/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 12:24:28,374 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 12:24:28,376 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 12:24:28,436 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 12:24:28,436 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 12:24:28,438 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 12:24:28,441 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 12:24:28,443 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 12:24:28,445 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 12:24:28,452 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 12:24:28,452 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 12:24:28,453 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 12:24:28,454 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 12:24:28,455 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 12:24:28,456 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 12:24:28,458 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 12:24:28,459 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 12:24:28,460 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 12:24:28,461 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 12:24:28,465 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 12:24:28,466 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 12:24:28,467 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 12:24:28,468 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 12:24:28,468 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 12:24:28,473 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 12:24:28,473 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 12:24:28,473 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 12:24:28,474 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 12:24:28,475 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 12:24:28,475 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 12:24:28,475 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 12:24:28,476 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 12:24:28,477 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 12:24:28,477 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 12:24:28,478 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 12:24:28,478 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 12:24:28,479 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 12:24:28,479 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 12:24:28,479 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 12:24:28,479 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 12:24:28,480 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 12:24:28,481 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf [2022-01-10 12:24:28,505 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 12:24:28,505 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 12:24:28,506 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 12:24:28,506 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 12:24:28,507 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 12:24:28,507 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 12:24:28,507 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 12:24:28,507 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 12:24:28,507 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 12:24:28,507 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 12:24:28,508 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 12:24:28,508 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 12:24:28,508 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 12:24:28,508 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 12:24:28,508 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 12:24:28,508 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 12:24:28,508 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 12:24:28,508 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 12:24:28,508 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 12:24:28,508 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 12:24:28,508 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 12:24:28,509 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:24:28,509 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 12:24:28,510 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 12:24:28,510 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 12:24:28,510 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 12:24:28,510 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 12:24:28,510 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 12:24:28,510 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 12:24:28,510 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 12:24:28,510 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 12:24:28,510 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 12:24:28,511 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 12:24:28,511 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_BITWISE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 12:24:28,698 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 12:24:28,714 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 12:24:28,716 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 12:24:28,717 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 12:24:28,718 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 12:24:28,719 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c [2022-01-10 12:24:28,771 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7b1fe6c3e/2ecdba5e826041009546901d177fdebe/FLAG59f9d5412 [2022-01-10 12:24:29,138 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 12:24:29,138 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c [2022-01-10 12:24:29,146 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7b1fe6c3e/2ecdba5e826041009546901d177fdebe/FLAG59f9d5412 [2022-01-10 12:24:29,181 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7b1fe6c3e/2ecdba5e826041009546901d177fdebe [2022-01-10 12:24:29,183 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 12:24:29,184 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 12:24:29,187 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 12:24:29,187 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 12:24:29,189 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 12:24:29,190 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,191 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7f82bf9b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29, skipping insertion in model container [2022-01-10 12:24:29,191 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,195 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 12:24:29,263 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:24:29,523 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-01-10 12:24:29,524 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:29,542 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 12:24:29,546 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:24:29,580 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-01-10 12:24:29,581 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:29,584 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 12:24:29,619 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-01-10 12:24:29,619 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:29,631 INFO L208 MainTranslator]: Completed translation [2022-01-10 12:24:29,632 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29 WrapperNode [2022-01-10 12:24:29,632 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 12:24:29,632 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 12:24:29,633 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 12:24:29,633 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 12:24:29,639 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,650 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,696 INFO L137 Inliner]: procedures = 60, calls = 158, calls flagged for inlining = 55, calls inlined = 81, statements flattened = 625 [2022-01-10 