./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version b2eff8ba Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 53b1b58c0a8af862b137647fd316df606e2053e614741221b62b3a107765e608 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.2.1-dev-b2eff8b [2021-10-29 00:01:15,265 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-10-29 00:01:15,268 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-10-29 00:01:15,326 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-10-29 00:01:15,326 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-10-29 00:01:15,332 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-10-29 00:01:15,334 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-10-29 00:01:15,339 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-10-29 00:01:15,342 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-10-29 00:01:15,350 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-10-29 00:01:15,351 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-10-29 00:01:15,353 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-10-29 00:01:15,354 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-10-29 00:01:15,357 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-10-29 00:01:15,360 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-10-29 00:01:15,365 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-10-29 00:01:15,367 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-10-29 00:01:15,369 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-10-29 00:01:15,372 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-10-29 00:01:15,379 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-10-29 00:01:15,382 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-10-29 00:01:15,384 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-10-29 00:01:15,387 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-10-29 00:01:15,388 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-10-29 00:01:15,395 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-10-29 00:01:15,395 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-10-29 00:01:15,396 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-10-29 00:01:15,398 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-10-29 00:01:15,399 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-10-29 00:01:15,401 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-10-29 00:01:15,401 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-10-29 00:01:15,402 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-10-29 00:01:15,404 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-10-29 00:01:15,406 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-10-29 00:01:15,407 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-10-29 00:01:15,408 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-10-29 00:01:15,409 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-10-29 00:01:15,409 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-10-29 00:01:15,409 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-10-29 00:01:15,411 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-10-29 00:01:15,411 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-10-29 00:01:15,412 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-10-29 00:01:15,463 INFO L113 SettingsManager]: Loading preferences was successful [2021-10-29 00:01:15,465 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-10-29 00:01:15,466 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-10-29 00:01:15,466 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-10-29 00:01:15,473 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-10-29 00:01:15,474 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-10-29 00:01:15,474 INFO L138 SettingsManager]: * Use SBE=true [2021-10-29 00:01:15,474 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-10-29 00:01:15,475 INFO L138 SettingsManager]: * sizeof long=4 [2021-10-29 00:01:15,475 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-10-29 00:01:15,476 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-10-29 00:01:15,476 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-10-29 00:01:15,477 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-10-29 00:01:15,477 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-10-29 00:01:15,477 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-10-29 00:01:15,477 INFO L138 SettingsManager]: * sizeof long double=12 [2021-10-29 00:01:15,478 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-10-29 00:01:15,478 INFO L138 SettingsManager]: * Use constant arrays=true [2021-10-29 00:01:15,478 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-10-29 00:01:15,478 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-10-29 00:01:15,479 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-10-29 00:01:15,479 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-10-29 00:01:15,479 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-29 00:01:15,479 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-10-29 00:01:15,480 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-10-29 00:01:15,480 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-10-29 00:01:15,480 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-10-29 00:01:15,480 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-10-29 00:01:15,481 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-10-29 00:01:15,486 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-10-29 00:01:15,486 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-10-29 00:01:15,487 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-10-29 00:01:15,487 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 53b1b58c0a8af862b137647fd316df606e2053e614741221b62b3a107765e608 [2021-10-29 00:01:15,750 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-10-29 00:01:15,784 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-10-29 00:01:15,787 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-10-29 00:01:15,788 INFO L271 PluginConnector]: Initializing CDTParser... [2021-10-29 00:01:15,789 INFO L275 PluginConnector]: CDTParser initialized [2021-10-29 00:01:15,790 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/../../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2021-10-29 00:01:15,866 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/data/ac9604109/50ad3a7e3e214d3aa903333cbd25d2fe/FLAG614c5882b [2021-10-29 00:01:16,388 INFO L306 CDTParser]: Found 1 translation units. [2021-10-29 00:01:16,389 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2021-10-29 00:01:16,415 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/data/ac9604109/50ad3a7e3e214d3aa903333cbd25d2fe/FLAG614c5882b [2021-10-29 00:01:16,709 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/data/ac9604109/50ad3a7e3e214d3aa903333cbd25d2fe [2021-10-29 00:01:16,711 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-10-29 00:01:16,715 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-10-29 00:01:16,719 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-10-29 00:01:16,719 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-10-29 00:01:16,723 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-10-29 00:01:16,724 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.10 12:01:16" (1/1) ... [2021-10-29 00:01:16,726 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@64248e4f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:16, skipping insertion in model container [2021-10-29 00:01:16,726 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.10 12:01:16" (1/1) ... [2021-10-29 00:01:16,732 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-10-29 00:01:16,806 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-10-29 00:01:17,116 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c[7381,7394] [2021-10-29 00:01:17,182 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-29 00:01:17,192 INFO L203 MainTranslator]: Completed pre-run [2021-10-29 00:01:17,227 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c[7381,7394] [2021-10-29 00:01:17,264 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-10-29 00:01:17,283 INFO L208 MainTranslator]: Completed translation [2021-10-29 00:01:17,284 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17 WrapperNode [2021-10-29 00:01:17,284 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-10-29 00:01:17,286 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-10-29 00:01:17,286 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-10-29 00:01:17,286 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-10-29 00:01:17,294 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17" (1/1) ... [2021-10-29 00:01:17,313 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17" (1/1) ... [2021-10-29 00:01:17,386 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-10-29 00:01:17,386 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-10-29 00:01:17,387 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-10-29 00:01:17,387 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-10-29 00:01:17,403 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17" (1/1) ... [2021-10-29 00:01:17,404 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17" (1/1) ... [2021-10-29 00:01:17,419 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17" (1/1) ... [2021-10-29 00:01:17,419 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17" (1/1) ... [2021-10-29 00:01:17,459 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17" (1/1) ... [2021-10-29 00:01:17,471 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17" (1/1) ... [2021-10-29 00:01:17,475 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17" (1/1) ... [2021-10-29 00:01:17,483 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-10-29 00:01:17,484 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-10-29 00:01:17,484 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-10-29 00:01:17,485 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-10-29 00:01:17,486 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17" (1/1) ... [2021-10-29 00:01:17,494 INFO L170 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-10-29 00:01:17,535 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-29 00:01:17,549 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-10-29 00:01:17,570 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-10-29 00:01:17,607 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-10-29 00:01:17,608 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-10-29 00:01:17,608 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-10-29 00:01:17,608 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-10-29 00:01:18,908 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-10-29 00:01:18,909 INFO L299 CfgBuilder]: Removed 354 assume(true) statements. [2021-10-29 00:01:18,912 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.10 12:01:18 BoogieIcfgContainer [2021-10-29 00:01:18,913 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-10-29 00:01:18,915 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-10-29 00:01:18,915 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-10-29 00:01:18,919 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-10-29 00:01:18,919 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.10 12:01:16" (1/3) ... [2021-10-29 00:01:18,920 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@767a94de and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.10 12:01:18, skipping insertion in model container [2021-10-29 00:01:18,920 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.10 12:01:17" (2/3) ... [2021-10-29 00:01:18,921 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@767a94de and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.10 12:01:18, skipping insertion in model container [2021-10-29 00:01:18,921 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.10 12:01:18" (3/3) ... [2021-10-29 00:01:18,924 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product61.cil.c [2021-10-29 00:01:18,930 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-10-29 00:01:18,930 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2021-10-29 00:01:19,001 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-10-29 00:01:19,013 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-10-29 00:01:19,013 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2021-10-29 00:01:19,044 INFO L276 IsEmpty]: Start isEmpty. Operand has 231 states, 227 states have (on average 1.5198237885462555) internal successors, (345), 230 states have internal predecessors, (345), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:19,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2021-10-29 00:01:19,059 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:19,059 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:19,060 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:19,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:19,070 INFO L85 PathProgramCache]: Analyzing trace with hash 1389216571, now seen corresponding path program 1 times [2021-10-29 00:01:19,080 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:19,080 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1611463519] [2021-10-29 00:01:19,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:19,082 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:19,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:19,407 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:19,408 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:19,408 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1611463519] [2021-10-29 00:01:19,409 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1611463519] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:19,409 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:19,409 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-10-29 00:01:19,411 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1249999141] [2021-10-29 00:01:19,418 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-10-29 00:01:19,419 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:19,436 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-10-29 00:01:19,437 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-29 00:01:19,443 INFO L87 Difference]: Start difference. First operand has 231 states, 227 states have (on average 1.5198237885462555) internal successors, (345), 230 states have internal predecessors, (345), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:19,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:19,521 INFO L93 Difference]: Finished difference Result 456 states and 683 transitions. [2021-10-29 00:01:19,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-10-29 00:01:19,523 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2021-10-29 00:01:19,523 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:19,545 INFO L225 Difference]: With dead ends: 456 [2021-10-29 00:01:19,546 INFO L226 Difference]: Without dead ends: 227 [2021-10-29 00:01:19,552 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-10-29 00:01:19,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2021-10-29 00:01:19,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 227. [2021-10-29 00:01:19,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 224 states have (on average 1.4866071428571428) internal successors, (333), 226 states have internal predecessors, (333), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:19,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 333 transitions. [2021-10-29 00:01:19,611 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 333 transitions. Word has length 18 [2021-10-29 00:01:19,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:19,612 INFO L470 AbstractCegarLoop]: Abstraction has 227 states and 333 transitions. [2021-10-29 00:01:19,612 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:19,613 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 333 transitions. [2021-10-29 00:01:19,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2021-10-29 00:01:19,615 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:19,615 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:19,615 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-10-29 00:01:19,616 