResultBuilder]: For program point L429-4(lines 429 449) no Hoare annotation was computed. [2021-10-28 22:48:00,789 INFO L853 garLoopResultBuilder]: At program point L793(lines 793 799) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse6 (<= ~waterLevel~0 2)) (.cse8 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6 1)) (.cse9 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse16 (= ~pumpRunning~0 0)) (.cse13 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~2 1)) (.cse14 (<= ~waterLevel~0 1)) (.cse5 (= ULTIMATE.start_main_~tmp~4 1)) (.cse7 (= |ULTIMATE.start_valid_product_#res| 1)) (.cse15 (= ULTIMATE.start_processEnvironment_~tmp~7 0)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~8 0)) (.cse11 (not (= 0 ~systemActive~0))) (.cse12 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse0 .cse1 .cse13 .cse3 .cse14 .cse5 .cse7 .cse15 .cse10 .cse11 .cse12) (and .cse0 .cse16 .cse2 .cse14 .cse5 .cse7 .cse11) (and .cse0 .cse1 .cse13 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse0 .cse16 .cse13 .cse14 .cse5 .cse7 .cse11) (and .cse0 .cse1 .cse2 .cse3 .cse14 .cse5 .cse7 .cse15 .cse10 .cse11 .cse12))) [2021-10-28 22:48:00,789 INFO L853 garLoopResultBuilder]: At program point L793-1(lines 793 799) the Hoare annotation is: false [2021-10-28 22:48:00,789 INFO L853 garLoopResultBuilder]: At program point L793-2(lines 793 799) the Hoare annotation is: false [2021-10-28 22:48:00,790 INFO L853 garLoopResultBuilder]: At program point L695(lines 690 698) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-10-28 22:48:00,796 INFO L731 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-28 22:48:00,798 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-10-28 22:48:00,872 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.10 10:48:00 BoogieIcfgContainer [2021-10-28 22:48:00,878 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-10-28 22:48:00,879 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-10-28 22:48:00,879 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-10-28 22:48:00,879 INFO L275 PluginConnector]: Witness Printer initialized [2021-10-28 22:48:00,880 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.10 10:47:47" (3/4) ... [2021-10-28 22:48:00,885 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-10-28 22:48:00,911 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 41 nodes and edges [2021-10-28 22:48:00,913 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2021-10-28 22:48:00,914 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2021-10-28 22:48:00,915 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-10-28 22:48:00,916 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-10-28 22:48:00,917 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-28 22:48:00,919 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-28 22:48:00,955 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-10-28 22:48:00,955 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-10-28 22:48:00,955 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((1 <= tmp && splverifierCounter == 0) && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && tmp == 1) && \result == 1) && 1 <= \result) && !(0 == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == 1) && \result == 1) && waterLevel == 1) && !(0 == systemActive))) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp___0 <= 1) && !(0 == systemActive))) || ((((((((((((((1 <= tmp && splverifierCounter == 0) && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && 1 <= \result) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((((((((((splverifierCounter == 0 && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((((((((1 <= tmp && splverifierCounter == 0) && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && 1 <= \result) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp___0 <= 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) [2021-10-28 22:48:00,956 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1 <= tmp && splverifierCounter == 0) && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && 1 <= \result) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || (((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == 1) && \result == 1) && waterLevel == 1) && !(0 == systemActive))) || ((((((((\result == 1 && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)))) || ((((((((1 <= tmp && splverifierCounter == 0) && pumpRunning == 0) && 1 <= methaneLevelCritical) && tmp == 1) && waterLevel <= 2) && \result == 1) && 1 <= \result) && !(0 == systemActive))) || ((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp___0 <= 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((((1 <= tmp && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && 1 <= \result) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)))) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp___0 <= 1) && !