12:24:29,696 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 12:24:29,697 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 12:24:29,697 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 12:24:29,697 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 12:24:29,702 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,703 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,706 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,706 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,713 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,720 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,722 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,736 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 12:24:29,737 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 12:24:29,737 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 12:24:29,737 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 12:24:29,738 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29" (1/1) ... [2022-01-10 12:24:29,744 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:24:29,758 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:24:29,767 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 12:24:29,777 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 12:24:29,791 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 12:24:29,791 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 12:24:29,792 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 12:24:29,792 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 12:24:29,840 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 12:24:29,841 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 12:24:30,128 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 12:24:30,134 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 12:24:30,134 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 12:24:30,135 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:30 BoogieIcfgContainer [2022-01-10 12:24:30,136 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 12:24:30,136 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 12:24:30,136 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 12:24:30,137 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 12:24:30,139 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:30" (1/1) ... [2022-01-10 12:24:30,250 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:24:30 BasicIcfg [2022-01-10 12:24:30,251 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 12:24:30,252 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 12:24:30,252 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 12:24:30,254 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 12:24:30,254 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 12:24:29" (1/4) ... [2022-01-10 12:24:30,255 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4d18558c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:24:30, skipping insertion in model container [2022-01-10 12:24:30,255 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:29" (2/4) ... [2022-01-10 12:24:30,255 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4d18558c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:24:30, skipping insertion in model container [2022-01-10 12:24:30,255 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:30" (3/4) ... [2022-01-10 12:24:30,255 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4d18558c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:24:30, skipping insertion in model container [2022-01-10 12:24:30,255 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:24:30" (4/4) ... [2022-01-10 12:24:30,256 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product52.cil.cTransformedIcfg [2022-01-10 12:24:30,259 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 12:24:30,260 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 12:24:30,289 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 12:24:30,293 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 12:24:30,294 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 12:24:30,305 INFO L276 IsEmpty]: Start isEmpty. Operand has 174 states, 170 states have (on average 1.4) internal successors, (238), 173 states have internal predecessors, (238), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-10 12:24:30,309 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:30,309 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:30,310 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:30,313 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:30,314 INFO L85 PathProgramCache]: Analyzing trace with hash -312105872, now seen corresponding path program 1 times [2022-01-10 12:24:30,321 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:30,322 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [64312631] [2022-01-10 12:24:30,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:30,323 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:30,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:30,550 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:30,551 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:30,551 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [64312631] [2022-01-10 12:24:30,552 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [64312631] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:30,552 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:30,552 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:30,553 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2058042687] [2022-01-10 12:24:30,554 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:30,558 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 12:24:30,558 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:30,582 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 12:24:30,582 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:24:30,587 INFO L87 Difference]: Start difference. First operand has 174 states, 170 states have (on average 1.4) internal successors, (238), 173 states have internal predecessors, (238), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:30,634 INFO L93 Difference]: Finished difference Result 337 states and 464 transitions. [2022-01-10 12:24:30,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 12:24:30,635 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-10 12:24:30,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:30,644 INFO L225 Difference]: With dead ends: 337 [2022-01-10 12:24:30,644 INFO L226 Difference]: Without dead ends: 164 [2022-01-10 12:24:30,647 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:24:30,650 INFO L933 BasicCegarLoop]: 228 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:30,651 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 228 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:30,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2022-01-10 12:24:30,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 164. [2022-01-10 12:24:30,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 161 states have (on average 1.3664596273291925) internal successors, (220), 163 states have internal predecessors, (220), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 220 transitions. [2022-01-10 12:24:30,692 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 220 transitions. Word has length 19 [2022-01-10 12:24:30,692 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:30,692 INFO L470 AbstractCegarLoop]: Abstraction has 164 states and 220 transitions. [2022-01-10 12:24:30,693 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,694 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 220 transitions. [2022-01-10 12:24:30,695 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-10 12:24:30,695 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:30,695 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:30,695 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 12:24:30,695 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:30,697 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:30,697 INFO L85 PathProgramCache]: Analyzing trace with hash 