/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product49.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 12:24:24,592 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 12:24:24,594 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 12:24:24,631 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 12:24:24,631 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 12:24:24,632 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 12:24:24,633 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 12:24:24,634 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 12:24:24,654 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 12:24:24,655 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 12:24:24,656 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 12:24:24,657 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 12:24:24,657 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 12:24:24,657 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 12:24:24,658 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 12:24:24,659 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 12:24:24,659 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 12:24:24,660 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 12:24:24,661 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 12:24:24,662 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 12:24:24,663 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 12:24:24,664 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 12:24:24,665 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 12:24:24,665 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 12:24:24,667 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 12:24:24,667 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 12:24:24,668 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 12:24:24,668 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 12:24:24,669 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 12:24:24,669 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 12:24:24,669 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 12:24:24,670 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 12:24:24,671 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 12:24:24,671 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 12:24:24,672 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 12:24:24,672 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 12:24:24,673 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 12:24:24,673 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 12:24:24,673 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 12:24:24,674 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 12:24:24,674 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 12:24:24,675 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf [2022-01-10 12:24:24,690 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 12:24:24,690 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 12:24:24,690 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 12:24:24,690 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 12:24:24,691 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 12:24:24,691 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 12:24:24,691 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 12:24:24,691 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 12:24:24,691 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 12:24:24,691 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 12:24:24,692 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 12:24:24,692 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 12:24:24,692 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 12:24:24,692 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 12:24:24,692 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 12:24:24,692 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 12:24:24,692 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 12:24:24,692 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 12:24:24,692 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 12:24:24,692 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 12:24:24,693 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 12:24:24,693 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:24:24,693 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 12:24:24,693 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 12:24:24,693 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 12:24:24,693 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 12:24:24,693 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 12:24:24,693 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 12:24:24,693 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 12:24:24,693 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 12:24:24,694 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 12:24:24,694 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 12:24:24,694 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 12:24:24,694 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_BITWISE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 12:24:24,825 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 12:24:24,848 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 12:24:24,850 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 12:24:24,851 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 12:24:24,855 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 12:24:24,856 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product49.cil.c [2022-01-10 12:24:24,908 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/17ac361a3/e3d27bf7ae5b4aca800038e7900c28a7/FLAG09f6a8569 [2022-01-10 12:24:25,306 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 12:24:25,307 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product49.cil.c [2022-01-10 12:24:25,316 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/17ac361a3/e3d27bf7ae5b4aca800038e7900c28a7/FLAG09f6a8569 [2022-01-10 12:24:25,326 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/17ac361a3/e3d27bf7ae5b4aca800038e7900c28a7 [2022-01-10 12:24:25,328 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 12:24:25,329 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 12:24:25,341 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 12:24:25,341 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 12:24:25,344 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 12:24:25,344 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,345 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@13e021b7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25, skipping insertion in model container [2022-01-10 12:24:25,345 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,349 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 12:24:25,391 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:24:25,728 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product49.cil.c[18359,18372] [2022-01-10 12:24:25,742 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:25,754 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 12:24:25,760 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:24:25,793 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product49.cil.c[18359,18372] [2022-01-10 12:24:25,794 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:25,797 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 12:24:25,844 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product49.cil.c[18359,18372] [2022-01-10 12:24:25,845 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:25,863 INFO L208 MainTranslator]: Completed translation [2022-01-10 12:24:25,863 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25 WrapperNode [2022-01-10 12:24:25,863 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 12:24:25,864 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 12:24:25,864 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 12:24:25,864 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 12:24:25,870 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,893 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,936 INFO L137 Inliner]: procedures = 58, calls = 155, calls flagged for inlining = 52, calls inlined = 78, statements flattened = 615 [2022-01-10 12:24:25,937 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 12:24:25,937 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 12:24:25,937 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 12:24:25,937 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 12:24:25,946 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,946 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,952 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,952 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,958 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,962 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,964 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,966 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 12:24:25,967 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 12:24:25,967 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 12:24:25,967 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 12:24:25,968 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25" (1/1) ... [2022-01-10 12:24:25,988 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:24:25,997 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:24:26,033 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 12:24:26,051 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 12:24:26,062 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 12:24:26,062 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 12:24:26,062 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 12:24:26,062 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 12:24:26,132 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 12:24:26,136 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 12:24:26,529 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 12:24:26,535 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 12:24:26,535 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 12:24:26,538 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:26 BoogieIcfgContainer [2022-01-10 12:24:26,538 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 12:24:26,539 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 12:24:26,539 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 12:24:26,541 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 12:24:26,543 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:26" (1/1) ... [2022-01-10 12:24:26,628 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:24:26 BasicIcfg [2022-01-10 12:24:26,628 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 12:24:26,629 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 12:24:26,629 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 12:24:26,631 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 12:24:26,632 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 12:24:25" (1/4) ... [2022-01-10 12:24:26,632 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1ab5df6c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:24:26, skipping insertion in model container [2022-01-10 12:24:26,632 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:25" (2/4) ... [2022-01-10 12:24:26,632 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1ab5df6c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:24:26, skipping insertion in model container [2022-01-10 12:24:26,632 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:26" (3/4) ... [2022-01-10 