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:19,616 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:19,617 INFO L85 PathProgramCache]: Analyzing trace with hash 478185818, now seen corresponding path program 1 times [2021-10-29 00:01:19,617 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:19,617 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1832149578] [2021-10-29 00:01:19,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:19,618 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:19,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:19,716 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:19,717 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:19,718 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1832149578] [2021-10-29 00:01:19,719 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1832149578] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:19,719 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:19,719 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-29 00:01:19,726 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [705992588] [2021-10-29 00:01:19,728 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-29 00:01:19,729 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:19,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-29 00:01:19,730 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-29 00:01:19,731 INFO L87 Difference]: Start difference. First operand 227 states and 333 transitions. Second operand has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:19,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:19,761 INFO L93 Difference]: Finished difference Result 227 states and 333 transitions. [2021-10-29 00:01:19,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-29 00:01:19,762 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2021-10-29 00:01:19,762 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:19,766 INFO L225 Difference]: With dead ends: 227 [2021-10-29 00:01:19,767 INFO L226 Difference]: Without dead ends: 85 [2021-10-29 00:01:19,771 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-29 00:01:19,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-10-29 00:01:19,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-10-29 00:01:19,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 84 states have (on average 1.4761904761904763) internal successors, (124), 84 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:19,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 124 transitions. [2021-10-29 00:01:19,783 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 124 transitions. Word has length 19 [2021-10-29 00:01:19,783 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:19,784 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 124 transitions. [2021-10-29 00:01:19,784 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:19,784 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 124 transitions. [2021-10-29 00:01:19,785 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-10-29 00:01:19,785 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:19,786 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:19,786 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-10-29 00:01:19,786 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:19,787 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:19,787 INFO L85 PathProgramCache]: Analyzing trace with hash 1017898692, now seen corresponding path program 1 times [2021-10-29 00:01:19,787 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:19,788 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1131604154] [2021-10-29 00:01:19,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:19,788 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:19,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:19,964 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:19,965 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:19,966 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1131604154] [2021-10-29 00:01:19,970 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1131604154] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:19,971 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:19,971 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-29 00:01:19,971 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1416729616] [2021-10-29 00:01:19,972 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-10-29 00:01:19,974 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:19,978 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-10-29 00:01:19,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-10-29 00:01:19,979 INFO L87 Difference]: Start difference. First operand 85 states and 124 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:20,204 INFO L93 Difference]: Finished difference Result 164 states and 242 transitions. [2021-10-29 00:01:20,205 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-29 00:01:20,205 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2021-10-29 00:01:20,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:20,207 INFO L225 Difference]: With dead ends: 164 [2021-10-29 00:01:20,207 INFO L226 Difference]: Without dead ends: 85 [2021-10-29 00:01:20,209 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-10-29 00:01:20,210 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-10-29 00:01:20,227 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-10-29 00:01:20,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 84 states have (on average 1.4642857142857142) internal successors, (123), 84 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 123 transitions. [2021-10-29 00:01:20,231 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 123 transitions. Word has length 24 [2021-10-29 00:01:20,231 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:20,232 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 123 transitions. [2021-10-29 00:01:20,232 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,232 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 123 transitions. [2021-10-29 00:01:20,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-10-29 00:01:20,236 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:20,237 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:20,237 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-10-29 00:01:20,237 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:20,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:20,239 INFO L85 PathProgramCache]: Analyzing trace with hash 1367117657, now seen corresponding path program 1 times [2021-10-29 00:01:20,239 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:20,240 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1841053557] [2021-10-29 00:01:20,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:20,240 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:20,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:20,305 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:20,306 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:20,306 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1841053557] [2021-10-29 00:01:20,306 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1841053557] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:20,306 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:20,307 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-10-29 00:01:20,307 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1514770492] [2021-10-29 00:01:20,307 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-10-29 00:01:20,307 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:20,308 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-10-29 00:01:20,308 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-29 00:01:20,309 INFO L87 Difference]: Start difference. First operand 85 states and 123 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:20,356 INFO L93 Difference]: Finished difference Result 172 states and 251 transitions. [2021-10-29 00:01:20,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-10-29 00:01:20,357 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2021-10-29 00:01:20,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:20,358 INFO L225 Difference]: With dead ends: 172 [2021-10-29 00:01:20,358 INFO L226 Difference]: Without dead ends: 93 [2021-10-29 00:01:20,360 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-10-29 00:01:20,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2021-10-29 00:01:20,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 91. [2021-10-29 00:01:20,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 90 states have (on average 1.4222222222222223) internal successors, (128), 90 states have internal predecessors, (128), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 128 transitions. [2021-10-29 00:01:20,373 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 128 transitions. Word has length 27 [2021-10-29 00:01:20,374 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:20,374 INFO L470 AbstractCegarLoop]: Abstraction has 91 states and 128 transitions. [2021-10-29 00:01:20,374 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,374 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 128 transitions. [2021-10-29 00:01:20,375 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2021-10-29 00:01:20,375 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:20,375 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:20,376 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-10-29 00:01:20,376 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:20,376 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:20,376 INFO L85 PathProgramCache]: Analyzing trace with hash 166613997, now seen corresponding path program 1 times [2021-10-29 00:01:20,377 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:20,377 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [317077666] [2021-10-29 00:01:20,377 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:20,377 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:20,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:20,482 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:20,482 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:20,482 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [317077666] [2021-10-29 00:01:20,483 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [317077666] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:20,483 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:20,483 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-29 00:01:20,483 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [596777544] [2021-10-29 00:01:20,484 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-29 00:01:20,484 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:20,484 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-29 00:01:20,484 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-29 00:01:20,485 INFO L87 Difference]: Start difference. First operand 91 states and 128 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:20,599 INFO L93 Difference]: Finished difference Result 444 states and 640 transitions. [2021-10-29 00:01:20,599 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-10-29 00:01:20,600 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2021-10-29 00:01:20,600 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:20,603 INFO L225 Difference]: With dead ends: 444 [2021-10-29 00:01:20,603 INFO L226 Difference]: Without dead ends: 359 [2021-10-29 00:01:20,604 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-10-29 00:01:20,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 359 states. [2021-10-29 00:01:20,620 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 359 to 139. [2021-10-29 00:01:20,621 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 138 states have (on average 1.391304347826087) internal successors, (192), 138 states have internal predecessors, (192), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 192 transitions. [2021-10-29 00:01:20,622 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 192 transitions. Word has length 33 [2021-10-29 00:01:20,622 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:20,622 INFO L470 AbstractCegarLoop]: Abstraction has 139 states and 192 transitions. [2021-10-29 00:01:20,623 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,623 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 192 transitions. [2021-10-29 00:01:20,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-10-29 00:01:20,624 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:20,625 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:20,625 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-10-29 00:01:20,625 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:20,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:20,626 INFO L85 PathProgramCache]: Analyzing trace with hash 1323909935, now seen corresponding path program 1 times [2021-10-29 00:01:20,626 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:20,626 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1664972739] [2021-10-29 00:01:20,626 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:20,626 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:20,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:20,682 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:20,683 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:20,683 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1664972739] [2021-10-29 00:01:20,683 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1664972739] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:20,683 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:20,683 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-10-29 00:01:20,684 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [162246301] [2021-10-29 00:01:20,684 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-29 00:01:20,684 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:20,685 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-29 00:01:20,685 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-29 00:01:20,685 INFO L87 Difference]: Start difference. First operand 139 states and 192 transitions. Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:20,815 INFO L93 Difference]: Finished difference Result 294 states and 413 transitions. [2021-10-29 00:01:20,815 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-29 00:01:20,816 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2021-10-29 00:01:20,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:20,818 INFO L225 Difference]: With dead ends: 294 [2021-10-29 00:01:20,818 INFO L226 Difference]: Without dead ends: 209 [2021-10-29 00:01:20,818 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-29 00:01:20,819 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2021-10-29 00:01:20,835 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 206. [2021-10-29 00:01:20,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 206 states, 205 states have (on average 1.3902439024390243) internal successors, (285), 205 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206 states to 206 states and 285 transitions. [2021-10-29 00:01:20,837 INFO L78 Accepts]: Start accepts. Automaton has 206 states and 285 transitions. Word has length 34 [2021-10-29 00:01:20,837 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:20,837 INFO L470 AbstractCegarLoop]: Abstraction has 206 states and 285 transitions. [2021-10-29 00:01:20,838 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,838 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 285 transitions. [2021-10-29 00:01:20,839 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-10-29 00:01:20,839 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:20,839 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:20,839 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-10-29 00:01:20,840 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:20,840 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:20,840 INFO L85 PathProgramCache]: Analyzing trace with hash 312792685, now seen corresponding path program 1 times [2021-10-29 00:01:20,840 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:20,841 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [401998189] [2021-10-29 00:01:20,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:20,841 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:20,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:20,894 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:20,894 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:20,894 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [401998189] [2021-10-29 00:01:20,894 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [401998189] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:20,895 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:20,895 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-29 00:01:20,895 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1752523726] [2021-10-29 00:01:20,895 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-29 00:01:20,896 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:20,896 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-29 00:01:20,896 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-29 00:01:20,897 INFO L87 Difference]: Start difference. First operand 206 states and 285 transitions. Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:20,972 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:20,972 INFO L93 Difference]: Finished difference Result 575 states and 806 transitions. [2021-10-29 00:01:20,973 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-29 00:01:20,973 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2021-10-29 00:01:20,973 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:20,976 INFO L225 Difference]: With dead ends: 575 [2021-10-29 00:01:20,976 INFO L226 Difference]: Without dead ends: 422 [2021-10-29 00:01:20,977 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-29 00:01:20,978 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 422 states. [2021-10-29 00:01:21,019 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 422 to 206. [2021-10-29 00:01:21,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 206 states, 205 states have (on average 1.3756097560975609) internal successors, (282), 205 states have internal predecessors, (282), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:21,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206 states to 206 states and 282 transitions. [2021-10-29 00:01:21,022 INFO L78 Accepts]: Start accepts. Automaton has 206 states and 282 transitions. Word has length 34 [2021-10-29 00:01:21,022 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:21,022 INFO L470 AbstractCegarLoop]: Abstraction has 206 states and 282 transitions. [2021-10-29 00:01:21,023 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 4 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:21,023 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 282 transitions. [2021-10-29 00:01:21,026 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-10-29 00:01:21,027 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:21,027 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:21,027 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-10-29 00:01:21,027 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:21,028 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:21,028 INFO L85 PathProgramCache]: Analyzing trace with hash 570958123, now seen corresponding path program 1 times [2021-10-29 00:01:21,028 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:21,029 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [589122350] [2021-10-29 00:01:21,030 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:21,030 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:21,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:21,126 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:21,126 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:21,126 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [589122350] [2021-10-29 00:01:21,127 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [589122350] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:21,128 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:21,128 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-29 00:01:21,128 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [114469047] [2021-10-29 00:01:21,129 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-29 00:01:21,129 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:21,129 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-29 00:01:21,130 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-29 00:01:21,131 INFO L87 Difference]: Start difference. First operand 206 states and 282 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:21,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:21,242 INFO L93 Difference]: Finished difference Result 618 states and 858 transitions. [2021-10-29 00:01:21,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-29 00:01:21,243 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2021-10-29 00:01:21,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:21,247 INFO L225 Difference]: With dead ends: 618 [2021-10-29 00:01:21,247 INFO L226 Difference]: Without dead ends: 418 [2021-10-29 00:01:21,248 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-29 00:01:21,249 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 418 states. [2021-10-29 00:01:21,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 418 to 218. [2021-10-29 00:01:21,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 217 states have (on average 1.3410138248847927) internal successors, (291), 217 states have internal predecessors, (291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:21,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 291 transitions. [2021-10-29 00:01:21,279 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 291 transitions. Word has length 34 [2021-10-29 00:01:21,279 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:21,279 INFO L470 AbstractCegarLoop]: Abstraction has 218 states and 291 transitions. [2021-10-29 00:01:21,279 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:21,280 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 291 transitions. [2021-10-29 00:01:21,282 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-10-29 00:01:21,282 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:21,283 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:21,283 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-10-29 00:01:21,283 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:21,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:21,284 INFO L85 PathProgramCache]: Analyzing trace with hash -598753245, now seen corresponding path program 1 times [2021-10-29 00:01:21,284 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:21,284 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1602406134] [2021-10-29 00:01:21,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:21,285 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:21,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:21,453 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:21,454 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:21,454 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1602406134] [2021-10-29 00:01:21,454 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1602406134] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:21,454 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:21,455 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-29 00:01:21,455 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [625942201] [2021-10-29 00:01:21,455 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-10-29 00:01:21,456 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:21,456 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-10-29 00:01:21,456 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-10-29 00:01:21,457 INFO L87 Difference]: Start difference. First operand 218 states and 291 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:21,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:21,793 INFO L93 Difference]: Finished difference Result 1297 states and 1697 transitions. [2021-10-29 00:01:21,793 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-10-29 00:01:21,794 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2021-10-29 00:01:21,794 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:21,800 INFO L225 Difference]: With dead ends: 1297 [2021-10-29 00:01:21,800 INFO L226 Difference]: Without dead ends: 1085 [2021-10-29 00:01:21,803 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-10-29 00:01:21,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1085 states. [2021-10-29 00:01:21,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1085 to 416. [2021-10-29 00:01:21,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 416 states, 415 states have (on average 1.3156626506024096) internal successors, (546), 415 states have internal predecessors, (546), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:21,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 416 states to 416 states and 546 transitions. [2021-10-29 00:01:21,887 INFO L78 Accepts]: Start accepts. Automaton has 416 states and 546 transitions. Word has length 37 [2021-10-29 00:01:21,889 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:21,893 INFO L470 AbstractCegarLoop]: Abstraction has 416 states and 546 transitions. [2021-10-29 00:01:21,893 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:21,893 INFO L276 IsEmpty]: Start isEmpty. Operand 416 states and 546 transitions. [2021-10-29 00:01:21,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-10-29 00:01:21,894 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:21,894 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:21,895 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-10-29 00:01:21,895 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:21,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:21,895 INFO L85 PathProgramCache]: Analyzing trace with hash 81305125, now seen corresponding path program 1 times [2021-10-29 00:01:21,896 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:21,897 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2128880301] [2021-10-29 00:01:21,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:21,898 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:21,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:21,983 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:21,983 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:21,983 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2128880301] [2021-10-29 00:01:21,983 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2128880301] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:21,983 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:21,984 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-29 00:01:21,984 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1613647183] [2021-10-29 00:01:21,984 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-29 00:01:21,985 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:21,985 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-29 00:01:21,986 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-29 00:01:21,986 INFO L87 Difference]: Start difference. First operand 416 states and 546 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:22,246 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:22,246 INFO L93 Difference]: Finished difference Result 1036 states and 1397 transitions. [2021-10-29 00:01:22,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-10-29 00:01:22,247 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2021-10-29 00:01:22,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:22,251 INFO L225 Difference]: With dead ends: 1036 [2021-10-29 00:01:22,251 INFO L226 Difference]: Without dead ends: 626 [2021-10-29 00:01:22,252 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-10-29 00:01:22,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626 states. [2021-10-29 00:01:22,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626 to 320. [2021-10-29 00:01:22,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 320 states, 319 states have (on average 1.2884012539184952) internal successors, (411), 319 states have internal predecessors, (411), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:22,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 411 transitions. [2021-10-29 00:01:22,295 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 411 transitions. Word has length 37 [2021-10-29 00:01:22,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:22,295 INFO L470 AbstractCegarLoop]: Abstraction has 320 states and 411 transitions. [2021-10-29 00:01:22,295 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:22,295 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 411 transitions. [2021-10-29 00:01:22,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-10-29 00:01:22,296 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:22,296 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:22,296 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-10-29 00:01:22,297 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:22,297 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:22,297 INFO L85 PathProgramCache]: Analyzing trace with hash 1988742173, now seen corresponding path program 1 times [2021-10-29 00:01:22,297 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:22,298 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2078925468] [2021-10-29 00:01:22,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:22,298 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:22,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:22,353 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:22,353 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:22,354 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2078925468] [2021-10-29 00:01:22,354 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2078925468] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:22,354 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:22,354 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-29 00:01:22,354 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [849468652] [2021-10-29 00:01:22,355 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-29 00:01:22,355 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:22,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-29 00:01:22,356 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-29 00:01:22,356 INFO L87 Difference]: Start difference. First operand 320 states and 411 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:22,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:22,561 INFO L93 Difference]: Finished difference Result 786 states and 1003 transitions. [2021-10-29 00:01:22,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-10-29 00:01:22,561 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2021-10-29 00:01:22,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:22,566 INFO L225 Difference]: With dead ends: 786 [2021-10-29 00:01:22,566 INFO L226 Difference]: Without dead ends: 472 [2021-10-29 00:01:22,567 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-10-29 00:01:22,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 472 states. [2021-10-29 00:01:22,606 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 472 to 300. [2021-10-29 00:01:22,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 299 states have (on average 1.2508361204013378) internal successors, (374), 299 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:22,608 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 374 transitions. [2021-10-29 00:01:22,609 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 374 transitions. Word has length 38 [2021-10-29 00:01:22,609 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:22,609 INFO L470 AbstractCegarLoop]: Abstraction has 300 states and 374 transitions. [2021-10-29 00:01:22,609 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:22,610 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 374 transitions. [2021-10-29 00:01:22,610 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-10-29 00:01:22,611 