1352428722, now seen corresponding path program 1 times [2022-01-10 12:24:30,697 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:30,697 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1829970417] [2022-01-10 12:24:30,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:30,698 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:30,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:30,785 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:30,786 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:30,786 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1829970417] [2022-01-10 12:24:30,786 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1829970417] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:30,786 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:30,786 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:30,786 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1904457597] [2022-01-10 12:24:30,786 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:30,787 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:30,787 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:30,787 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:30,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:30,788 INFO L87 Difference]: Start difference. First operand 164 states and 220 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:30,818 INFO L93 Difference]: Finished difference Result 384 states and 519 transitions. [2022-01-10 12:24:30,818 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:30,818 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-10 12:24:30,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:30,819 INFO L225 Difference]: With dead ends: 384 [2022-01-10 12:24:30,819 INFO L226 Difference]: Without dead ends: 228 [2022-01-10 12:24:30,820 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:30,821 INFO L933 BasicCegarLoop]: 229 mSDtfsCounter, 202 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 202 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:30,821 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [202 Valid, 309 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:30,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2022-01-10 12:24:30,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 219. [2022-01-10 12:24:30,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 219 states, 216 states have (on average 1.375) internal successors, (297), 218 states have internal predecessors, (297), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 219 states to 219 states and 297 transitions. [2022-01-10 12:24:30,833 INFO L78 Accepts]: Start accepts. Automaton has 219 states and 297 transitions. Word has length 20 [2022-01-10 12:24:30,833 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:30,834 INFO L470 AbstractCegarLoop]: Abstraction has 219 states and 297 transitions. [2022-01-10 12:24:30,834 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,834 INFO L276 IsEmpty]: Start isEmpty. Operand 219 states and 297 transitions. [2022-01-10 12:24:30,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-10 12:24:30,835 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:30,835 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:30,835 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 12:24:30,835 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:30,835 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:30,835 INFO L85 PathProgramCache]: Analyzing trace with hash -703290023, now seen corresponding path program 1 times [2022-01-10 12:24:30,835 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:30,836 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1686744947] [2022-01-10 12:24:30,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:30,836 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:30,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:30,864 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:30,865 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:30,865 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1686744947] [2022-01-10 12:24:30,865 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1686744947] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:30,865 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:30,865 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:30,865 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1339592875] [2022-01-10 12:24:30,865 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:30,866 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:30,866 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:30,866 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:30,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:30,866 INFO L87 Difference]: Start difference. First operand 219 states and 297 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:30,937 INFO L93 Difference]: Finished difference Result 490 states and 663 transitions. [2022-01-10 12:24:30,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:30,937 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-10 12:24:30,938 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:30,939 INFO L225 Difference]: With dead ends: 490 [2022-01-10 12:24:30,939 INFO L226 Difference]: Without dead ends: 279 [2022-01-10 12:24:30,940 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:30,940 INFO L933 BasicCegarLoop]: 226 mSDtfsCounter, 141 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:30,941 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [141 Valid, 334 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:30,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 279 states. [2022-01-10 12:24:30,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 279 to 273. [2022-01-10 12:24:30,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 270 states have (on average 1.325925925925926) internal successors, (358), 272 states have internal predecessors, (358), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 358 transitions. [2022-01-10 12:24:30,953 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 358 transitions. Word has length 25 [2022-01-10 12:24:30,953 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:30,953 INFO L470 AbstractCegarLoop]: Abstraction has 273 states and 358 transitions. [2022-01-10 12:24:30,953 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:30,954 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 358 transitions. [2022-01-10 12:24:30,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-01-10 12:24:30,954 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:30,954 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:30,954 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 12:24:30,955 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:30,955 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:30,955 INFO L85 PathProgramCache]: Analyzing trace with hash -2142947567, now seen corresponding path program 1 times [2022-01-10 12:24:30,955 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:30,955 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1445260589] [2022-01-10 12:24:30,956 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:30,956 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:30,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:31,010 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:31,010 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:31,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1445260589] [2022-01-10 12:24:31,010 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1445260589] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:31,010 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:31,010 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:31,011 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [93610155] [2022-01-10 12:24:31,011 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:31,012 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:31,013 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:31,013 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:31,013 