12:24:26,633 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1ab5df6c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:24:26, skipping insertion in model container [2022-01-10 12:24:26,633 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:24:26" (4/4) ... [2022-01-10 12:24:26,633 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product49.cil.cTransformedIcfg [2022-01-10 12:24:26,638 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 12:24:26,638 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 12:24:26,672 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 12:24:26,677 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 12:24:26,677 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 12:24:26,689 INFO L276 IsEmpty]: Start isEmpty. Operand has 169 states, 165 states have (on average 1.406060606060606) internal successors, (232), 168 states have internal predecessors, (232), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:26,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-10 12:24:26,693 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:26,693 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:26,694 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:26,697 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:26,697 INFO L85 PathProgramCache]: Analyzing trace with hash -564445438, now seen corresponding path program 1 times [2022-01-10 12:24:26,703 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:26,703 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [412482150] [2022-01-10 12:24:26,704 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:26,704 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:26,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:26,911 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:26,912 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:26,912 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [412482150] [2022-01-10 12:24:26,913 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [412482150] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:26,913 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:26,913 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:26,914 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1051670572] [2022-01-10 12:24:26,916 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:26,919 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 12:24:26,919 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:26,942 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 12:24:26,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:24:26,946 INFO L87 Difference]: Start difference. First operand has 169 states, 165 states have (on average 1.406060606060606) internal successors, (232), 168 states have internal predecessors, (232), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:26,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:26,993 INFO L93 Difference]: Finished difference Result 327 states and 452 transitions. [2022-01-10 12:24:26,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 12:24:26,996 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-10 12:24:26,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:27,004 INFO L225 Difference]: With dead ends: 327 [2022-01-10 12:24:27,005 INFO L226 Difference]: Without dead ends: 159 [2022-01-10 12:24:27,010 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:24:27,013 INFO L933 BasicCegarLoop]: 222 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:27,014 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 222 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:27,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2022-01-10 12:24:27,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 159. [2022-01-10 12:24:27,056 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 156 states have (on average 1.3717948717948718) internal successors, (214), 158 states have internal predecessors, (214), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,056 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 214 transitions. [2022-01-10 12:24:27,057 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 214 transitions. Word has length 19 [2022-01-10 12:24:27,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:27,058 INFO L470 AbstractCegarLoop]: Abstraction has 159 states and 214 transitions. [2022-01-10 12:24:27,058 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,059 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 214 transitions. [2022-01-10 12:24:27,060 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-10 12:24:27,060 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:27,060 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:27,060 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 12:24:27,060 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:27,063 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:27,063 INFO L85 PathProgramCache]: Analyzing trace with hash 2119836785, now seen corresponding path program 1 times [2022-01-10 12:24:27,063 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:27,063 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1176279708] [2022-01-10 12:24:27,063 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:27,064 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:27,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:27,177 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:27,178 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:27,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1176279708] [2022-01-10 12:24:27,178 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1176279708] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:27,178 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:27,178 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:27,178 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [930207089] [2022-01-10 12:24:27,179 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:27,179 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:27,179 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:27,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:27,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:27,180 INFO L87 Difference]: Start difference. First operand 159 states and 214 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:27,206 INFO L93 Difference]: Finished difference Result 310 states and 420 transitions. [2022-01-10 12:24:27,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:27,208 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-10 12:24:27,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:27,209 INFO L225 Difference]: With dead ends: 310 [2022-01-10 12:24:27,209 INFO L226 Difference]: Without dead ends: 159 [2022-01-10 12:24:27,209 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:27,210 INFO L933 BasicCegarLoop]: 208 mSDtfsCounter, 199 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 199 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:27,211 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [199 Valid, 208 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:27,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2022-01-10 12:24:27,218 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 159. [2022-01-10 12:24:27,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 156 states have (on average 1.3525641025641026) internal successors, (211), 158 states have internal predecessors, (211), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 211 transitions. [2022-01-10 12:24:27,224 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 211 transitions. Word has length 20 [2022-01-10 12:24:27,225 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:27,225 INFO L470 AbstractCegarLoop]: Abstraction has 159 states and 211 transitions. [2022-01-10 12:24:27,226 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,228 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 211 transitions. [2022-01-10 12:24:27,229 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-10 12:24:27,233 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:27,233 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:27,233 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 12:24:27,233 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:27,233 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:27,234 INFO L85 PathProgramCache]: Analyzing trace with hash 1144420555, now seen corresponding path program 1 times [2022-01-10 12:24:27,234 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:27,234 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1681850448] [2022-01-10 12:24:27,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:27,234 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:27,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:27,296 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:27,297 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:27,297 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1681850448] [2022-01-10 12:24:27,298 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1681850448] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:27,298 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:27,298 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:27,298 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1758248265] [2022-01-10 12:24:27,298 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:27,299 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:27,299 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:27,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:27,300 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:27,300 INFO L87 Difference]: Start difference. First operand 159 states and 211 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:27,392 INFO L93 Difference]: Finished difference Result 374 states and 497 transitions. [2022-01-10 12:24:27,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:27,392 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-10 12:24:27,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:27,395 INFO L225 Difference]: With dead ends: 374 [2022-01-10 12:24:27,395 INFO L226 Difference]: Without dead ends: 223 [2022-01-10 12:24:27,396 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:27,397 INFO L933 BasicCegarLoop]: 230 mSDtfsCounter, 133 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 133 SdHoareTripleChecker+Valid, 337 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:27,397 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [133 Valid, 337 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:27,398 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-01-10 12:24:27,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 217. [2022-01-10 12:24:27,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 217 states, 214 states have (on average 1.3177570093457944) internal successors, (282), 216 states have internal predecessors, (282), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 217 states to 217 states and 282 transitions. [2022-01-10 12:24:27,446 INFO L78 Accepts]: Start accepts. Automaton has 217 states and 282 transitions. Word has length 25 [2022-01-10 12:24:27,447 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:27,447 INFO L470 AbstractCegarLoop]: Abstraction has 217 states and 282 transitions. [2022-01-10 12:24:27,447 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,447 INFO L276 IsEmpty]: Start isEmpty. Operand 217 states and 282 transitions. [2022-01-10 12:24:27,451 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-01-10 12:24:27,451 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:27,452 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:27,452 