(0 == systemActive)) [2021-10-28 22:48:00,957 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((\result == 1 && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1))) || ((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((\result == 1 && methaneLevelCritical == 0) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) [2021-10-28 22:48:00,959 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((\result == 1 && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1))) || ((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((\result == 1 && methaneLevelCritical == 0) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) [2021-10-28 22:48:00,959 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive)) [2021-10-28 22:48:00,959 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive))) || ((((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive))) || ((((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) [2021-10-28 22:48:00,962 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((splverifierCounter == 0 && \result == 1) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || (((((((((((splverifierCounter == 0 && \result == 1) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive))) || (((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && 1 <= \result) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && tmp == 1) && \result == 1) && 1 <= \result) && !(0 == systemActive))) || (((((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && 1 <= \result) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) [2021-10-28 22:48:00,963 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) [2021-10-28 22:48:00,967 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && \result == 0) && !(0 == systemActive)) || (((((((!(\result == 0) && splverifierCounter == 0) && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive))) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && \result == 0) && !(0 == systemActive))) || (((((((!(\result == 0) && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive)) [2021-10-28 22:48:00,969 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((((((((((((splverifierCounter == 0 && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || (((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive)) [2021-10-28 22:48:00,970 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) [2021-10-28 22:48:00,971 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) || ((((((((((!(\result == 0) && splverifierCounter == 0) && pumpRunning == 0) && !(tmp == 0)) && methaneLevelCritical == 0) && tmp___0 == 0) && waterLevel <= 1) && \result == 0) && tmp == 1) && \result == 1) && !(0 == systemActive))) || ((((((((((!(\result == 0) && splverifierCounter == 0) && pumpRunning == 0) && 1 <= methaneLevelCritical) && !(tmp == 0)) && tmp___0 == 0) && waterLevel <= 1) && \result == 0) && tmp == 1) && \result == 1) && !(0 == systemActive))) || (((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) [2021-10-28 22:48:00,971 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((splverifierCounter == 0 && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1 [2021-10-28 22:48:01,049 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/witness.graphml [2021-10-28 22:48:01,049 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-10-28 22:48:01,051 INFO L168 Benchmark]: Toolchain (without parser) took 15810.85 ms. Allocated memory was 88.1 MB in the beginning and 211.8 MB in the end (delta: 123.7 MB). Free memory was 51.0 MB in the beginning and 173.1 MB in the end (delta: -122.2 MB). Peak memory consumption was 1.8 MB. Max. memory is 16.1 GB. [2021-10-28 22:48:01,051 INFO L168 Benchmark]: CDTParser took 0.22 ms. Allocated memory is still 88.1 MB. Free memory is still 68.1 MB. There was no memory consumed. Max. memory is 16.1 GB. [2021-10-28 22:48:01,052 INFO L168 Benchmark]: CACSL2BoogieTranslator took 627.29 ms. Allocated memory was 88.1 MB in the beginning and 111.1 MB in the end (delta: 23.1 MB). Free memory was 50.8 MB in the beginning and 80.5 MB in the end (delta: -29.7 MB). Peak memory consumption was 8.4 MB. Max. memory is 16.1 GB. [2021-10-28 22:48:01,053 INFO L168 Benchmark]: Boogie Procedure Inliner took 132.26 ms. Allocated memory is still 111.1 MB. Free memory was 80.5 MB in the beginning and 76.7 MB in the end (delta: 3.8 MB). Peak memory consumption was 4.2 MB. Max. memory is 16.1 GB. [2021-10-28 22:48:01,053 INFO L168 Benchmark]: Boogie Preprocessor took 84.41 ms. Allocated memory is still 111.1 MB. Free memory was 76.7 MB in the beginning and 74.2 MB in the end (delta: 2.5 MB). Peak memory consumption was 2.1 MB. Max. memory is 16.1 GB. [2021-10-28 22:48:01,054 INFO L168 Benchmark]: RCFGBuilder took 1327.10 ms. Allocated memory is still 111.1 MB. Free memory was 74.2 MB in the beginning and 78.7 MB in the end (delta: -4.5 MB). Peak memory consumption was 41.9 MB. Max. memory is 16.1 GB. [2021-10-28 