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:31,014 INFO L87 Difference]: Start difference. First operand 273 states and 358 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:31,063 INFO L93 Difference]: Finished difference Result 538 states and 708 transitions. [2022-01-10 12:24:31,063 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:31,064 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-01-10 12:24:31,064 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:31,066 INFO L225 Difference]: With dead ends: 538 [2022-01-10 12:24:31,067 INFO L226 Difference]: Without dead ends: 532 [2022-01-10 12:24:31,067 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:31,075 INFO L933 BasicCegarLoop]: 211 mSDtfsCounter, 176 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 176 SdHoareTripleChecker+Valid, 405 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:31,076 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [176 Valid, 405 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:31,077 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 532 states. [2022-01-10 12:24:31,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 532 to 532. [2022-01-10 12:24:31,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 532 states, 529 states have (on average 1.3156899810964082) internal successors, (696), 531 states have internal predecessors, (696), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 532 states to 532 states and 696 transitions. [2022-01-10 12:24:31,112 INFO L78 Accepts]: Start accepts. Automaton has 532 states and 696 transitions. Word has length 30 [2022-01-10 12:24:31,112 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:31,112 INFO L470 AbstractCegarLoop]: Abstraction has 532 states and 696 transitions. [2022-01-10 12:24:31,112 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,113 INFO L276 IsEmpty]: Start isEmpty. Operand 532 states and 696 transitions. [2022-01-10 12:24:31,115 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-01-10 12:24:31,115 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:31,116 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:31,116 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 12:24:31,116 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:31,116 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:31,116 INFO L85 PathProgramCache]: Analyzing trace with hash 960342338, now seen corresponding path program 1 times [2022-01-10 12:24:31,117 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:31,117 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1979008925] [2022-01-10 12:24:31,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:31,117 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:31,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:31,205 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:31,206 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:31,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1979008925] [2022-01-10 12:24:31,206 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1979008925] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:31,206 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:31,206 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:31,207 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [775220375] [2022-01-10 12:24:31,207 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:31,207 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:31,207 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:31,208 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:31,208 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:31,208 INFO L87 Difference]: Start difference. First operand 532 states and 696 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:31,455 INFO L93 Difference]: Finished difference Result 1479 states and 1922 transitions. [2022-01-10 12:24:31,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-10 12:24:31,456 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-01-10 12:24:31,456 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:31,459 INFO L225 Difference]: With dead ends: 1479 [2022-01-10 12:24:31,459 INFO L226 Difference]: Without dead ends: 955 [2022-01-10 12:24:31,461 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 12:24:31,465 INFO L933 BasicCegarLoop]: 515 mSDtfsCounter, 705 mSDsluCounter, 1056 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 705 SdHoareTripleChecker+Valid, 1571 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:31,465 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [705 Valid, 1571 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:31,467 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 955 states. [2022-01-10 12:24:31,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 955 to 414. [2022-01-10 12:24:31,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 411 states have (on average 1.3090024330900243) internal successors, (538), 413 states have internal predecessors, (538), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 538 transitions. [2022-01-10 12:24:31,531 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 538 transitions. Word has length 43 [2022-01-10 12:24:31,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:31,534 INFO L470 AbstractCegarLoop]: Abstraction has 414 states and 538 transitions. [2022-01-10 12:24:31,535 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,535 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 538 transitions. [2022-01-10 12:24:31,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-01-10 12:24:31,537 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:31,537 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:31,537 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 12:24:31,537 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:31,538 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:31,538 INFO L85 PathProgramCache]: Analyzing trace with hash 1471783642, now seen corresponding path program 1 times [2022-01-10 12:24:31,538 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:31,538 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1103611283] [2022-01-10 12:24:31,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:31,538 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:31,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:31,597 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:31,597 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:31,597 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1103611283] [2022-01-10 12:24:31,598 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1103611283] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:31,598 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:31,598 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:31,598 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2096700979] [2022-01-10 12:24:31,598 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:31,598 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:31,598 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:31,599 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:31,599 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:31,599 INFO L87 Difference]: Start difference. First operand 414 states and 538 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,663 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:31,663 INFO L93 Difference]: Finished difference Result 749 states and 973 transitions. [2022-01-10 12:24:31,663 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:31,664 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-01-10 12:24:31,665 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:31,666 INFO L225 Difference]: With dead ends: 749 [2022-01-10 12:24:31,666 INFO L226 Difference]: Without dead ends: 343 [2022-01-10 12:24:31,667 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:31,668 INFO L933 BasicCegarLoop]: 208 mSDtfsCounter, 102 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:31,668 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [102 Valid, 308 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:31,669 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-01-10 