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 12:24:27,453 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:27,453 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:27,453 INFO L85 PathProgramCache]: Analyzing trace with hash -497620243, now seen corresponding path program 1 times [2022-01-10 12:24:27,454 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:27,454 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [668416084] [2022-01-10 12:24:27,454 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:27,454 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:27,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:27,534 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:27,534 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:27,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [668416084] [2022-01-10 12:24:27,534 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [668416084] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:27,534 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:27,534 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:27,535 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1358347979] [2022-01-10 12:24:27,535 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:27,536 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:27,537 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:27,537 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:27,537 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:27,537 INFO L87 Difference]: Start difference. First operand 217 states and 282 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:27,580 INFO L93 Difference]: Finished difference Result 426 states and 556 transitions. [2022-01-10 12:24:27,581 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:27,581 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-01-10 12:24:27,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:27,583 INFO L225 Difference]: With dead ends: 426 [2022-01-10 12:24:27,583 INFO L226 Difference]: Without dead ends: 420 [2022-01-10 12:24:27,584 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:27,591 INFO L933 BasicCegarLoop]: 202 mSDtfsCounter, 166 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 387 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:27,592 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 387 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:27,595 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 420 states. [2022-01-10 12:24:27,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 420 to 420. [2022-01-10 12:24:27,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 420 states, 417 states have (on average 1.3117505995203838) internal successors, (547), 419 states have internal predecessors, (547), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 420 states to 420 states and 547 transitions. [2022-01-10 12:24:27,628 INFO L78 Accepts]: Start accepts. Automaton has 420 states and 547 transitions. Word has length 31 [2022-01-10 12:24:27,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:27,628 INFO L470 AbstractCegarLoop]: Abstraction has 420 states and 547 transitions. [2022-01-10 12:24:27,628 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,628 INFO L276 IsEmpty]: Start isEmpty. Operand 420 states and 547 transitions. [2022-01-10 12:24:27,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-01-10 12:24:27,632 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:27,632 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:27,633 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 12:24:27,633 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:27,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:27,634 INFO L85 PathProgramCache]: Analyzing trace with hash -1611263057, now seen corresponding path program 1 times [2022-01-10 12:24:27,634 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:27,634 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [238640072] [2022-01-10 12:24:27,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:27,635 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:27,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:27,729 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:27,729 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:27,730 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [238640072] [2022-01-10 12:24:27,730 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [238640072] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:27,730 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:27,730 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:24:27,730 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1700822332] [2022-01-10 12:24:27,730 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:27,731 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:27,731 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:27,731 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:27,732 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:27,732 INFO L87 Difference]: Start difference. First operand 420 states and 547 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:27,867 INFO L93 Difference]: Finished difference Result 1130 states and 1448 transitions. [2022-01-10 12:24:27,868 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:24:27,868 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-01-10 12:24:27,868 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:27,870 INFO L225 Difference]: With dead ends: 1130 [2022-01-10 12:24:27,870 INFO L226 Difference]: Without dead ends: 718 [2022-01-10 12:24:27,873 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:24:27,876 INFO L933 BasicCegarLoop]: 256 mSDtfsCounter, 358 mSDsluCounter, 700 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 358 SdHoareTripleChecker+Valid, 956 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:27,877 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [358 Valid, 956 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:27,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 718 states. [2022-01-10 12:24:27,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 718 to 456. [2022-01-10 12:24:27,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 456 states, 453 states have (on average 1.2869757174392935) internal successors, (583), 455 states have internal predecessors, (583), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 456 states to 456 states and 583 transitions. [2022-01-10 12:24:27,912 INFO L78 Accepts]: Start accepts. Automaton has 456 states and 583 transitions. Word has length 55 [2022-01-10 12:24:27,913 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:27,913 INFO L470 AbstractCegarLoop]: Abstraction has 456 states and 583 transitions. [2022-01-10 12:24:27,913 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 5 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:27,914 INFO L276 IsEmpty]: Start isEmpty. Operand 456 states and 583 transitions. [2022-01-10 12:24:27,914 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-01-10 12:24:27,914 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:27,915 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:27,915 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 12:24:27,915 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:27,915 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:27,915 INFO L85 PathProgramCache]: Analyzing trace with hash 21540942, now seen corresponding path program 1 times [2022-01-10 12:24:27,915 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:27,916 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [703845841] [2022-01-10 12:24:27,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:27,916 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:27,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:27,974 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:27,975 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:27,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [703845841] [2022-01-10 12:24:27,975 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [703845841] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:27,975 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:27,975 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:27,975 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1378951545] [2022-01-10 12:24:27,975 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:27,976 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 12:24:27,976 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:27,976 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 12:24:27,976 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 12:24:27,976 INFO L87 Difference]: Start difference. First operand 456 states and 583 transitions. Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:28,083 INFO L93 Difference]: Finished difference Result 1256 states and 1574 transitions. [2022-01-10 12:24:28,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:24:28,084 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-01-10 12:24:28,085 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:28,087 INFO L225 Difference]: With dead ends: 1256 [2022-01-10 12:24:28,087 INFO L226 Difference]: Without dead ends: 808 [2022-01-10 12:24:28,088 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:28,089 INFO L933 BasicCegarLoop]: 243 mSDtfsCounter, 330 mSDsluCounter, 415 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 330 SdHoareTripleChecker+Valid, 658 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:28,089 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [330 Valid, 658 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:28,090 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 808 states. [2022-01-10 12:24:28,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 808 to 480. [2022-01-10 12:24:28,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 480 states, 477 states have (on average 1.2725366876310273) internal successors, (607), 479 states have internal predecessors, (607), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 480 states to 480 states and 607 transitions. [2022-01-10 12:24:28,111 INFO L78 Accepts]: Start accepts. Automaton has 480 states and 607 transitions. Word has length 55 [2022-01-10 12:24:28,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:28,111 INFO L470 AbstractCegarLoop]: Abstraction has 480 states and 607 transitions. [2022-01-10 12:24:28,111 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,112 INFO L276 IsEmpty]: Start isEmpty. Operand 480 states and 607 transitions. [2022-01-10 12:24:28,113 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-01-10 12:24:28,113 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:28,113 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:28,113 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 12:24:28,113 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:28,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:28,114 INFO L85 PathProgramCache]: Analyzing trace with hash 1483120941, now seen corresponding path program 1 times [2022-01-10 12:24:28,114 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:28,114 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260806490] [2022-01-10 12:24:28,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:28,114 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:28,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:28,179 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:28,179 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:28,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260806490] [2022-01-10 12:24:28,179 