22:48:01,054 INFO L168 Benchmark]: TraceAbstraction took 13457.13 ms. Allocated memory was 111.1 MB in the beginning and 211.8 MB in the end (delta: 100.7 MB). Free memory was 78.2 MB in the beginning and 183.6 MB in the end (delta: -105.4 MB). Peak memory consumption was 121.5 MB. Max. memory is 16.1 GB. [2021-10-28 22:48:01,054 INFO L168 Benchmark]: Witness Printer took 170.33 ms. Allocated memory is still 211.8 MB. Free memory was 183.6 MB in the beginning and 173.1 MB in the end (delta: 10.5 MB). Peak memory consumption was 10.5 MB. Max. memory is 16.1 GB. [2021-10-28 22:48:01,057 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22 ms. Allocated memory is still 88.1 MB. Free memory is still 68.1 MB. There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 627.29 ms. Allocated memory was 88.1 MB in the beginning and 111.1 MB in the end (delta: 23.1 MB). Free memory was 50.8 MB in the beginning and 80.5 MB in the end (delta: -29.7 MB). Peak memory consumption was 8.4 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 132.26 ms. Allocated memory is still 111.1 MB. Free memory was 80.5 MB in the beginning and 76.7 MB in the end (delta: 3.8 MB). Peak memory consumption was 4.2 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 84.41 ms. Allocated memory is still 111.1 MB. Free memory was 76.7 MB in the beginning and 74.2 MB in the end (delta: 2.5 MB). Peak memory consumption was 2.1 MB. Max. memory is 16.1 GB. * RCFGBuilder took 1327.10 ms. Allocated memory is still 111.1 MB. Free memory was 74.2 MB in the beginning and 78.7 MB in the end (delta: -4.5 MB). Peak memory consumption was 41.9 MB. Max. memory is 16.1 GB. * TraceAbstraction took 13457.13 ms. Allocated memory was 111.1 MB in the beginning and 211.8 MB in the end (delta: 100.7 MB). Free memory was 78.2 MB in the beginning and 183.6 MB in the end (delta: -105.4 MB). Peak memory consumption was 121.5 MB. Max. memory is 16.1 GB. * Witness Printer took 170.33 ms. Allocated memory is still 211.8 MB. Free memory was 183.6 MB in the beginning and 173.1 MB in the end (delta: 10.5 MB). Peak memory consumption was 10.5 MB. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 704]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 704]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 704]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 123 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 13.2s, OverallIterations: 15, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 1515 SDtfs, 2514 SDslu, 2921 SDs, 0 SdLazy, 422 SolverSat, 67 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.7s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 225 GetRequests, 144 SyntacticMatches, 0 SemanticMatches, 81 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=250occurred in iteration=13, InterpolantAutomatonStates: 88, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 15 MinimizatonAttempts, 1156 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 46 PreInvPairs, 311 NumberOfFragments, 2218 HoareAnnotationTreeSize, 46 FomulaSimplifications, 3206522 FormulaSimplificationTreeSizeReduction, 2.1s HoareSimplificationTime, 46 FomulaSimplificationsInter, 909842 FormulaSimplificationTreeSizeReductionInter, 6.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 660 NumberOfCodeBlocks, 660 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 643 ConstructedInterpolants, 0 QuantifiedInterpolants, 1270 SizeOfPredicates, 6 NumberOfNonLiveVariables, 887 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 17 InterpolantComputations, 13 PerfectInterpolantSequences, 86/102 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 651]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 553]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 786]: Loop Invariant Derived loop invariant: ((((((((((\result == 1 && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1))) || ((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((\result == 1 && methaneLevelCritical == 0) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 892]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: ((((((((((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive))) || ((((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive))) || ((((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) - InvariantResult [Line: 892]: Loop Invariant Derived loop invariant: ((((((((((((((splverifierCounter == 0 && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1 - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && \result == 0) && !(0 == systemActive)) || (((((((!(\result == 0) && splverifierCounter == 0) && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive))) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && \result == 0) && !(0 == systemActive))) || (((((((!