12:24:31,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-01-10 12:24:31,687 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 340 states have (on average 1.2441176470588236) internal successors, (423), 342 states have internal predecessors, (423), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 423 transitions. [2022-01-10 12:24:31,688 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 423 transitions. Word has length 56 [2022-01-10 12:24:31,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:31,689 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 423 transitions. [2022-01-10 12:24:31,690 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,690 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 423 transitions. [2022-01-10 12:24:31,690 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-01-10 12:24:31,691 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:31,691 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:31,691 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 12:24:31,691 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:31,691 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:31,692 INFO L85 PathProgramCache]: Analyzing trace with hash -1639670963, now seen corresponding path program 1 times [2022-01-10 12:24:31,692 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:31,692 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1817197167] [2022-01-10 12:24:31,692 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:31,692 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:31,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:31,749 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:31,749 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:31,750 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1817197167] [2022-01-10 12:24:31,750 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1817197167] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:31,750 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:31,750 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:31,750 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [19291184] [2022-01-10 12:24:31,750 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:31,750 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 12:24:31,750 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:31,751 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 12:24:31,751 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 12:24:31,751 INFO L87 Difference]: Start difference. First operand 343 states and 423 transitions. Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:31,832 INFO L93 Difference]: Finished difference Result 1332 states and 1640 transitions. [2022-01-10 12:24:31,832 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:24:31,832 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-01-10 12:24:31,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:31,835 INFO L225 Difference]: With dead ends: 1332 [2022-01-10 12:24:31,835 INFO L226 Difference]: Without dead ends: 997 [2022-01-10 12:24:31,836 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:31,837 INFO L933 BasicCegarLoop]: 225 mSDtfsCounter, 465 mSDsluCounter, 427 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 465 SdHoareTripleChecker+Valid, 652 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:31,837 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [465 Valid, 652 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:31,838 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 997 states. [2022-01-10 12:24:31,861 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 997 to 351. [2022-01-10 12:24:31,861 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 351 states, 348 states have (on average 1.2385057471264367) internal successors, (431), 350 states have internal predecessors, (431), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 351 states to 351 states and 431 transitions. [2022-01-10 12:24:31,862 INFO L78 Accepts]: Start accepts. Automaton has 351 states and 431 transitions. Word has length 57 [2022-01-10 12:24:31,862 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:31,862 INFO L470 AbstractCegarLoop]: Abstraction has 351 states and 431 transitions. [2022-01-10 12:24:31,862 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:31,862 INFO L276 IsEmpty]: Start isEmpty. Operand 351 states and 431 transitions. [2022-01-10 12:24:31,864 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-01-10 12:24:31,864 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:31,864 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:31,864 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 12:24:31,864 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:31,864 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:31,865 INFO L85 PathProgramCache]: Analyzing trace with hash 1193716334, now seen corresponding path program 1 times [2022-01-10 12:24:31,865 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:31,865 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2004101149] [2022-01-10 12:24:31,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:31,865 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:31,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:31,926 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:31,926 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:31,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2004101149] [2022-01-10 12:24:31,926 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2004101149] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:31,926 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:31,926 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:24:31,926 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1358375470] [2022-01-10 12:24:31,926 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:31,927 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:31,927 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:31,928 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:31,928 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:31,928 INFO L87 Difference]: Start difference. First operand 351 states and 431 transitions. Second operand has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,025 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:32,026 INFO L93 Difference]: Finished difference Result 919 states and 1129 transitions. [2022-01-10 12:24:32,026 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:24:32,026 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-01-10 12:24:32,026 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:32,028 INFO L225 Difference]: With dead ends: 919 [2022-01-10 12:24:32,028 INFO L226 Difference]: Without dead ends: 576 [2022-01-10 12:24:32,029 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:24:32,030 INFO L933 BasicCegarLoop]: 223 mSDtfsCounter, 312 mSDsluCounter, 632 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 855 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:32,033 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [312 Valid, 855 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:32,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576 states. [2022-01-10 12:24:32,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576 to 358. [2022-01-10 12:24:32,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 358 states, 355 states have (on average 1.2338028169014084) internal successors, (438), 357 states have internal predecessors, (438), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 358 states to 358 states and 438 transitions. [2022-01-10 12:24:32,058 INFO L78 Accepts]: Start accepts. Automaton has 358 states and 438 transitions. Word has length 57 [2022-01-10 12:24:32,059 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:32,059 INFO L470 AbstractCegarLoop]: Abstraction has 358 states and 438 transitions. [2022-01-10 12:24:32,059 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,059 INFO L276 IsEmpty]: Start isEmpty. Operand 358 states and 438 transitions. [2022-01-10 12:24:32,060 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-01-10 