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [260806490] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:28,179 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:28,179 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:28,179 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [507739328] [2022-01-10 12:24:28,179 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:28,180 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:28,180 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:28,181 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:28,181 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:28,181 INFO L87 Difference]: Start difference. First operand 480 states and 607 transitions. Second operand has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:28,334 INFO L93 Difference]: Finished difference Result 1649 states and 2083 transitions. [2022-01-10 12:24:28,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 12:24:28,334 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-01-10 12:24:28,334 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:28,338 INFO L225 Difference]: With dead ends: 1649 [2022-01-10 12:24:28,338 INFO L226 Difference]: Without dead ends: 1025 [2022-01-10 12:24:28,340 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 12:24:28,341 INFO L933 BasicCegarLoop]: 250 mSDtfsCounter, 772 mSDsluCounter, 792 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 772 SdHoareTripleChecker+Valid, 1042 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:28,341 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [772 Valid, 1042 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:28,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1025 states. [2022-01-10 12:24:28,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1025 to 567. [2022-01-10 12:24:28,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 567 states, 564 states have (on average 1.2695035460992907) internal successors, (716), 566 states have internal predecessors, (716), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 567 states to 567 states and 716 transitions. [2022-01-10 12:24:28,380 INFO L78 Accepts]: Start accepts. Automaton has 567 states and 716 transitions. Word has length 55 [2022-01-10 12:24:28,380 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:28,380 INFO L470 AbstractCegarLoop]: Abstraction has 567 states and 716 transitions. [2022-01-10 12:24:28,381 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.0) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,381 INFO L276 IsEmpty]: Start isEmpty. Operand 567 states and 716 transitions. [2022-01-10 12:24:28,382 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-01-10 12:24:28,382 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:28,382 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:28,382 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 12:24:28,382 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:28,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:28,383 INFO L85 PathProgramCache]: Analyzing trace with hash -932498611, now seen corresponding path program 1 times [2022-01-10 12:24:28,383 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:28,383 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1168700827] [2022-01-10 12:24:28,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:28,383 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:28,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:28,429 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:28,429 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:28,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1168700827] [2022-01-10 12:24:28,430 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1168700827] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:28,430 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:28,430 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:28,430 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [664795937] [2022-01-10 12:24:28,430 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:28,430 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:28,430 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:28,431 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:28,431 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:28,431 INFO L87 Difference]: Start difference. First operand 567 states and 716 transitions. Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:28,467 INFO L93 Difference]: Finished difference Result 567 states and 716 transitions. [2022-01-10 12:24:28,467 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:28,468 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 62 [2022-01-10 12:24:28,468 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:28,469 INFO L225 Difference]: With dead ends: 567 [2022-01-10 12:24:28,469 INFO L226 Difference]: Without dead ends: 283 [2022-01-10 12:24:28,469 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:28,470 INFO L933 BasicCegarLoop]: 84 mSDtfsCounter, 45 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 91 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:28,470 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [45 Valid, 91 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:28,470 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283 states. [2022-01-10 12:24:28,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283 to 283. [2022-01-10 12:24:28,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 282 states have (on average 1.2836879432624113) internal successors, (362), 282 states have internal predecessors, (362), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 362 transitions. [2022-01-10 12:24:28,494 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 362 transitions. Word has length 62 [2022-01-10 12:24:28,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:28,495 INFO L470 AbstractCegarLoop]: Abstraction has 283 states and 362 transitions. [2022-01-10 12:24:28,495 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,495 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 362 transitions. [2022-01-10 12:24:28,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-10 12:24:28,496 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:28,496 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:28,496 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 12:24:28,496 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:28,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:28,497 INFO L85 PathProgramCache]: Analyzing trace with hash -1831555557, now seen corresponding path program 1 times [2022-01-10 12:24:28,497 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:28,497 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [629843422] [2022-01-10 12:24:28,497 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:28,497 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:28,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:28,546 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-01-10 12:24:28,546 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:28,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [629843422] [2022-01-10 12:24:28,546 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [629843422] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:28,546 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:28,546 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:24:28,546 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [864603556] [2022-01-10 12:24:28,546 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:28,547 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:28,547 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:28,547 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:28,547 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:28,547 INFO L87 Difference]: Start difference. First operand 283 states and 362 transitions. Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:28,694 INFO L93 Difference]: Finished difference Result 901 states and 1146 transitions. [2022-01-10 12:24:28,694 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-10 12:24:28,695 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-10 12:24:28,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:28,697 INFO L225 Difference]: With dead ends: 901 [2022-01-10 12:24:28,697 INFO L226 Difference]: Without dead ends: 626 [2022-01-10 12:24:28,698 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 12:24:28,698 INFO L933 BasicCegarLoop]: 179 mSDtfsCounter, 314 mSDsluCounter, 416 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 314 SdHoareTripleChecker+Valid, 595 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:28,699 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [314 Valid, 595 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:28,700 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626 states. [2022-01-10 12:24:28,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626 to 243. [2022-01-10 12:24:28,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 242 states have (on average 1.2892561983471074) internal successors, (312), 242 states have internal predecessors, (312), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,723 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 312 transitions. [2022-01-10 12:24:28,723 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 312 transitions. Word has length 68 [2022-01-10 12:24:28,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:28,723 INFO L470 AbstractCegarLoop]: Abstraction has 243 states and 312 transitions. [2022-01-10 12:24:28,723 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,723 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 312 transitions. [2022-01-10 12:24:28,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-01-10 12:24:28,724 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:28,724 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:28,725 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 12:24:28,725 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:28,725 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:28,725 INFO L85 PathProgramCache]: Analyzing trace with hash -245896942, now seen corresponding path program 1 times [2022-01-10 12:24:28,725 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:28,725 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2059132646] [2022-01-10 12:24:28,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:28,726 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:28,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:28,761 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:28,761 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:28,761 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2059132646] [2022-01-10 12:24:28,761 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2059132646] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:28,761 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:28,762 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:28,762 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1025807181] [2022-01-10 12:24:28,762 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:28,762 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:28,762 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:28,762 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:28,763 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:28,763 INFO L87 Difference]: Start difference. First operand 243 states and 312 transitions. Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:28,795 INFO L93 Difference]: Finished difference Result 432 states and 558 transitions. [2022-01-10 12:24:28,795 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:28,796 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-01-10 12:24:28,796 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:28,797 INFO L225 Difference]: With dead ends: 432 [2022-01-10 12:24:28,797 INFO L226 Difference]: Without dead ends: 197 [2022-01-10 12:24:28,797 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:28,798 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 30 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:28,798 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [30 Valid, 147 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:28,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2022-01-10 12:24:28,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 197. [2022-01-10 12:24:28,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 196 states have (on average 1.25) internal successors, (245), 196 states have internal predecessors, (245), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 245 transitions. [2022-01-10 12:24:28,846 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 245 transitions. Word has length 69 [2022-01-10 12:24:28,846 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:28,846 INFO L470 AbstractCegarLoop]: Abstraction has 197 states and 245 transitions. [2022-01-10 12:24:28,846 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:28,846 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 245 transitions. [2022-01-10 12:24:28,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-01-10 12:24:28,847 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:28,847 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:28,847 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-10 12:24:28,847 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:28,847 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:28,848 INFO L85 PathProgramCache]: Analyzing trace with hash 592959112, now seen corresponding path program 1 times [2022-01-10 12:24:28,848 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:28,848 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1768788652] [2022-01-10 12:24:28,848 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:28,848 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:28,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:28,975 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 12:24:28,976 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:28,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1768788652] [2022-01-10 12:24:28,976 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1768788652] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:28,976 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:28,976 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:28,976 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1801176613] [2022-01-10 12:24:28,976 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:28,977 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:28,977 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:28,977 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:28,977 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:28,977 INFO L87 Difference]: Start difference. First operand 197 states and 245 transitions. Second operand has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 2 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:29,048 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:29,048 INFO L93 Difference]: Finished difference Result 450 states and 560 transitions. [2022-01-10 12:24:29,048 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:29,049 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 2 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-01-10 12:24:29,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:29,049 INFO L225 Difference]: With dead ends: 450 [2022-01-10 12:24:29,049 INFO L226 Difference]: Without dead ends: 261 [2022-01-10 12:24:29,050 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:29,050 INFO L933 BasicCegarLoop]: 71 mSDtfsCounter, 23 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:29,051 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [23 Valid, 129 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:29,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 261 states. [2022-01-10 12:24:29,090 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 261 to 261. [2022-01-10 12:24:29,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 260 states have (on average 1.226923076923077) internal successors, (319), 260 states have internal predecessors, (319), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:29,091 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 319 transitions. [2022-01-10 12:24:29,091 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 319 transitions. Word has length 70 [2022-01-10 12:24:29,092 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:29,092 INFO L470 AbstractCegarLoop]: Abstraction has 261 states and 319 transitions. [2022-01-10 12:24:29,092 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 2 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:29,092 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 319 transitions. [2022-01-10 12:24:29,093 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-01-10 12:24:29,093 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:29,093 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:29,093 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 12:24:29,093 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:29,093 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:29,094 INFO L85 PathProgramCache]: Analyzing trace with hash 1043790382, now seen corresponding path program 1 times [2022-01-10 12:24:29,094 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:29,094 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [315018678] [2022-01-10 12:24:29,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:29,094 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:29,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:29,221 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 12:24:29,221 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:29,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [315018678] [2022-01-10 12:24:29,222 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [315018678] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 12:24:29,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [814871008] [2022-01-10 12:24:29,222 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:29,222 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 12:24:29,222 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:24:29,247 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 12:24:29,274 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-10 12:24:29,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:29,387 INFO L263 TraceCheckSpWp]: Trace formula consists of 609 conjuncts, 12 conjunts are in the unsatisfiable core [2022-01-10 12:24:29,392 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 12:24:29,901 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 12:24:29,901 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 12:24:30,094 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 12:24:30,095 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [814871008] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 12:24:30,095 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 12:24:30,095 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 6] total 9 [2022-01-10 12:24:30,095 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [540123521] [2022-01-10 12:24:30,095 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 12:24:30,095 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-01-10 12:24:30,095 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:30,096 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-01-10 12:24:30,096 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2022-01-10 12:24:30,096 INFO L87 Difference]: Start difference. First operand 261 states and 319 transitions. Second operand has 10 states, 10 states have (on average 12.5) internal successors, (125), 9 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:30,758 INFO L93 Difference]: Finished difference Result 2278 states and 2844 transitions. [2022-01-10 12:24:30,758 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-01-10 12:24:30,758 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 12.5) internal successors, (125), 9 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 72 [2022-01-10 12:24:30,759 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:30,763 INFO L225 Difference]: With dead ends: 2278 [2022-01-10 12:24:30,763 INFO L226 Difference]: Without dead ends: 2089 [2022-01-10 12:24:30,764 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 135 SyntacticMatches, 5 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 110 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=163, Invalid=389, Unknown=0, NotChecked=0, Total=552 [2022-01-10 12:24:30,765 INFO L933 BasicCegarLoop]: 236 mSDtfsCounter, 1066 mSDsluCounter, 903 mSDsCounter, 0 mSdLazyCounter, 174 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1066 SdHoareTripleChecker+Valid, 1139 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 174 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:30,765 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1066 Valid, 1139 Invalid, 220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 174 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 12:24:30,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2089 states. [2022-01-10 12:24:30,860 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2089 to 812. [2022-01-10 12:24:30,861 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 812 states, 811 states have (on average 1.2367447595561036) internal successors, (1003), 811 states have internal predecessors, (1003), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 812 states to 812 states and 1003 transitions. [2022-01-10 12:24:30,863 INFO L78 Accepts]: Start accepts. Automaton has 812 states and 1003 transitions. Word has length 72 [2022-01-10 12:24:30,863 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:30,863 INFO L470 AbstractCegarLoop]: Abstraction has 812 states and 1003 transitions. [2022-01-10 12:24:30,863 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 12.5) internal successors, (125), 9 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,863 INFO L276 IsEmpty]: Start isEmpty. Operand 812 states and 1003 transitions. [2022-01-10 12:24:30,864 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-01-10 12:24:30,864 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:30,864 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:30,882 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-01-10 12:24:31,077 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-10 12:24:31,078 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:31,078 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:31,078 INFO L85 PathProgramCache]: Analyzing trace with hash -1743625105, now seen corresponding path program 1 times [2022-01-10 12:24:31,078 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:31,078 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [950066975] [2022-01-10 12:24:31,078 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:31,078 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:31,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:31,140 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-01-10 12:24:31,140 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:31,140 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [950066975] [2022-01-10 12:24:31,140 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [950066975] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:31,141 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:31,141 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:24:31,141 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1108912400] [2022-01-10 12:24:31,141 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:31,141 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:31,141 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:31,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:31,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:31,142 INFO L87 Difference]: Start difference. First operand 812 states and 1003 transitions. Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:31,208 INFO L93 Difference]: Finished difference Result 1323 states and 1614 transitions. [2022-01-10 12:24:31,209 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:24:31,209 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 72 [2022-01-10 12:24:31,209 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:31,209 INFO L225 Difference]: With dead ends: 1323 [2022-01-10 12:24:31,209 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 12:24:31,210 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:24:31,210 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 198 mSDsluCounter, 229 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 198 SdHoareTripleChecker+Valid, 342 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:31,211 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [198 Valid, 342 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:31,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 12:24:31,211 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 12:24:31,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 12:24:31,211 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 72 [2022-01-10 12:24:31,211 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:31,211 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 12:24:31,212 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,212 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 12:24:31,212 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 12:24:31,213 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 12:24:31,214 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 12:24:31,214 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 12:24:31,214 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-01-10 12:24:31,215 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 12:24:37,532 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 12:24:37,532 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 12:24:37,532 INFO L854 garLoopResultBuilder]: At program point L967(lines 963 969) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,532 INFO L854 garLoopResultBuilder]: At program point L960(lines 956 962) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,532 INFO L854 garLoopResultBuilder]: At program point L975(lines 970 978) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,532 INFO L858 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2022-01-10 12:24:37,533 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,533 INFO L858 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2022-01-10 12:24:37,533 INFO L854 garLoopResultBuilder]: At program point L273(lines 268 275) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,533 INFO L861 garLoopResultBuilder]: At program point L151(lines 132 154) the Hoare annotation is: true [2022-01-10 12:24:37,533 INFO L854 garLoopResultBuilder]: At program point L316-2(lines 316 361) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse5 (< ~waterLevel~0Int 4294967296)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (<= 0 ~waterLevel~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int) .cse3) (and .cse4 .cse5 .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse4 .cse5 .cse0 .cse6 .cse2 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:37,533 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 12:24:37,533 INFO L854 garLoopResultBuilder]: At program point L362(lines 315 363) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) .cse2 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)))) [2022-01-10 12:24:37,533 INFO L858 garLoopResultBuilder]: For program point L317(lines 316 361) no Hoare annotation was computed. [2022-01-10 12:24:37,533 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 12:24:37,533 INFO L858 garLoopResultBuilder]: For program point L380-3(lines 380 386) no Hoare annotation was computed. [2022-01-10 12:24:37,533 INFO L858 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-01-10 12:24:37,533 INFO L858 garLoopResultBuilder]: For program point L168-3(lines 168 172) no Hoare annotation was computed. [2022-01-10 12:24:37,533 INFO L858 garLoopResultBuilder]: For program point L380-5(lines 379 398) no Hoare annotation was computed. [2022-01-10 12:24:37,533 INFO L858 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-01-10 12:24:37,533 INFO L854 garLoopResultBuilder]: At program point L168-5(lines 164 175) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L438-2(lines 438 455) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L387-3(lines 387 393) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L180(lines 180 184) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L326-2(lines 326 332) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L854 garLoopResultBuilder]: At program point L260-1(lines 255 263) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L412-6(lines 412 429) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L854 garLoopResultBuilder]: At program point L205-1(lines 200 208) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,534 INFO L854 garLoopResultBuilder]: At program point L180-2(lines 176 187) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0Int 0) .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L559-3(lines 559 563) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L245-3(lines 245 251) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L854 garLoopResultBuilder]: At program point L404-7(lines 400 406) the Hoare annotation is: false [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L284-2(lines 284 301) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L192(lines 192 196) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L336-2(lines 336 342) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L858 garLoopResultBuilder]: For program point L559-5(lines 559 563) no Hoare annotation was computed. [2022-01-10 12:24:37,534 INFO L854 garLoopResultBuilder]: At program point L250-3(lines 241 254) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,534 INFO L854 garLoopResultBuilder]: At program point L412-7(lines 408 432) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,535 INFO L854 garLoopResultBuilder]: At program point L491-1(lines 486 494) the Hoare annotation is: false [2022-01-10 12:24:37,535 INFO L854 garLoopResultBuilder]: At program point L284-3(lines 276 304) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,535 INFO L854 garLoopResultBuilder]: At program point L192-2(lines 188 199) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse4 (<= 1 ~waterLevel~0Int)) (.cse5 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse6 (= ~methAndRunningLastTime~0Int 0)) (.cse7 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse8 (< ~waterLevel~0Int 4294967296)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse9 (<= 0 ~waterLevel~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse7 .cse8 .cse1 .cse2 .cse9 .cse3 .cse5) (and .cse7 .cse8 .cse1 .cse2 .cse9 .cse3 .cse6) (and .cse7 .cse8 .cse1 .cse9 .cse3 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:37,535 INFO L858 garLoopResultBuilder]: For program point L346(lines 346 357) no Hoare annotation was computed. [2022-01-10 12:24:37,535 INFO L854 garLoopResultBuilder]: At program point L565-1(lines 550 568) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,535 INFO L858 garLoopResultBuilder]: For program point L540-9(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,535 INFO L854 garLoopResultBuilder]: At program point L438-3(lines 434 458) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,535 INFO L858 garLoopResultBuilder]: For program point L288-2(lines 288 298) no Hoare annotation was computed. [2022-01-10 12:24:37,535 INFO L854 garLoopResultBuilder]: At program point L397-1(lines 376 399) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,535 INFO L858 garLoopResultBuilder]: For program point L352-2(lines 346 357) no Hoare annotation was computed. [2022-01-10 12:24:37,535 INFO L858 garLoopResultBuilder]: For program point L352(lines 352 356) no Hoare annotation was computed. [2022-01-10 12:24:37,535 INFO L858 garLoopResultBuilder]: For program point L442-3(lines 442 450) no Hoare annotation was computed. [2022-01-10 12:24:37,535 INFO L858 garLoopResultBuilder]: For program point L540-11(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,535 INFO L858 garLoopResultBuilder]: For program point L289-3(lines 289 295) no Hoare annotation was computed. [2022-01-10 12:24:37,535 INFO L854 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,535 INFO L858 garLoopResultBuilder]: For program point L380(lines 380 386) no Hoare annotation was computed. [2022-01-10 12:24:37,535 INFO L854 garLoopResultBuilder]: At program point L472-1(lines 467 474) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,535 INFO L858 garLoopResultBuilder]: For program point L412-4(lines 412 429) no Hoare annotation was computed. [2022-01-10 12:24:37,536 INFO L854 garLoopResultBuilder]: At program point L546-3(lines 531 549) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,536 INFO L858 garLoopResultBuilder]: For program point L940-1(line 940) no Hoare annotation was computed. [2022-01-10 12:24:37,536 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-01-10 12:24:37,536 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-01-10 12:24:37,536 INFO L858 garLoopResultBuilder]: For program point L168(lines 168 172) no Hoare annotation was computed. [2022-01-10 12:24:37,536 INFO L858 garLoopResultBuilder]: For program point L380-2(lines 379 398) no Hoare annotation was computed. [2022-01-10 12:24:37,536 INFO L858 garLoopResultBuilder]: For program point L245-2(lines 245 251) no Hoare annotation was computed. [2022-01-10 12:24:37,536 INFO L854 garLoopResultBuilder]: At program point L404-5(lines 400 406) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,536 INFO L858 garLoopResultBuilder]: For program point L416-9(lines 416 424) no Hoare annotation was computed. [2022-01-10 12:24:37,536 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 940) no Hoare annotation was computed. [2022-01-10 12:24:37,536 INFO L854 garLoopResultBuilder]: At program point L941-1(lines 936 943) the Hoare annotation is: false [2022-01-10 12:24:37,536 INFO L861 garLoopResultBuilder]: At program point L367(lines 306 369) the Hoare annotation is: true [2022-01-10 12:24:37,536 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-01-10 12:24:37,536 INFO L854 garLoopResultBuilder]: At program point L168-2(lines 164 175) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 ~waterLevel~0Int) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:37,536 INFO L858 garLoopResultBuilder]: For program point L438(lines 438 455) no Hoare annotation was computed. [2022-01-10 12:24:37,536 INFO L858 garLoopResultBuilder]: For program point L387-1(lines 387 393) no Hoare annotation was computed. [2022-01-10 12:24:37,537 INFO L854 garLoopResultBuilder]: At program point L250-2(lines 241 254) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,537 INFO L854 garLoopResultBuilder]: At program point L412-5(lines 408 432) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,537 INFO L854 garLoopResultBuilder]: At program point L464-3(lines 459 466) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,537 INFO L854 garLoopResultBuilder]: At program point L404-6(lines 400 406) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) [2022-01-10 12:24:37,537 INFO L861 garLoopResultBuilder]: At program point L126(lines 118 128) the Hoare annotation is: true [2022-01-10 12:24:37,537 INFO L858 garLoopResultBuilder]: For program point L66-1(lines 66 70) no Hoare annotation was computed. [2022-01-10 12:24:37,537 INFO L854 garLoopResultBuilder]: At program point L260(lines 255 263) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 ~waterLevel~0Int) (<= 1 ~pumpRunning~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:24:37,537 INFO L858 garLoopResultBuilder]: For program point L412-2(lines 412 429) no Hoare annotation was computed. [2022-01-10 12:24:37,537 INFO L854 garLoopResultBuilder]: At program point L205(lines 200 208) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 .cse4 (<= ~methaneLevelCritical~0Int 0) .