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:22,611 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:22,611 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-10-29 00:01:22,611 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:22,612 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:22,612 INFO L85 PathProgramCache]: Analyzing trace with hash 756271311, now seen corresponding path program 1 times [2021-10-29 00:01:22,612 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:22,613 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2049060673] [2021-10-29 00:01:22,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:22,613 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:22,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:22,698 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-10-29 00:01:22,699 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:22,699 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2049060673] [2021-10-29 00:01:22,699 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2049060673] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:22,699 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:22,699 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-29 00:01:22,699 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [556660706] [2021-10-29 00:01:22,700 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-29 00:01:22,700 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:22,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-29 00:01:22,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-29 00:01:22,701 INFO L87 Difference]: Start difference. First operand 300 states and 374 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:22,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:22,787 INFO L93 Difference]: Finished difference Result 695 states and 869 transitions. [2021-10-29 00:01:22,787 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-10-29 00:01:22,787 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2021-10-29 00:01:22,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:22,790 INFO L225 Difference]: With dead ends: 695 [2021-10-29 00:01:22,790 INFO L226 Difference]: Without dead ends: 401 [2021-10-29 00:01:22,791 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-29 00:01:22,792 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 401 states. [2021-10-29 00:01:22,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 401 to 300. [2021-10-29 00:01:22,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 299 states have (on average 1.2374581939799332) internal successors, (370), 299 states have internal predecessors, (370), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:22,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 370 transitions. [2021-10-29 00:01:22,831 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 370 transitions. Word has length 54 [2021-10-29 00:01:22,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:22,833 INFO L470 AbstractCegarLoop]: Abstraction has 300 states and 370 transitions. [2021-10-29 00:01:22,834 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 5 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:22,834 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 370 transitions. [2021-10-29 00:01:22,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2021-10-29 00:01:22,835 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:22,835 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:22,835 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-10-29 00:01:22,835 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:22,836 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:22,836 INFO L85 PathProgramCache]: Analyzing trace with hash 683884753, now seen corresponding path program 1 times [2021-10-29 00:01:22,836 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:22,836 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [739417889] [2021-10-29 00:01:22,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:22,836 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:22,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:22,906 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-10-29 00:01:22,907 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:22,907 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [739417889] [2021-10-29 00:01:22,907 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [739417889] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:22,907 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:22,907 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-29 00:01:22,908 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [581245989] [2021-10-29 00:01:22,908 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-10-29 00:01:22,908 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:22,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-10-29 00:01:22,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-10-29 00:01:22,909 INFO L87 Difference]: Start difference. First operand 300 states and 370 transitions. Second operand has 4 states, 4 states have (on average 13.0) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:22,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:22,968 INFO L93 Difference]: Finished difference Result 642 states and 801 transitions. [2021-10-29 00:01:22,969 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-10-29 00:01:22,969 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2021-10-29 00:01:22,969 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:22,971 INFO L225 Difference]: With dead ends: 642 [2021-10-29 00:01:22,971 INFO L226 Difference]: Without dead ends: 348 [2021-10-29 00:01:22,972 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-10-29 00:01:22,973 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2021-10-29 00:01:23,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 258. [2021-10-29 00:01:23,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 257 states have (on average 1.2412451361867705) internal successors, (319), 257 states have internal predecessors, (319), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:23,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 319 transitions. [2021-10-29 00:01:23,007 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 319 transitions. Word has length 54 [2021-10-29 00:01:23,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:23,008 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 319 transitions. [2021-10-29 00:01:23,008 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 4 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:23,008 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 319 transitions. [2021-10-29 00:01:23,009 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-10-29 00:01:23,009 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:23,009 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:23,009 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-10-29 00:01:23,010 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:23,010 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:23,010 INFO L85 PathProgramCache]: Analyzing trace with hash -110145967, now seen corresponding path program 1 times [2021-10-29 00:01:23,010 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:23,010 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1010924457] [2021-10-29 00:01:23,011 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:23,011 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:23,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:23,089 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-10-29 00:01:23,089 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:23,089 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1010924457] [2021-10-29 00:01:23,089 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1010924457] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:23,089 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:23,089 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-10-29 00:01:23,090 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [463229539] [2021-10-29 00:01:23,090 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-29 00:01:23,090 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:23,091 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-29 00:01:23,091 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-29 00:01:23,091 INFO L87 Difference]: Start difference. First operand 258 states and 319 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:23,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:23,224 INFO L93 Difference]: Finished difference Result 666 states and 822 transitions. [2021-10-29 00:01:23,225 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-10-29 00:01:23,225 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2021-10-29 00:01:23,225 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:23,228 INFO L225 Difference]: With dead ends: 666 [2021-10-29 00:01:23,228 INFO L226 Difference]: Without dead ends: 414 [2021-10-29 00:01:23,229 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-10-29 00:01:23,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 414 states. [2021-10-29 00:01:23,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 414 to 258. [2021-10-29 00:01:23,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 257 states have (on average 1.2256809338521402) internal successors, (315), 257 states have internal predecessors, (315), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:23,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 315 transitions. [2021-10-29 00:01:23,266 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 315 transitions. Word has length 55 [2021-10-29 00:01:23,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:23,266 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 315 transitions. [2021-10-29 00:01:23,266 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:23,267 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 315 transitions. [2021-10-29 00:01:23,267 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-10-29 00:01:23,268 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:23,268 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:23,268 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2021-10-29 00:01:23,268 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:23,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:23,269 INFO L85 PathProgramCache]: Analyzing trace with hash -1677058370, now seen corresponding path program 1 times [2021-10-29 00:01:23,269 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:23,269 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2102583406] [2021-10-29 00:01:23,270 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:23,270 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:23,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:23,337 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-10-29 00:01:23,337 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:23,337 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2102583406] [2021-10-29 00:01:23,337 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2102583406] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:23,338 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:23,338 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-29 00:01:23,338 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [271201234] [2021-10-29 00:01:23,339 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-10-29 00:01:23,339 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:23,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-10-29 00:01:23,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-10-29 00:01:23,340 INFO L87 Difference]: Start difference. First operand 258 states and 315 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:23,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:23,558 INFO L93 Difference]: Finished difference Result 833 states and 1030 transitions. [2021-10-29 00:01:23,559 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-10-29 00:01:23,559 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2021-10-29 00:01:23,559 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:23,563 INFO L225 Difference]: With dead ends: 833 [2021-10-29 00:01:23,563 INFO L226 Difference]: Without dead ends: 633 [2021-10-29 00:01:23,566 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=51, Invalid=105, Unknown=0, NotChecked=0, Total=156 [2021-10-29 00:01:23,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 633 states. [2021-10-29 00:01:23,601 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 633 to 258. [2021-10-29 00:01:23,602 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 257 states have (on average 1.2217898832684826) internal successors, (314), 257 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:23,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 314 transitions. [2021-10-29 00:01:23,603 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 314 transitions. Word has length 57 [2021-10-29 00:01:23,603 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:23,603 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 314 transitions. [2021-10-29 00:01:23,604 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:23,604 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 314 transitions. [2021-10-29 00:01:23,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-10-29 00:01:23,605 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:23,605 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:23,605 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2021-10-29 00:01:23,605 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:23,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:23,606 INFO L85 PathProgramCache]: Analyzing trace with hash 902631818, now seen corresponding path program 1 times [2021-10-29 00:01:23,606 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:23,608 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1451367054] [2021-10-29 00:01:23,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:23,609 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:23,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:23,686 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-10-29 00:01:23,686 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:23,686 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1451367054] [2021-10-29 00:01:23,689 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1451367054] provided 1 perfect and 0 imperfect interpolant sequences [2021-10-29 00:01:23,689 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-10-29 00:01:23,689 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-10-29 00:01:23,689 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [136086492] [2021-10-29 00:01:23,690 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-10-29 00:01:23,690 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:23,690 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-10-29 00:01:23,690 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-10-29 00:01:23,691 INFO L87 Difference]: Start difference. First operand 258 states and 314 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:23,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:23,807 INFO L93 Difference]: Finished difference Result 782 states and 970 transitions. [2021-10-29 00:01:23,807 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-10-29 00:01:23,808 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2021-10-29 00:01:23,808 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:23,812 INFO L225 Difference]: With dead ends: 782 [2021-10-29 00:01:23,812 INFO L226 Difference]: Without dead ends: 582 [2021-10-29 00:01:23,812 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-10-29 00:01:23,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 582 states. [2021-10-29 00:01:23,848 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 582 to 264. [2021-10-29 00:01:23,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 263 states have (on average 1.2167300380228137) internal successors, (320), 263 states have internal