(\result == 0) && splverifierCounter == 0) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 620]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 730]: Loop Invariant Derived loop invariant: ((((((((((((((((((1 <= tmp && splverifierCounter == 0) && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && 1 <= \result) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || (((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == 1) && \result == 1) && waterLevel == 1) && !(0 == systemActive))) || ((((((((\result == 1 && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)))) || ((((((((1 <= tmp && splverifierCounter == 0) && pumpRunning == 0) && 1 <= methaneLevelCritical) && tmp == 1) && waterLevel <= 2) && \result == 1) && 1 <= \result) && !(0 == systemActive))) || ((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp___0 <= 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((((1 <= tmp && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && 1 <= \result) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)))) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp___0 <= 1) && !(0 == systemActive)) - InvariantResult [Line: 740]: Loop Invariant Derived loop invariant: ((((((((((\result == 1 && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1))) || ((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((\result == 1 && methaneLevelCritical == 0) && tmp___0 == 1) && tmp == 1) && waterLevel <= 2) && \result == 1) && (((((splverifierCounter == 0 && waterLevel == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((splverifierCounter == 0 && 2 <= waterLevel) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: (((((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == 1) && waterLevel <= 2) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: ((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || ((((((((((((((splverifierCounter == 0 && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || (((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive)) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 553]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 892]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 641]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((1 <= tmp && splverifierCounter == 0) && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && tmp == 1) && \result == 1) && 1 <= \result) && !(0 == systemActive)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && tmp == 1) && \result == 1) && waterLevel == 1) && !(0 == systemActive))) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp___0 <= 1) && !(0 == systemActive))) || ((((((((((((((1 <= tmp && splverifierCounter == 0) && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && 1 <= \result) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((((((((((splverifierCounter == 0 && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((((((((1 <= tmp && splverifierCounter == 0) && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && 1 <= \result) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || ((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == 1) && tmp == 0) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp___0 <= 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) - InvariantResult [Line: 553]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) || ((((((((((!(\result == 0) && splverifierCounter == 0) && pumpRunning == 0) && !(tmp == 0)) && methaneLevelCritical == 0) && tmp___0 == 0) && waterLevel <= 1) && \result == 0) && tmp == 1) && \result == 1) && !(0 == systemActive))) || ((((((((((!(\result == 0) && splverifierCounter == 0) && pumpRunning == 0) && 1 <= methaneLevelCritical) && !(tmp == 0)) && tmp___0 == 0) && waterLevel <= 1) && \result == 0) && tmp == 1) && \result == 1) && !(0 == systemActive))) || (((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 1) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: (((((((((((((((((splverifierCounter == 0 && \result == 1) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) || (((((((((((splverifierCounter == 0 && \result == 1) && \result == 0) && methaneLevelCritical == 0) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == 1) && \result == 1) && !(0 == systemActive))) || (((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && waterLevel <= 1) && tmp == 1) && \result == 1) && 1 <= \result) && tmp == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && waterLevel <= 1) && tmp == 1) && \result == 1) && 1 <= \result) && !(0 == systemActive))) || (((((((((((((splverifierCounter == 0 && \result == 1) && 1 <= methaneLevelCritical) && tmp___0 == 1) && 2 <= waterLevel) && tmp == 1) && waterLevel <= 2) && \result == 1) && 1 <= \result) && tmp == 1) && \result == 0) && tmp == 0) && !(0 == systemActive)) && pumpRunning == 1) RESULT: Ultimate proved your program to be correct! [2021-10-28 22:48:01,137 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9428ce09-6012-4561-981c-fc18414dd290/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...