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4) (and (<= ~waterLevel~0Int 1) .cse2 .cse6 .cse4 (<= 1 ~waterLevel~0Int)))) [2022-01-10 12:24:37,537 INFO L858 garLoopResultBuilder]: For program point L540-6(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,537 INFO L858 garLoopResultBuilder]: For program point L380-6(lines 380 386) no Hoare annotation was computed. [2022-01-10 12:24:37,537 INFO L858 garLoopResultBuilder]: For program point L559(lines 559 563) no Hoare annotation was computed. [2022-01-10 12:24:37,537 INFO L858 garLoopResultBuilder]: For program point L245-1(lines 245 251) no Hoare annotation was computed. [2022-01-10 12:24:37,537 INFO L854 garLoopResultBuilder]: At program point L404-3(lines 400 406) the Hoare annotation is: false [2022-01-10 12:24:37,537 INFO L858 garLoopResultBuilder]: For program point L284(lines 284 301) no Hoare annotation was computed. [2022-01-10 12:24:37,538 INFO L858 garLoopResultBuilder]: For program point L540-8(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,538 INFO L858 garLoopResultBuilder]: For program point L168-6(lines 168 172) no Hoare annotation was computed. [2022-01-10 12:24:37,538 INFO L858 garLoopResultBuilder]: For program point L380-8(lines 379 398) no Hoare annotation was computed. [2022-01-10 12:24:37,538 INFO L858 garLoopResultBuilder]: For program point L559-2(lines 559 563) no Hoare annotation was computed. [2022-01-10 12:24:37,538 INFO L854 garLoopResultBuilder]: At program point L250-1(lines 241 254) the Hoare annotation is: (let ((.cse3 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse4 (< ~waterLevel~0Int 4294967296)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (<= 0 ~waterLevel~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse3 .cse4 .cse0 .cse1 .cse5 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse3 .cse4 .cse0 .cse1 .cse5 .cse2 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 12:24:37,538 INFO L854 garLoopResultBuilder]: At program point L412-3(lines 408 432) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int)) (.cse6 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1))) (.cse2 (<= 1 ~systemActive~0Int)) (.cse7 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0Int 0) .cse5) (and .cse0 .cse6 .cse1 .cse2 .cse7 .cse3 .cse4 .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) .cse5) (and (<= ~waterLevel~0Int 1) .cse6 .cse2 .cse7 .cse4 (<= 1 ~waterLevel~0Int) .cse8))) [2022-01-10 12:24:37,538 INFO L854 garLoopResultBuilder]: At program point L491(lines 486 494) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) (and .cse0 .cse1 .cse5 .cse2 .cse6 .cse3 .cse4) (and (<= ~waterLevel~0Int 1) .cse5 .cse2 .cse6 .cse4 (<= 1 ~waterLevel~0Int)))) [2022-01-10 12:24:37,538 INFO L854 garLoopResultBuilder]: At program point L284-1(lines 276 304) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse5 (< ~waterLevel~0Int 4294967296)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (<= 0 ~waterLevel~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int) .cse3) (and .cse4 .cse5 .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse4 .cse5 .cse0 .cse6 .cse2 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:37,538 INFO L854 garLoopResultBuilder]: At program point L546-2(lines 531 549) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,538 INFO L854 garLoopResultBuilder]: At program point L168-8(lines 164 175) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,538 INFO L858 garLoopResultBuilder]: For program point L438-4(lines 438 455) no Hoare annotation was computed. [2022-01-10 12:24:37,538 INFO L858 garLoopResultBuilder]: For program point L387-5(lines 387 393) no Hoare annotation was computed. [2022-01-10 12:24:37,538 INFO L854 garLoopResultBuilder]: At program point L565(lines 550 568) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~6#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 ~waterLevel~0Int) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~3#1Int|) (<= 1 ~pumpRunning~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~6#1Int| 1))) [2022-01-10 12:24:37,538 INFO L858 garLoopResultBuilder]: For program point L540-3(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,538 INFO L854 garLoopResultBuilder]: At program point L438-1(lines 434 458) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0Int 0) .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4) (and (<= ~waterLevel~0Int 1) .cse2 .cse6 .cse4 (<= 1 ~waterLevel~0Int)))) [2022-01-10 12:24:37,539 INFO L858 garLoopResultBuilder]: For program point L288(lines 288 298) no Hoare annotation was computed. [2022-01-10 12:24:37,539 INFO L854 garLoopResultBuilder]: At program point L397(lines 376 399) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse5 (< ~waterLevel~0Int 4294967296)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (<= 0 ~waterLevel~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int) .cse3) (and .cse4 .cse5 .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse4 .cse5 .cse0 .cse6 .cse2 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:37,539 INFO L858 garLoopResultBuilder]: For program point L416-6(lines 416 424) no Hoare annotation was computed. [2022-01-10 12:24:37,539 INFO L854 garLoopResultBuilder]: At program point L260-2(lines 255 263) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,539 INFO L858 garLoopResultBuilder]: For program point L412-10(lines 412 429) no Hoare annotation was computed. [2022-01-10 12:24:37,539 INFO L854 garLoopResultBuilder]: At program point L205-2(lines 200 208) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:37,539 INFO L858 garLoopResultBuilder]: For program point L442(lines 442 450) no Hoare annotation was computed. [2022-01-10 12:24:37,539 INFO L858 garLoopResultBuilder]: For program point L540-5(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,539 INFO L858 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2022-01-10 12:24:37,539 INFO L854 garLoopResultBuilder]: At program point L464-2(lines 459 466) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,539 INFO L854 garLoopResultBuilder]: At program point L404-4(lines 400 406) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) [2022-01-10 12:24:37,539 INFO L858 garLoopResultBuilder]: For program point L559-6(lines 559 563) no Hoare annotation was computed. [2022-01-10 12:24:37,539 INFO L858 garLoopResultBuilder]: For program point L245-5(lines 245 251) no Hoare annotation was computed. [2022-01-10 12:24:37,539 INFO L854 garLoopResultBuilder]: At program point L404-11(lines 400 406) the Hoare annotation is: false [2022-01-10 12:24:37,539 INFO L858 garLoopResultBuilder]: For program point L284-4(lines 284 301) no Hoare annotation was computed. [2022-01-10 12:24:37,539 INFO L854 garLoopResultBuilder]: At program point L472(lines 467 474) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~6#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 ~waterLevel~0Int) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~3#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~6#1Int| 1))) [2022-01-10 12:24:37,539 INFO L858 garLoopResultBuilder]: For program point L412(lines 412 429) no Hoare annotation was computed. [2022-01-10 12:24:37,540 INFO L854 garLoopResultBuilder]: At program point L546-1(lines 531 549) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0)) (.cse6 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse7 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse8 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 (<= ~waterLevel~0Int 1) .cse1 .cse2 .cse3 .cse4 .cse5 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse6 .cse7 .cse1 .cse2 .cse3 .cse8 .cse4 .cse5) (and .cse6 .cse7 .cse2 .cse3 .cse8 .cse5 (<= ~methaneLevelCritical~0Int 0)) (and .cse6 .cse7 .cse2 .cse3 .cse8 .cse5 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 12:24:37,540 INFO L858 garLoopResultBuilder]: For program point L940(line 940) no Hoare annotation was computed. [2022-01-10 12:24:37,540 INFO L858 garLoopResultBuilder]: For program point L559-8(lines 559 563) no Hoare annotation was computed. [2022-01-10 12:24:37,540 INFO L854 garLoopResultBuilder]: At program point L250-5(lines 241 254) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,540 INFO L854 garLoopResultBuilder]: At program point L412-11(lines 408 432) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,540 INFO L854 garLoopResultBuilder]: At program point L491-2(lines 486 494) the Hoare annotation is: false [2022-01-10 12:24:37,540 INFO L854 garLoopResultBuilder]: At program point L284-5(lines 276 304) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,540 INFO L858 garLoopResultBuilder]: For program point L245(lines 245 251) no Hoare annotation was computed. [2022-01-10 12:24:37,540 INFO L854 garLoopResultBuilder]: At program point L404-1(lines 400 406) the Hoare annotation is: false [2022-01-10 12:24:37,540 INFO L858 garLoopResultBuilder]: For program point L416-3(lines 416 424) no Hoare annotation was computed. [2022-01-10 12:24:37,540 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 940) no Hoare annotation was computed. [2022-01-10 12:24:37,540 INFO L854 garLoopResultBuilder]: At program point L941(lines 936 943) the Hoare annotation is: false [2022-01-10 12:24:37,540 INFO L854 garLoopResultBuilder]: At program point L565-2(lines 550 568) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,540 INFO L858 garLoopResultBuilder]: For program point L540-15(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,540 INFO L854 garLoopResultBuilder]: At program point L438-5(lines 434 458) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,540 INFO L858 garLoopResultBuilder]: For program point L288-4(lines 288 298) no Hoare annotation was computed. [2022-01-10 12:24:37,540 INFO L854 garLoopResultBuilder]: At program point L397-2(lines 376 399) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,541 INFO L854 garLoopResultBuilder]: At program point L250(lines 241 254) the Hoare annotation is: false [2022-01-10 12:24:37,541 INFO L854 garLoopResultBuilder]: At program point L412-1(lines 408 432) the Hoare annotation is: false [2022-01-10 12:24:37,541 INFO L854 garLoopResultBuilder]: At program point L464-1(lines 459 466) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0Int 0) .