predecessors, (320), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:23,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 320 transitions. [2021-10-29 00:01:23,850 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 320 transitions. Word has length 63 [2021-10-29 00:01:23,850 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:23,850 INFO L470 AbstractCegarLoop]: Abstraction has 264 states and 320 transitions. [2021-10-29 00:01:23,851 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:23,851 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 320 transitions. [2021-10-29 00:01:23,852 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-10-29 00:01:23,852 INFO L505 BasicCegarLoop]: Found error trace [2021-10-29 00:01:23,852 INFO L513 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:23,852 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2021-10-29 00:01:23,852 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2021-10-29 00:01:23,853 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-10-29 00:01:23,853 INFO L85 PathProgramCache]: Analyzing trace with hash 1160797256, now seen corresponding path program 1 times [2021-10-29 00:01:23,853 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-10-29 00:01:23,853 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1944257213] [2021-10-29 00:01:23,853 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:23,853 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-10-29 00:01:23,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:23,964 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-10-29 00:01:23,964 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-10-29 00:01:23,964 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1944257213] [2021-10-29 00:01:23,964 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1944257213] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-29 00:01:23,964 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1789527083] [2021-10-29 00:01:23,965 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-10-29 00:01:23,965 INFO L170 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-29 00:01:23,965 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/z3 [2021-10-29 00:01:23,968 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-10-29 00:01:23,978 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-10-29 00:01:24,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-10-29 00:01:24,149 INFO L263 TraceCheckSpWp]: Trace formula consists of 478 conjuncts, 7 conjunts are in the unsatisfiable core [2021-10-29 00:01:24,156 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-10-29 00:01:24,523 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2021-10-29 00:01:24,524 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1789527083] provided 0 perfect and 1 imperfect interpolant sequences [2021-10-29 00:01:24,524 INFO L186 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2021-10-29 00:01:24,524 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 6 [2021-10-29 00:01:24,524 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1743002911] [2021-10-29 00:01:24,533 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-10-29 00:01:24,533 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-10-29 00:01:24,534 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-10-29 00:01:24,534 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2021-10-29 00:01:24,535 INFO L87 Difference]: Start difference. First operand 264 states and 320 transitions. Second operand has 7 states, 7 states have (on average 10.0) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:24,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-10-29 00:01:24,786 INFO L93 Difference]: Finished difference Result 923 states and 1140 transitions. [2021-10-29 00:01:24,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-10-29 00:01:24,787 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 63 [2021-10-29 00:01:24,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-10-29 00:01:24,787 INFO L225 Difference]: With dead ends: 923 [2021-10-29 00:01:24,787 INFO L226 Difference]: Without dead ends: 0 [2021-10-29 00:01:24,793 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=59, Invalid=97, Unknown=0, NotChecked=0, Total=156 [2021-10-29 00:01:24,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-10-29 00:01:24,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-10-29 00:01:24,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:24,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-10-29 00:01:24,794 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 63 [2021-10-29 00:01:24,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-10-29 00:01:24,794 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-10-29 00:01:24,794 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.0) internal successors, (70), 6 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-10-29 00:01:24,794 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-10-29 00:01:24,794 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-10-29 00:01:24,796 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-10-29 00:01:24,796 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-10-29 00:01:24,796 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-10-29 00:01:24,824 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-10-29 00:01:24,997 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-10-29 00:01:24,999 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-10-29 00:01:25,003 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,005 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,007 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,008 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,009 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,009 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,011 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,096 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,097 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,097 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,098 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,098 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,099 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,099 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,100 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,101 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,102 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,102 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,197 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,198 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:25,199 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,533 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,534 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,534 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,535 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,535 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,536 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,537 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,538 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,538 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,543 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,803 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,804 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,804 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,805 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,806 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,807 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,807 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,808 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,808 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,809 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,809 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:26,811 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:27,409 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:27,936 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:27,936 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:27,937 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:27,938 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:27,939 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:27,941 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:27,942 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:27,943 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:27,943 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:27,944 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,006 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,007 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,008 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,008 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,009 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,011 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,011 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,011 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,012 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,013 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,310 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,312 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,313 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,566 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,567 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,568 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,609 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,648 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,648 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,649 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,649 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:28,650 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,589 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,590 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,634 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,635 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,636 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,636 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,641 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,642 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,692 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,822 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,823 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,823 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,824 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,824 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,828 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,828 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:29,829 INFO L128 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout 10000 ms and remaining time -1 ms [2021-10-29 00:01:41,530 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 477) no Hoare annotation was computed. [2021-10-29 00:01:41,530 INFO L857 garLoopResultBuilder]: For program point L168(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,530 INFO L857 garLoopResultBuilder]: For program point L168-1(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,530 INFO L857 garLoopResultBuilder]: For program point L168-2(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,530 INFO L857 garLoopResultBuilder]: For program point L168-3(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,530 INFO L857 garLoopResultBuilder]: For program point L168-4(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,531 INFO L857 garLoopResultBuilder]: For program point L168-5(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,531 INFO L857 garLoopResultBuilder]: For program point L168-6(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,531 INFO L857 garLoopResultBuilder]: For program point L168-7(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,531 INFO L857 garLoopResultBuilder]: For program point L168-8(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,531 INFO L857 garLoopResultBuilder]: For program point L168-9(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,531 INFO L857 garLoopResultBuilder]: For program point L168-10(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,531 INFO L857 garLoopResultBuilder]: For program point L168-11(lines 168 185) no Hoare annotation was computed. [2021-10-29 00:01:41,532 INFO L857 garLoopResultBuilder]: For program point L567(lines 567 574) no Hoare annotation was computed. [2021-10-29 00:01:41,532 INFO L860 garLoopResultBuilder]: At program point L567-1(lines 567 574) the Hoare annotation is: true [2021-10-29 00:01:41,532 INFO L857 garLoopResultBuilder]: For program point L172(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,532 INFO L857 garLoopResultBuilder]: For program point L172-1(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,532 INFO L857 garLoopResultBuilder]: For program point L172-2(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,532 INFO L857 garLoopResultBuilder]: For program point L172-3(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,533 INFO L857 garLoopResultBuilder]: For program point L172-4(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,533 INFO L857 garLoopResultBuilder]: For program point L172-5(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,533 INFO L857 garLoopResultBuilder]: For program point L172-6(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,533 INFO L857 garLoopResultBuilder]: For program point L172-7(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,533 INFO L857 garLoopResultBuilder]: For program point L172-8(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,533 INFO L857 garLoopResultBuilder]: For program point L172-9(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,533 INFO L857 garLoopResultBuilder]: For program point L172-10(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,534 INFO L857 garLoopResultBuilder]: For program point L172-11(lines 172 180) no Hoare annotation was computed. [2021-10-29 00:01:41,534 INFO L853 garLoopResultBuilder]: At program point L637(lines 1 1014) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-10-29 00:01:41,534 INFO L853 garLoopResultBuilder]: At program point L110(lines 63 111) the Hoare annotation is: false [2021-10-29 00:01:41,534 INFO L857 garLoopResultBuilder]: For program point L376(lines 376 380) no Hoare annotation was computed. [2021-10-29 00:01:41,534 INFO L857 garLoopResultBuilder]: For program point L376-3(lines 376 380) no Hoare annotation was computed. [2021-10-29 00:01:41,535 INFO L857 garLoopResultBuilder]: For program point L376-6(lines 376 380) no Hoare annotation was computed. [2021-10-29 00:01:41,535 INFO L860 garLoopResultBuilder]: At program point L576(lines 557 579) the Hoare annotation is: true [2021-10-29 00:01:41,535 INFO L853 garLoopResultBuilder]: At program point L445(lines 440 448) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse5 (<= ~waterLevel~0 1)) (.cse1 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse6 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse9 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse10 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0)) (.cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse12 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0) .cse8 .cse9 .cse10 (= ULTIMATE.start_processEnvironment_~tmp~3 0) .cse11 .cse12) (and .cse0 .cse1 (= ~pumpRunning~0 0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse10) (and .cse1 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) .cse2 .cse3 .cse4 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1) (<= 2 ~waterLevel~0) .cse6 .cse7 (<= ~waterLevel~0 2) .cse8 .cse9 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) .cse10 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) .cse11 .cse12))) [2021-10-29 00:01:41,535 INFO L853 garLoopResultBuilder]: At program point L445-1(lines 440 448) the Hoare annotation is: false [2021-10-29 00:01:41,535 INFO L853 garLoopResultBuilder]: At program point L445-2(lines 440 448) the Hoare annotation is: false [2021-10-29 00:01:41,536 INFO L853 garLoopResultBuilder]: At program point L645(lines 640 648) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-10-29 00:01:41,536 INFO L857 garLoopResultBuilder]: For program point L453(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,536 INFO L857 garLoopResultBuilder]: For program point L453-1(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,536 INFO L857 garLoopResultBuilder]: For program point L453-2(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,536 INFO L857 garLoopResultBuilder]: For program point L453-3(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,536 INFO L857 garLoopResultBuilder]: For program point L453-4(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,537 INFO L857 garLoopResultBuilder]: For program point L453-5(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,537 INFO L857 garLoopResultBuilder]: For program point L453-6(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,537 INFO L857 garLoopResultBuilder]: For program point L453-7(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,537 INFO L857 garLoopResultBuilder]: For program point L453-8(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,537 INFO L857 garLoopResultBuilder]: For program point L453-9(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,537 INFO L857 garLoopResultBuilder]: For program point L453-10(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,537 INFO L857 garLoopResultBuilder]: For program point L453-11(lines 453 459) no Hoare annotation was computed. [2021-10-29 00:01:41,537 INFO L857 garLoopResultBuilder]: For program point L388(lines 388 392) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256-2(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256-4(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256-6(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256-8(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256-10(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256-12(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256-14(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256-16(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256-18(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256-20(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,538 INFO L857 garLoopResultBuilder]: For program point L256-22(lines 256 262) no Hoare annotation was computed. [2021-10-29 00:01:41,539 INFO L857 garLoopResultBuilder]: For program point L590(lines 590 610) no Hoare annotation was computed. [2021-10-29 00:01:41,539 INFO L857 garLoopResultBuilder]: For program point L590-2(lines 590 610) no Hoare annotation was computed. [2021-10-29 00:01:41,539 INFO L853 garLoopResultBuilder]: At program point L458(lines 449 462) the Hoare annotation is: false [2021-10-29 00:01:41,539 INFO L857 garLoopResultBuilder]: For program point L590-4(lines 590 610) no Hoare annotation was computed. [2021-10-29 00:01:41,539 INFO L853 garLoopResultBuilder]: At program point L458-1(lines 449 462) the Hoare annotation is: false [2021-10-29 00:01:41,539 INFO L853 garLoopResultBuilder]: At program point L458-2(lines 449 462) the Hoare annotation is: false [2021-10-29 00:01:41,540 INFO L853 garLoopResultBuilder]: At program point L458-3(lines 449 462) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse11 (= ~methaneLevelCritical~0 1)) (.cse7 (<= ~waterLevel~0 2)) (.cse8 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse9 (<= ~waterLevel~0 1)) (.cse10 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1)) (.cse5 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse9 .cse10 .cse5 .cse6 .cse11) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse11 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse9 .cse10 .cse5 .cse6))) [2021-10-29 00:01:41,540 INFO L853 garLoopResultBuilder]: At program point L458-4(lines 449 462) the Hoare annotation is: false [2021-10-29 00:01:41,540 INFO L853 garLoopResultBuilder]: At program point L458-5(lines 449 462) the Hoare annotation is: false [2021-10-29 00:01:41,540 INFO L853 garLoopResultBuilder]: At program point L458-6(lines 449 462) the Hoare annotation is: false [2021-10-29 00:01:41,540 INFO L853 garLoopResultBuilder]: At program point L458-7(lines 449 462) the Hoare annotation is: false [2021-10-29 00:01:41,540 INFO L857 garLoopResultBuilder]: For program point L194(lines 194 211) no Hoare annotation was computed. [2021-10-29 00:01:41,541 INFO L853 garLoopResultBuilder]: At program point L458-8(lines 449 462) the Hoare annotation is: false [2021-10-29 00:01:41,541 INFO L857 garLoopResultBuilder]: For program point L194-1(lines 194 211) no Hoare annotation was computed. [2021-10-29 00:01:41,541 INFO L853 garLoopResultBuilder]: At program point L458-9(lines 449 462) the Hoare annotation is: false [2021-10-29 00:01:41,541 INFO L857 garLoopResultBuilder]: For program point L194-2(lines 194 211) no Hoare annotation was computed. [2021-10-29 00:01:41,541 INFO L853 garLoopResultBuilder]: At program point L458-10(lines 449 462) the Hoare annotation is: false [2021-10-29 00:01:41,541 INFO L857 garLoopResultBuilder]: For program point L194-3(lines 194 211) no Hoare annotation was computed. [2021-10-29 00:01:41,542 INFO L853 garLoopResultBuilder]: At program point L458-11(lines 449 462) the Hoare annotation is: false [2021-10-29 00:01:41,542 INFO L857 garLoopResultBuilder]: For program point L194-4(lines 194 211) no Hoare annotation was computed. [2021-10-29 00:01:41,542 INFO L857 garLoopResultBuilder]: For program point L194-5(lines 194 211) no Hoare annotation was computed. [2021-10-29 00:01:41,542 INFO L857 garLoopResultBuilder]: For program point L65(lines 64 109) no Hoare annotation was computed. [2021-10-29 00:01:41,542 INFO L857 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-10-29 00:01:41,542 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 477) no Hoare annotation was computed. [2021-10-29 00:01:41,542 INFO L857 garLoopResultBuilder]: For program point L198(lines 198 206) no Hoare annotation was computed. [2021-10-29 00:01:41,543 INFO L857 garLoopResultBuilder]: For program point L198-1(lines 198 206) no Hoare annotation was computed. [2021-10-29 00:01:41,543 INFO L857 garLoopResultBuilder]: For program point L198-2(lines 198 206) no Hoare annotation was computed. [2021-10-29 00:01:41,543 INFO L857 garLoopResultBuilder]: For program point L198-3(lines 198 206) no Hoare annotation was computed. [2021-10-29 00:01:41,543 INFO L857 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-10-29 00:01:41,543 INFO L857 garLoopResultBuilder]: For program point L198-4(lines 198 206) no Hoare annotation was computed. [2021-10-29 00:01:41,543 INFO L857 garLoopResultBuilder]: For program point L198-5(lines 198 206) no Hoare annotation was computed. [2021-10-29 00:01:41,544 INFO L857 garLoopResultBuilder]: For program point L596(lines 596 609) no Hoare annotation was computed. [2021-10-29 00:01:41,544 INFO L853 garLoopResultBuilder]: At program point L596-1(lines 1 1014) the Hoare annotation is: (let ((.cse9 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse18 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 1)) (.cse12 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse7 (= ~methaneLevelCritical~0 1)) (.cse16 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse8 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (.cse20 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse21 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse10 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse22 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse23 (<= 2 ~waterLevel~0)) (.cse24 (<= ~waterLevel~0 2)) (.cse13 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse14 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse25 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse15 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0)) (.cse26 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse17 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse19 (= ~pumpRunning~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse5 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse0 .cse2 .cse10 .cse11 .cse3 .cse5 .cse6 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19) (and .cse0 .cse20 .cse21 .cse2 .cse22 .cse23 .cse4 .cse5 .cse6 .cse7 .cse24 .cse13 .cse14 .cse25 .cse26 .cse8 .cse19) (and .cse0 .cse1 .cse20 .cse21 .cse2 .cse22 .cse4 .cse5 .cse6 .cse7 .cse24 .cse25 .cse26 .cse8) (and .cse9 .cse0 .cse1 .cse2 .cse10 .cse11 .cse3 .cse5 .cse6 .cse15 .cse18) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse6 .cse12 .cse7 .cse13 .cse14 .cse16 .cse8 .cse19) (and .cse0 .cse20 .cse21 .cse2 .cse10 .cse11 .cse22 .cse23 .cse5 .cse6 .cse24 .cse13 .cse14 .cse25 .cse15 .cse26 .cse17 .cse19) (and .cse0 .cse1 .cse2 .cse11 .cse5 .cse6 (= ~waterLevel~0 1)))) [2021-10-29 00:01:41,544 INFO L857 garLoopResultBuilder]: For program point L596-2(lines 596 609) no Hoare annotation was computed. [2021-10-29 00:01:41,544 INFO L853 garLoopResultBuilder]: At program point L596-3(lines 1 1014) the Hoare annotation is: false [2021-10-29 00:01:41,544 INFO L857 garLoopResultBuilder]: For program point L596-4(lines 596 609) no Hoare annotation was computed. [2021-10-29 00:01:41,545 INFO L853 garLoopResultBuilder]: At program point L596-5(lines 1 1014) the Hoare annotation is: false [2021-10-29 00:01:41,545 INFO L857 garLoopResultBuilder]: For program point L400(lines 400 404) no Hoare annotation was computed. [2021-10-29 00:01:41,545 INFO L853 garLoopResultBuilder]: At program point L136(lines 135 154) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse8 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse9 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse10 (= ~pumpRunning~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse4 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse5 (= 1 ~systemActive~0)) (.cse11 (= ~methaneLevelCritical~0 1)) (.cse6 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse2 .cse3 .cse7 .cse4 .cse5 .cse8 .cse9 .cse10) (and .cse0 .cse2 .cse7 .cse4 .cse5 .cse11 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse11 .cse6))) [2021-10-29 00:01:41,545 INFO L857 garLoopResultBuilder]: For program point L136-1(lines 136 142) no Hoare annotation was computed. [2021-10-29 00:01:41,545 INFO L853 garLoopResultBuilder]: At program point L136-2(lines 135 154) the Hoare annotation is: false [2021-10-29 00:01:41,545 INFO L853 garLoopResultBuilder]: At program point L136-3(lines 135 154) the Hoare annotation is: false [2021-10-29 00:01:41,546 INFO L857 garLoopResultBuilder]: For program point L600(lines 600 606) no Hoare annotation was computed. [2021-10-29 00:01:41,546 INFO L857 garLoopResultBuilder]: For program point L600-2(lines 600 606) no Hoare annotation was computed. [2021-10-29 00:01:41,546 INFO L853 garLoopResultBuilder]: At program point L468(lines 463 471) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 .cse7 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse8) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse5 .cse6 .cse7 .cse8))) [2021-10-29 00:01:41,546 INFO L857 garLoopResultBuilder]: For program point L600-4(lines 600 606) no Hoare annotation was computed. [2021-10-29 00:01:41,546 INFO L853 garLoopResultBuilder]: At program point L468-1(lines 463 471) the Hoare annotation is: false [2021-10-29 00:01:41,547 INFO L853 garLoopResultBuilder]: At program point L468-2(lines 463 471) the Hoare annotation is: false [2021-10-29 00:01:41,547 INFO L853 garLoopResultBuilder]: At program point L468-3(lines 463 471) the Hoare annotation is: false [2021-10-29 00:01:41,547 INFO L853 garLoopResultBuilder]: At program point L468-4(lines 463 471) the Hoare annotation is: false [2021-10-29 00:01:41,547 INFO L853 garLoopResultBuilder]: At program point L468-5(lines 463 471) the Hoare annotation is: false [2021-10-29 00:01:41,547 INFO L857 garLoopResultBuilder]: For program point L74(lines 74 80) no Hoare annotation was computed. [2021-10-29 00:01:41,548 INFO L853 garLoopResultBuilder]: At program point L74-1(lines 74 80) the Hoare annotation is: (let ((.cse19 (<= 2 ~waterLevel~0)) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse8 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse10 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse11 (= 1 ~systemActive~0)) (.cse13 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse14 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse23 (= ~waterLevel~0 1)) (.cse17 (= ~pumpRunning~0 1))) (let ((.cse5 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse3 (or (and .cse7 .cse8 .cse19 .cse10 .cse11 .cse13 .cse14 .cse17) (and .cse7 .cse8 .cse10 .cse11 .cse13 .cse14 .cse23 .cse17))) (.cse6 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse0 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse4 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0)) (.cse16 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)) (.cse9 (<= ~waterLevel~0 1)) (.cse12 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse15 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse20 (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 1)) (.cse21 (= ~methaneLevelCritical~0 1)) (.cse2 (<= ~waterLevel~0 2)) (.cse22 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (.cse18 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse0 .cse1 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse4 .cse15 .cse5 .cse16 .cse17) (and .cse7 .cse18 .cse8 .cse1 .cse19 .cse10 .cse11 .cse2) (and .cse20 .cse21 .cse2 .cse3 .cse22) (and .cse6 .cse7 .cse18 .cse8 .cse0 .cse1 .cse9 .cse10 .cse11 .cse4 .cse16) (and .cse7 .cse8 .cse9 .cse20 .cse10 .cse11 .cse12 .cse21 .cse13 .cse14 .cse15 .cse22 .cse17) (and .cse7 .cse18 .cse8 .cse20 .cse10 .cse11 .cse21 .cse2 .cse22) (and .cse7 .cse18 .cse8 .cse1 .cse10 .cse11 .cse23)))) [2021-10-29 00:01:41,548 INFO L857 garLoopResultBuilder]: For program point L339(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,548 INFO L857 garLoopResultBuilder]: For program point L339-2(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,548 INFO L857 garLoopResultBuilder]: For program point L339-3(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,548 INFO L857 garLoopResultBuilder]: For program point L339-5(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,548 INFO L857 garLoopResultBuilder]: For program point L339-6(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,548 INFO L857 garLoopResultBuilder]: For program point L339-8(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,549 INFO L857 garLoopResultBuilder]: For program point L339-9(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,549 INFO L857 garLoopResultBuilder]: For program point L339-11(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,549 INFO L857 garLoopResultBuilder]: For program point L339-12(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,549 INFO L857 garLoopResultBuilder]: For program point L339-14(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,549 INFO L857 garLoopResultBuilder]: For program point L339-15(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,549 INFO L857 garLoopResultBuilder]: For program point L339-17(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,550 INFO L857 garLoopResultBuilder]: For program point L339-18(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,550 INFO L857 garLoopResultBuilder]: For program point L339-20(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,550 INFO L857 garLoopResultBuilder]: For program point L339-21(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,550 INFO L857 garLoopResultBuilder]: For program point L339-23(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,550 INFO L857 garLoopResultBuilder]: For program point L339-24(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,550 INFO L857 garLoopResultBuilder]: For program point L339-26(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,551 INFO L857 garLoopResultBuilder]: For program point L339-27(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,551 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 477) no Hoare annotation was computed. [2021-10-29 00:01:41,551 INFO L857 garLoopResultBuilder]: For program point L339-29(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,551 INFO L857 garLoopResultBuilder]: For program point L339-30(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,551 INFO L857 garLoopResultBuilder]: For program point L339-32(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,551 INFO L857 garLoopResultBuilder]: For program point L339-33(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,552 INFO L857 garLoopResultBuilder]: For program point L339-35(lines 339 343) no Hoare annotation was computed. [2021-10-29 00:01:41,552 INFO L853 garLoopResultBuilder]: At program point L143(lines 143 149) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse19 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse10 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse12 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse13 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse20 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse21 (= ~methaneLevelCritical~0 0)) (.cse14 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse15 (<= 2 ~waterLevel~0)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse16 (<= ~waterLevel~0 2)) (.cse7 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse8 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse17 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse18 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse11 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse12 .cse13 .cse1 .cse14 .cse15 .cse3 .cse4 .cse6 .cse16 .cse7 .cse8 .cse17 .cse18 .cse10 .cse11) (and .cse0 .cse19 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse0 .cse1 .cse20 .cse21 .cse2 .cse3 .cse4 .cse5 .cse7 .cse8 .cse9 (= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse11) (and .cse0 .cse19 .cse1 .cse21 .cse2 .cse3 .cse4) (and .cse0 .cse19 .cse12 .cse13 .cse1 .cse14 .cse3 .cse4 .cse6 .cse16 .cse17 .cse18 .cse10) (and .cse0 .cse12 .cse13 .cse1 .cse20 .cse21 .cse14 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse15 .