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) .cse5))) [2022-01-10 12:24:37,541 INFO L854 garLoopResultBuilder]: At program point L404-2(lines 400 406) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1))) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0))) (or (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) .cse0 (< ~waterLevel~0Int 4294967296) .cse1 .cse2 (<= 0 ~waterLevel~0Int) .cse3 .cse4) (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0Int) .cse4))) [2022-01-10 12:24:37,541 INFO L858 garLoopResultBuilder]: For program point L442-6(lines 442 450) no Hoare annotation was computed. [2022-01-10 12:24:37,541 INFO L858 garLoopResultBuilder]: For program point L540-17(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,541 INFO L858 garLoopResultBuilder]: For program point L289-6(lines 289 295) no Hoare annotation was computed. [2022-01-10 12:24:37,541 INFO L858 garLoopResultBuilder]: For program point L540(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,541 INFO L854 garLoopResultBuilder]: At program point L472-2(lines 467 474) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,541 INFO L858 garLoopResultBuilder]: For program point L412-8(lines 412 429) no Hoare annotation was computed. [2022-01-10 12:24:37,541 INFO L854 garLoopResultBuilder]: At program point L546-5(lines 531 549) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,541 INFO L858 garLoopResultBuilder]: For program point L940-2(line 940) no Hoare annotation was computed. [2022-01-10 12:24:37,541 INFO L858 garLoopResultBuilder]: For program point L540-2(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,541 INFO L858 garLoopResultBuilder]: For program point L245-4(lines 245 251) no Hoare annotation was computed. [2022-01-10 12:24:37,541 INFO L854 garLoopResultBuilder]: At program point L404-9(lines 400 406) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,541 INFO L858 garLoopResultBuilder]: For program point L416-15(lines 416 424) no Hoare annotation was computed. [2022-01-10 12:24:37,541 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 940) no Hoare annotation was computed. [2022-01-10 12:24:37,542 INFO L854 garLoopResultBuilder]: At program point L941-2(lines 936 943) the Hoare annotation is: false [2022-01-10 12:24:37,542 INFO L854 garLoopResultBuilder]: At program point L546(lines 531 549) the Hoare annotation is: false [2022-01-10 12:24:37,542 INFO L854 garLoopResultBuilder]: At program point L250-4(lines 241 254) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,542 INFO L854 garLoopResultBuilder]: At program point L412-9(lines 408 432) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,542 INFO L854 garLoopResultBuilder]: At program point L464-5(lines 459 466) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,542 INFO L854 garLoopResultBuilder]: At program point L404-10(lines 400 406) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) [2022-01-10 12:24:37,542 INFO L858 garLoopResultBuilder]: For program point L416(lines 416 424) no Hoare annotation was computed. [2022-01-10 12:24:37,542 INFO L858 garLoopResultBuilder]: For program point L540-12(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,542 INFO L854 garLoopResultBuilder]: At program point L464(lines 459 466) the Hoare annotation is: false [2022-01-10 12:24:37,542 INFO L854 garLoopResultBuilder]: At program point L404(lines 400 406) the Hoare annotation is: false [2022-01-10 12:24:37,542 INFO L858 garLoopResultBuilder]: For program point L540-14(lines 540 544) no Hoare annotation was computed. [2022-01-10 12:24:37,542 INFO L854 garLoopResultBuilder]: At program point L546-4(lines 531 549) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,542 INFO L858 garLoopResultBuilder]: For program point L416-12(lines 416 424) no Hoare annotation was computed. [2022-01-10 12:24:37,542 INFO L854 garLoopResultBuilder]: At program point L464-4(lines 459 466) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0)) [2022-01-10 12:24:37,542 INFO L854 garLoopResultBuilder]: At program point L404-8(lines 400 406) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 1)) (= ~methAndRunningLastTime~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~1#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~3#1Int| 0)) [2022-01-10 12:24:37,547 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:37,548 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 12:24:37,662 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:24:37 BasicIcfg [2022-01-10 12:24:37,662 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 12:24:37,662 INFO L158 Benchmark]: Toolchain (without parser) took 12333.32ms. Allocated memory was 199.2MB in the beginning and 570.4MB in the end (delta: 371.2MB). Free memory was 147.4MB in the beginning and 381.6MB in the end (delta: -234.1MB). Peak memory consumption was 310.9MB. Max. memory is 8.0GB. [2022-01-10 12:24:37,662 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 199.2MB. Free memory was 164.6MB in the beginning and 164.5MB in the end (delta: 136.3kB). There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 12:24:37,662 INFO L158 Benchmark]: CACSL2BoogieTranslator took 522.71ms. Allocated memory is still 199.2MB. Free memory was 147.3MB in the beginning and 160.3MB in the end (delta: -13.0MB). Peak memory consumption was 12.1MB. Max. memory is 8.0GB. [2022-01-10 12:24:37,663 INFO L158 Benchmark]: Boogie Procedure Inliner took 72.89ms. Allocated memory is still 199.2MB. Free memory was 160.3MB in the beginning and 156.6MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2022-01-10 12:24:37,663 INFO L158 Benchmark]: Boogie Preprocessor took 28.86ms. Allocated memory is still 199.2MB. Free memory was 156.6MB in the beginning and 154.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 12:24:37,663 INFO L158 Benchmark]: RCFGBuilder took 571.55ms. Allocated memory is still 199.2MB. Free memory was 154.0MB in the beginning and 129.9MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. [2022-01-10 12:24:37,664 INFO L158 Benchmark]: IcfgTransformer took 89.43ms. Allocated memory is still 199.2MB. Free memory was 129.9MB in the beginning and 120.5MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. [2022-01-10 12:24:37,664 INFO L158 Benchmark]: TraceAbstraction took 11032.47ms. Allocated memory was 199.2MB in the beginning and 570.4MB in the end (delta: 371.2MB). Free memory was 119.9MB in the beginning and 381.6MB in the end (delta: -261.6MB). Peak memory consumption was 283.1MB. Max. memory is 8.0GB. [2022-01-10 12:24:37,667 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 199.2MB. Free memory was 164.6MB in the beginning and 164.5MB in the end (delta: 136.3kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 522.71ms. Allocated memory is still 199.2MB. Free memory was 147.3MB in the beginning and 160.3MB in the end (delta: -13.0MB). Peak memory consumption was 12.1MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 72.89ms. Allocated memory is still 199.2MB. Free memory was 160.3MB in the beginning and 156.6MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 28.86ms. Allocated memory is still 199.2MB. Free memory was 156.6MB in the beginning and 154.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 571.55ms. Allocated memory is still 199.2MB. Free memory was 154.0MB in the beginning and 129.9MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. * IcfgTransformer took 89.43ms. Allocated memory is still 199.2MB. Free memory was 129.9MB in the beginning and 120.5MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. * TraceAbstraction took 11032.47ms. Allocated memory was 199.2MB in the beginning and 570.4MB in the end (delta: 371.2MB). Free memory was 119.9MB in the beginning and 381.6MB in the end (delta: -261.6MB). Peak memory consumption was 283.1MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 940]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 940]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 940]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 169 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 10.9s, OverallIterations: 13, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3634 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3634 mSDsluCounter, 6253 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3859 mSDsCounter, 154 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 470 IncrementalHoareTripleChecker+Invalid, 624 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 154 mSolverCounterUnsat, 2394 mSDtfsCounter, 470 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 224 GetRequests, 164 SyntacticMatches, 5 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 120 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=812occurred in iteration=12, InterpolantAutomatonStates: 73, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 13 MinimizatonAttempts, 2714 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 80 LocationsWithAnnotation, 80 PreInvPairs, 328 NumberOfFragments, 2548 HoareAnnotationTreeSize, 80 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 1.6s HoareSimplificationTime, 80 FomulaSimplificationsInter, 280763 FormulaSimplificationTreeSizeReductionInter, 4.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 745 NumberOfCodeBlocks, 745 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 802 ConstructedInterpolants, 0 QuantifiedInterpolants, 3534 SizeOfPredicates, 4 NumberOfNonLiveVariables, 609 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 126/144 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && 0bv32 == \result)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && 0bv32 == \result) - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: ((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 200]: Loop Invariant Derived loop invariant: ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32))) || (((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((((~bvule32(tmp___0, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp))) || ((((((((~bvule32(tmp___0, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 255]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 550]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 550]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, tmp___0) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 459]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 434]: Loop Invariant Derived loop invariant: (~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 255]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: (~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 459]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 459]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, tmp) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp___0) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 200]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 459]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 434]: Loop Invariant Derived loop invariant: ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 970]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: ((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 434]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 200]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 459]: Loop Invariant Derived loop invariant: (~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: ((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || (((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 459]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 268]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 550]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 255]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) RESULT: Ultimate proved your program to be correct! [2022-01-10 12:24:37,753 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request...