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse16 .cse7 .cse8 .cse17 .cse18 .cse11))) [2021-10-29 00:01:41,552 INFO L853 garLoopResultBuilder]: At program point L143-1(lines 143 149) the Hoare annotation is: false [2021-10-29 00:01:41,552 INFO L853 garLoopResultBuilder]: At program point L143-2(lines 143 149) the Hoare annotation is: false [2021-10-29 00:01:41,553 INFO L853 garLoopResultBuilder]: At program point L541(lines 537 543) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ~methaneLevelCritical~0 0) (= ULTIMATE.start_main_~tmp~7 ~systemActive~0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-10-29 00:01:41,553 INFO L857 garLoopResultBuilder]: For program point L477(line 477) no Hoare annotation was computed. [2021-10-29 00:01:41,553 INFO L857 garLoopResultBuilder]: For program point L477-1(line 477) no Hoare annotation was computed. [2021-10-29 00:01:41,553 INFO L857 garLoopResultBuilder]: For program point L477-2(line 477) no Hoare annotation was computed. [2021-10-29 00:01:41,553 INFO L853 garLoopResultBuilder]: At program point L345(lines 330 348) the Hoare annotation is: false [2021-10-29 00:01:41,553 INFO L853 garLoopResultBuilder]: At program point L345-1(lines 330 348) the Hoare annotation is: false [2021-10-29 00:01:41,554 INFO L853 garLoopResultBuilder]: At program point L345-2(lines 330 348) the Hoare annotation is: false [2021-10-29 00:01:41,554 INFO L853 garLoopResultBuilder]: At program point L345-3(lines 330 348) the Hoare annotation is: (let ((.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse6 (<= 2 ~waterLevel~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse11 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse12 (= ~methaneLevelCritical~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse13 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse14 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 1)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse15 (<= ~waterLevel~0 1)) (.cse16 (= |ULTIMATE.start_isHighWaterLevel_#res| 0)) (.cse17 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 1)) (.cse7 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse7 .cse8 .cse12 .cse9 .cse10 .cse11) (and .cse0 .cse13 .cse1 .cse4 .cse14 .cse15 .cse16 .cse17 .cse7 .cse8 .cse12) (and .cse0 .cse13 .cse1 .cse4 .cse14 .cse5 .cse15 .cse16 .cse17 .cse7 .cse8))) [2021-10-29 00:01:41,554 INFO L853 garLoopResultBuilder]: At program point L345-4(lines 330 348) the Hoare annotation is: false [2021-10-29 00:01:41,554 INFO L853 garLoopResultBuilder]: At program point L345-5(lines 330 348) the Hoare annotation is: false [2021-10-29 00:01:41,554 INFO L853 garLoopResultBuilder]: At program point L345-6(lines 330 348) the Hoare annotation is: false [2021-10-29 00:01:41,554 INFO L853 garLoopResultBuilder]: At program point L345-7(lines 330 348) the Hoare annotation is: false [2021-10-29 00:01:41,555 INFO L853 garLoopResultBuilder]: At program point L345-8(lines 330 348) the Hoare annotation is: false [2021-10-29 00:01:41,555 INFO L853 garLoopResultBuilder]: At program point L345-9(lines 330 348) the Hoare annotation is: false [2021-10-29 00:01:41,555 INFO L853 garLoopResultBuilder]: At program point L345-10(lines 330 348) the Hoare annotation is: false [2021-10-29 00:01:41,555 INFO L853 garLoopResultBuilder]: At program point L345-11(lines 330 348) the Hoare annotation is: false [2021-10-29 00:01:41,555 INFO L853 garLoopResultBuilder]: At program point L413(lines 408 416) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse7))) [2021-10-29 00:01:41,556 INFO L853 garLoopResultBuilder]: At program point L413-1(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,556 INFO L853 garLoopResultBuilder]: At program point L413-2(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,556 INFO L853 garLoopResultBuilder]: At program point L413-3(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,556 INFO L853 garLoopResultBuilder]: At program point L281(lines 274 284) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse7) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse5 .cse6 .cse7))) [2021-10-29 00:01:41,556 INFO L853 garLoopResultBuilder]: At program point L413-4(lines 408 416) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse11 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (= ~methaneLevelCritical~0 1) .cse9 .cse10 .cse11 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2021-10-29 00:01:41,557 INFO L853 garLoopResultBuilder]: At program point L281-1(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,557 INFO L853 garLoopResultBuilder]: At program point L413-5(lines 408 416) the Hoare annotation is: (let ((.cse8 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse11 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse20 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse21 (= ~methaneLevelCritical~0 0)) (.cse16 (<= 2 ~waterLevel~0)) (.cse9 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse10 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse22 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse12 (= ~pumpRunning~0 1)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse13 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse14 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse15 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse4 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse5 (= 1 ~systemActive~0)) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse17 (<= ~waterLevel~0 2)) (.cse18 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse19 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0)) (.cse7 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse8 .cse6 .cse9 .cse10 .cse11 .cse7 .cse12) (and .cse0 .cse13 .cse14 .cse2 .cse15 .cse16 .cse4 .cse5 .cse6 .cse17 .cse9 .cse10 .cse18 .cse19 .cse7 .cse12) (and .cse0 .cse2 .cse20 .cse21 .cse3 .cse4 .cse5 .cse8 .cse9 .cse10 .cse11 .cse22 .cse12) (and .cse0 .cse1 .cse2 .cse20 .cse21 .cse3 .cse4 .cse5) (and .cse0 .cse13 .cse14 .cse2 .cse20 .cse21 .cse15 .cse16 .cse4 .cse5 .cse17 .cse9 .cse10 .cse18 .cse19 .cse22 .cse12) (and .cse0 .cse1 .cse13 .cse14 .cse2 .cse15 .cse4 .cse5 .cse6 .cse17 .cse18 .cse19 .cse7))) [2021-10-29 00:01:41,557 INFO L853 garLoopResultBuilder]: At program point L281-2(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,557 INFO L853 garLoopResultBuilder]: At program point L413-6(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,557 INFO L853 garLoopResultBuilder]: At program point L281-3(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,558 INFO L853 garLoopResultBuilder]: At program point L413-7(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,558 INFO L853 garLoopResultBuilder]: At program point L281-4(lines 274 284) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0)) (.cse11 (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (= ~methaneLevelCritical~0 1) .cse9 .cse10 .cse11 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1)) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| 0)))) [2021-10-29 00:01:41,558 INFO L853 garLoopResultBuilder]: At program point L413-8(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,558 INFO L853 garLoopResultBuilder]: At program point L281-5(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,558 INFO L853 garLoopResultBuilder]: At program point L413-9(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,559 INFO L853 garLoopResultBuilder]: At program point L281-6(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,559 INFO L853 garLoopResultBuilder]: At program point L413-10(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,559 INFO L853 garLoopResultBuilder]: At program point L281-7(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,559 INFO L853 garLoopResultBuilder]: At program point L413-11(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,559 INFO L853 garLoopResultBuilder]: At program point L281-8(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,559 INFO L853 garLoopResultBuilder]: At program point L413-12(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,560 INFO L853 garLoopResultBuilder]: At program point L281-9(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,560 INFO L853 garLoopResultBuilder]: At program point L413-13(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,560 INFO L853 garLoopResultBuilder]: At program point L281-10(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,560 INFO L853 garLoopResultBuilder]: At program point L413-14(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,560 INFO L853 garLoopResultBuilder]: At program point L281-11(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,560 INFO L853 garLoopResultBuilder]: At program point L413-15(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,561 INFO L853 garLoopResultBuilder]: At program point L281-12(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,561 INFO L853 garLoopResultBuilder]: At program point L413-16(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,561 INFO L853 garLoopResultBuilder]: At program point L281-13(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,561 INFO L853 garLoopResultBuilder]: At program point L413-17(lines 408 416) the Hoare annotation is: false [2021-10-29 00:01:41,561 INFO L853 garLoopResultBuilder]: At program point L281-14(lines 274 284) the Hoare annotation is: false [2021-10-29 00:01:41,561 INFO L857 garLoopResultBuilder]: For program point L84(lines 84 90) no Hoare annotation was computed. [2021-10-29 00:01:41,562 INFO L853 garLoopResultBuilder]: At program point L84-1(lines 84 90) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse6 (= ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2 0)) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse11 (= ~pumpRunning~0 0)) (.cse15 (= ~methaneLevelCritical~0 1)) (.cse12 (<= ~waterLevel~0 2)) (.cse13 (<= 2 ~waterLevel~0)) (.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse4 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse5 (= 1 ~systemActive~0)) (.cse7 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse8 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse14 (= ~waterLevel~0 1)) (.cse10 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse11 .cse1 .cse2 .cse4 .cse5 .cse12) (and (or (and .cse0 .cse1 .cse2 .cse13 .cse4 .cse5 .cse7 .cse8 .cse10) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse7 .cse8 .cse14 .cse10)) .cse12) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse6 .cse15 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse11 .cse1 .cse4 .cse5 .cse15 .cse12) (and .cse15 .cse12 (or (and .cse0 .cse1 .cse13 .cse4 .cse5 .cse7 .cse8 .cse10) (and .cse0 .cse1 .cse4 .cse5 .cse7 .cse8 .cse14 .cse10))))) [2021-10-29 00:01:41,562 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-10-29 00:01:41,562 INFO L857 garLoopResultBuilder]: For program point L220(lines 220 237) no Hoare annotation was computed. [2021-10-29 00:01:41,562 INFO L857 garLoopResultBuilder]: For program point L220-1(lines 220 237) no Hoare annotation was computed. [2021-10-29 00:01:41,562 INFO L857 garLoopResultBuilder]: For program point L220-2(lines 220 237) no Hoare annotation was computed. [2021-10-29 00:01:41,563 INFO L853 garLoopResultBuilder]: At program point L290(lines 285 293) the Hoare annotation is: (and (= ULTIMATE.start_test_~splverifierCounter~0 0) (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 1) (= |ULTIMATE.start_isHighWaterLevel_#res| 1) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) (= ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1 1) (<= 2 ~waterLevel~0) (= ULTIMATE.start_main_~tmp~7 ~systemActive~0) (= 1 ~systemActive~0) (<= ~waterLevel~0 2) (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1)) (<= ULTIMATE.start_activatePump_~tmp~4 0) (= ULTIMATE.start_isHighWaterLevel_~tmp~5 0) (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8 0) (= |ULTIMATE.start_isHighWaterSensorDry_#res| 0) (= |ULTIMATE.start_isMethaneAlarm_#res| 0) (= |ULTIMATE.start_isPumpRunning_#res| 1) (= ~pumpRunning~0 1)) [2021-10-29 00:01:41,563 INFO L853 garLoopResultBuilder]: At program point L290-1(lines 285 293) the Hoare annotation is: false [2021-10-29 00:01:41,563 INFO L857 garLoopResultBuilder]: For program point L224(lines 224 232) no Hoare annotation was computed. [2021-10-29 00:01:41,563 INFO L853 garLoopResultBuilder]: At program point L290-2(lines 285 293) the Hoare annotation is: false [2021-10-29 00:01:41,563 INFO L857 garLoopResultBuilder]: For program point L224-1(lines 224 232) no Hoare annotation was computed. [2021-10-29 00:01:41,564 INFO L857 garLoopResultBuilder]: For program point L224-2(lines 224 232) no Hoare annotation was computed. [2021-10-29 00:01:41,564 INFO L857 garLoopResultBuilder]: For program point L358(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,564 INFO L857 garLoopResultBuilder]: For program point L358-2(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,564 INFO L857 garLoopResultBuilder]: For program point L358-3(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,564 INFO L857 garLoopResultBuilder]: For program point L358-5(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,564 INFO L857 garLoopResultBuilder]: For program point L358-6(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,565 INFO L857 garLoopResultBuilder]: For program point L94(lines 94 105) no Hoare annotation was computed. [2021-10-29 00:01:41,565 INFO L857 garLoopResultBuilder]: For program point L358-8(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,565 INFO L857 garLoopResultBuilder]: For program point L358-9(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,565 INFO L857 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-10-29 00:01:41,565 INFO L857 garLoopResultBuilder]: For program point L358-11(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,565 INFO L857 garLoopResultBuilder]: For program point L358-12(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,565 INFO L857 garLoopResultBuilder]: For program point L358-14(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,566 INFO L857 garLoopResultBuilder]: For program point L358-15(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,566 INFO L857 garLoopResultBuilder]: For program point L358-17(lines 358 362) no Hoare annotation was computed. [2021-10-29 00:01:41,566 INFO L853 garLoopResultBuilder]: At program point L493-2(lines 493 507) the Hoare annotation is: false [2021-10-29 00:01:41,566 INFO L857 garLoopResultBuilder]: For program point L494(line 494) no Hoare annotation was computed. [2021-10-29 00:01:41,566 INFO L853 garLoopResultBuilder]: At program point L364(lines 349 367) the Hoare annotation is: (let ((.cse0 (= ULTIMATE.start_test_~splverifierCounter~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (= ULTIMATE.start_main_~tmp~7 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= ULTIMATE.start_processEnvironment_~tmp~3 0)) (.cse8 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methaneLevelCritical~0 1) .cse5 .cse6 .cse7 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 1) .cse8) (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= ~methaneLevelCritical~0 0) .cse2 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse3 .cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse5 .cse6 .cse7 .cse8))) [2021-10-29 00:01:41,567 INFO L853 garLoopResultBuilder]: At program point L364-1(lines 349 367) the Hoare annotation is: false [2021-10-29 00:01:41,567 INFO L853 garLoopResultBuilder]: At program point L364-2(lines 349 367) the Hoare annotation is: false [2021-10-29 00:01:41,567 INFO L853 garLoopResultBuilder]: At program point L364-3(lines 349 367) the Hoare annotation is: false [2021-10-29 00:01:41,567 INFO L853 garLoopResultBuilder]: At program point L364-4(lines 349 367) the Hoare annotation is: false [2021-10-29 00:01:41,567 INFO L853 garLoopResultBuilder]: At program point L364-5(lines 349 367) the Hoare annotation is: false [2021-10-29 00:01:41,567 INFO L857 garLoopResultBuilder]: For program point L100(lines 100 104) no Hoare annotation was computed. [2021-10-29 00:01:41,568 INFO L857 garLoopResultBuilder]: For program point L100-2(lines 136 142) no Hoare annotation was computed. [2021-10-29 00:01:41,568 INFO L857 garLoopResultBuilder]: For program point L497(lines 497 501) no Hoare annotation was computed. [2021-10-29 00:01:41,568 INFO L857 garLoopResultBuilder]: For program point L497-1(lines 136 142) no Hoare annotation was computed. [2021-10-29 00:01:41,572 INFO L731 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-10-29 00:01:41,573 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-10-29 00:01:41,622 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.10 12:01:41 BoogieIcfgContainer [2021-10-29 00:01:41,622 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-10-29 00:01:41,623 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-10-29 00:01:41,623 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-10-29 00:01:41,623 INFO L275 PluginConnector]: Witness Printer initialized [2021-10-29 00:01:41,624 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.10 12:01:18" (3/4) ... [2021-10-29 00:01:41,627 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-10-29 00:01:41,661 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 41 nodes and edges [2021-10-29 00:01:41,664 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2021-10-29 00:01:41,667 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2021-10-29 00:01:41,670 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-10-29 00:01:41,673 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-10-29 00:01:41,676 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-29 00:01:41,679 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-10-29 00:01:41,708 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 [2021-10-29 00:01:41,709 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1 [2021-10-29 00:01:41,709 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) [2021-10-29 00:01:41,710 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((\result == 0 && methaneLevelCritical == 0) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && tmp == 0) && \result == 0) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((tmp == 1 && methaneLevelCritical == 1) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) [2021-10-29 00:01:41,710 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1)) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2)) || ((methaneLevelCritical == 1 && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) [2021-10-29 00:01:41,711 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) [2021-10-29 00:01:41,712 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && \result <= 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1) [2021-10-29 00:01:41,713 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) [2021-10-29 00:01:41,714 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) [2021-10-29 00:01:41,715 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) [2021-10-29 00:01:41,716 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && pumpRunning == 1) || (((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1) [2021-10-29 00:01:41,716 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && \result == 0) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 0)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) [2021-10-29 00:01:41,718 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) || (((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) [2021-10-29 00:01:41,718 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && \result == 1) && pumpRunning == 1 [2021-10-29 00:01:41,720 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) [2021-10-29 00:01:41,721 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) [2021-10-29 00:01:41,721 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) [2021-10-29 00:01:41,722 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 0) [2021-10-29 00:01:41,826 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/witness.graphml [2021-10-29 00:01:41,826 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-10-29 00:01:41,827 INFO L168 Benchmark]: Toolchain (without parser) took 25111.98 ms. Allocated memory was 134.2 MB in the beginning and 356.5 MB in the end (delta: 222.3 MB). Free memory was 69.1 MB in the beginning and 132.6 MB in the end (delta: -63.5 MB). Peak memory consumption was 160.2 MB. Max. memory is 16.1 GB. [2021-10-29 00:01:41,828 INFO L168 Benchmark]: CDTParser took 0.24 ms. Allocated memory is still 134.2 MB. Free memory is still 86.4 MB. There was no memory consumed. Max. memory is 16.1 GB. [2021-10-29 00:01:41,828 INFO L168 Benchmark]: CACSL2BoogieTranslator took 566.12 ms. Allocated memory is still 134.2 MB. Free memory was 69.0 MB in the beginning and 98.7 MB in the end (delta: -29.8 MB). Peak memory consumption was 9.8 MB. Max. memory is 16.1 GB. [2021-10-29 00:01:41,829 INFO L168 Benchmark]: Boogie Procedure Inliner took 100.21 ms. Allocated memory is still 134.2 MB. Free memory was 98.7 MB in the beginning and 93.0 MB in the end (delta: 5.8 MB). Peak memory consumption was 6.3 MB. Max. memory is 16.1 GB. [2021-10-29 00:01:41,829 INFO L168 Benchmark]: Boogie Preprocessor took 96.91 ms. Allocated memory is still 134.2 MB. Free memory was 92.5 MB in the beginning and 88.8 MB in the end (delta: 3.7 MB). Peak memory consumption was 4.2 MB. Max. memory is 16.1 GB. [2021-10-29 00:01:41,830 INFO L168 Benchmark]: RCFGBuilder took 1428.60 ms. Allocated memory was 134.2 MB in the beginning and 161.5 MB in the end (delta: 27.3 MB). Free memory was 88.8 MB in the beginning and 105.1 MB in the end (delta: -16.4 MB). Peak memory consumption was 41.7 MB. Max. memory is 16.1 GB. [2021-10-29 00:01:41,830 INFO L168 Benchmark]: TraceAbstraction took 22707.52 ms. Allocated memory was 161.5 MB in the beginning and 356.5 MB in the end (delta: 195.0 MB). Free memory was 104.1 MB in the beginning and 152.5 MB in the end (delta: -48.4 MB). Peak memory consumption was 191.9 MB. Max. memory is 16.1 GB. [2021-10-29 00:01:41,830 INFO L168 Benchmark]: Witness Printer took 203.34 ms. Allocated memory is still 356.5 MB. Free memory was 152.5 MB in the beginning and 132.6 MB in the end (delta: 19.9 MB). Peak memory consumption was 21.0 MB. Max. memory is 16.1 GB. [2021-10-29 00:01:41,833 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24 ms. Allocated memory is still 134.2 MB. Free memory is still 86.4 MB. There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 566.12 ms. Allocated memory is still 134.2 MB. Free memory was 69.0 MB in the beginning and 98.7 MB in the end (delta: -29.8 MB). Peak memory consumption was 9.8 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 100.21 ms. Allocated memory is still 134.2 MB. Free memory was 98.7 MB in the beginning and 93.0 MB in the end (delta: 5.8 MB). Peak memory consumption was 6.3 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 96.91 ms. Allocated memory is still 134.2 MB. Free memory was 92.5 MB in the beginning and 88.8 MB in the end (delta: 3.7 MB). Peak memory consumption was 4.2 MB. Max. memory is 16.1 GB. * RCFGBuilder took 1428.60 ms. Allocated memory was 134.2 MB in the beginning and 161.5 MB in the end (delta: 27.3 MB). Free memory was 88.8 MB in the beginning and 105.1 MB in the end (delta: -16.4 MB). Peak memory consumption was 41.7 MB. Max. memory is 16.1 GB. * TraceAbstraction took 22707.52 ms. Allocated memory was 161.5 MB in the beginning and 356.5 MB in the end (delta: 195.0 MB). Free memory was 104.1 MB in the beginning and 152.5 MB in the end (delta: -48.4 MB). Peak memory consumption was 191.9 MB. Max. memory is 16.1 GB. * Witness Printer took 203.34 ms. Allocated memory is still 356.5 MB. Free memory was 152.5 MB in the beginning and 132.6 MB in the end (delta: 19.9 MB). Peak memory consumption was 21.0 MB. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 477]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 477]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 477]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 231 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 22.5s, OverallIterations: 17, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 16.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 2561 SDtfs, 3536 SDslu, 4283 SDs, 0 SdLazy, 646 SolverSat, 114 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 189 GetRequests, 99 SyntacticMatches, 0 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 74 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=416occurred in iteration=9, InterpolantAutomatonStates: 108, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 17 MinimizatonAttempts, 2828 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 93 LocationsWithAnnotation, 93 PreInvPairs, 331 NumberOfFragments, 2618 HoareAnnotationTreeSize, 93 FomulaSimplifications, 121525933 FormulaSimplificationTreeSizeReduction, 4.8s HoareSimplificationTime, 93 FomulaSimplificationsInter, 19043305 FormulaSimplificationTreeSizeReductionInter, 11.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 744 NumberOfCodeBlocks, 744 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 726 ConstructedInterpolants, 0 QuantifiedInterpolants, 1443 SizeOfPredicates, 3 NumberOfNonLiveVariables, 478 ConjunctsInSsa, 7 ConjunctsInUnsatCore, 18 InterpolantComputations, 16 PerfectInterpolantSequences, 94/106 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 349]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 143]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 349]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 349]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 143]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 557]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 74]: Loop Invariant Derived loop invariant: (((((((((((\result == 0 && methaneLevelCritical == 0) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && tmp == 0) && \result == 0) || (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && tmp___0 <= 1) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((tmp == 1 && methaneLevelCritical == 1) && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) && \result == 1)) || ((((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && tmp___0 <= 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel == 1) - InvariantResult [Line: 143]: Loop Invariant Derived loop invariant: ((((((((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && \result <= 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1) - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: (((((((((((((((\result <= 1 && splverifierCounter == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && pumpRunning == 1) || (((((((((\result <= 1 && splverifierCounter == 0) && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0)) || (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1) - InvariantResult [Line: 349]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) || (((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((((splverifierCounter == 0 && tmp___0 == 0) && pumpRunning == 0) && \result == systemActive) && tmp == 1) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 0) && \result == 1) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && \result == 0) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1)) || ((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && \result == 0)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && \result == 1) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 349]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: (((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) || ((((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 0) - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 84]: Loop Invariant Derived loop invariant: ((((((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || ((((((((splverifierCounter == 0 && \result == systemActive) && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1)) && waterLevel <= 2)) || ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1)) || ((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2)) || ((methaneLevelCritical == 1 && waterLevel <= 2) && ((((((((splverifierCounter == 0 && \result == systemActive) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((splverifierCounter == 0 && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && waterLevel == 1) && pumpRunning == 1))) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0) && pumpRunning == 1) || (((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && \result == 1) && pumpRunning == 1) - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && tmp == 0) && \result == 0) && \result == 0) && \result == 1) && pumpRunning == 1 - InvariantResult [Line: 349]: Loop Invariant Derived loop invariant: ((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && \result <= 0) && tmp == systemActive) && 1 == systemActive) && 0 <= \result) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && pumpRunning == 1) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && \result == 1) || (((((((((((splverifierCounter == 0 && \result == systemActive) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && methaneLevelCritical == 1) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 1) && pumpRunning == 1)) || (((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 1) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && tmp == 0) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && pumpRunning == 1)) || (((((((splverifierCounter == 0 && pumpRunning == 0) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((((((splverifierCounter == 0 && tmp___0 == 1) && \result == 1) && \result == systemActive) && \result == 0) && methaneLevelCritical == 0) && tmp == 1) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && waterLevel <= 2) && 0 < tmp + 1) && tmp <= 0) && tmp == 0) && \result == 0) && \result == 0) && pumpRunning == 1)) || ((((((((((((splverifierCounter == 0 && pumpRunning == 0) && tmp___0 == 1) && \result == 1) && \result == systemActive) && tmp == 1) && tmp == systemActive) && 1 == systemActive) && methaneLevelCritical == 1) && waterLevel <= 2) && tmp == 0) && \result == 0) && \result == 1) - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 640]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == systemActive) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2021-10-29 00:01:41,920 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6097386f-c80c-438c-b25b-2fc8e383c046/bin/uautomizer-GMMbpWq8iD/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...