12:24:32,060 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:32,060 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:32,060 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 12:24:32,060 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:32,061 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:32,061 INFO L85 PathProgramCache]: Analyzing trace with hash -1515597716, now seen corresponding path program 1 times [2022-01-10 12:24:32,061 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:32,061 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1432282875] [2022-01-10 12:24:32,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:32,061 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:32,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:32,120 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:32,120 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:32,120 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1432282875] [2022-01-10 12:24:32,120 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1432282875] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:32,120 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:32,121 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:32,121 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [749046173] [2022-01-10 12:24:32,121 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:32,121 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:32,121 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:32,122 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:32,122 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:32,122 INFO L87 Difference]: Start difference. First operand 358 states and 438 transitions. Second operand has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:32,276 INFO L93 Difference]: Finished difference Result 1386 states and 1696 transitions. [2022-01-10 12:24:32,277 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 12:24:32,277 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-01-10 12:24:32,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:32,279 INFO L225 Difference]: With dead ends: 1386 [2022-01-10 12:24:32,279 INFO L226 Difference]: Without dead ends: 893 [2022-01-10 12:24:32,280 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 12:24:32,280 INFO L933 BasicCegarLoop]: 228 mSDtfsCounter, 639 mSDsluCounter, 701 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 639 SdHoareTripleChecker+Valid, 929 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:32,281 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [639 Valid, 929 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:32,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 893 states. [2022-01-10 12:24:32,312 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 893 to 459. [2022-01-10 12:24:32,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 459 states, 456 states have (on average 1.230263157894737) internal successors, (561), 458 states have internal predecessors, (561), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 459 states to 459 states and 561 transitions. [2022-01-10 12:24:32,313 INFO L78 Accepts]: Start accepts. Automaton has 459 states and 561 transitions. Word has length 57 [2022-01-10 12:24:32,314 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:32,314 INFO L470 AbstractCegarLoop]: Abstraction has 459 states and 561 transitions. [2022-01-10 12:24:32,314 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,314 INFO L276 IsEmpty]: Start isEmpty. Operand 459 states and 561 transitions. [2022-01-10 12:24:32,315 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-01-10 12:24:32,315 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:32,315 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:32,315 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 12:24:32,315 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:32,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:32,315 INFO L85 PathProgramCache]: Analyzing trace with hash 825326648, now seen corresponding path program 1 times [2022-01-10 12:24:32,315 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:32,316 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2078174945] [2022-01-10 12:24:32,316 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:32,316 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:32,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:32,374 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:32,374 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:32,374 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2078174945] [2022-01-10 12:24:32,374 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2078174945] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:32,374 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:32,374 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:32,374 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [907702007] [2022-01-10 12:24:32,374 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:32,375 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:32,375 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:32,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:32,375 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:32,375 INFO L87 Difference]: Start difference. First operand 459 states and 561 transitions. Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:32,411 INFO L93 Difference]: Finished difference Result 459 states and 561 transitions. [2022-01-10 12:24:32,411 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:32,411 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 65 [2022-01-10 12:24:32,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:32,412 INFO L225 Difference]: With dead ends: 459 [2022-01-10 12:24:32,412 INFO L226 Difference]: Without dead ends: 273 [2022-01-10 12:24:32,413 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:32,413 INFO L933 BasicCegarLoop]: 79 mSDtfsCounter, 39 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 86 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:32,414 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [39 Valid, 86 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:32,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273 states. [2022-01-10 12:24:32,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 273 to 273. [2022-01-10 12:24:32,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 272 states have (on average 1.2463235294117647) internal successors, (339), 272 states have internal predecessors, (339), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 339 transitions. [2022-01-10 12:24:32,446 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 339 transitions. Word has length 65 [2022-01-10 12:24:32,446 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:32,446 INFO L470 AbstractCegarLoop]: Abstraction has 273 states and 339 transitions. [2022-01-10 12:24:32,446 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,447 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 339 transitions. [2022-01-10 12:24:32,447 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-01-10 12:24:32,447 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:32,447 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:32,448 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-10 12:24:32,448 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:32,448 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:32,448 INFO L85 PathProgramCache]: Analyzing trace with hash -1970291119, now seen corresponding path program 1 times [2022-01-10 12:24:32,448 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:32,448 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1822600847] [2022-01-10 12:24:32,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:32,449 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:32,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:32,519 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 12:24:32,519 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:32,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1822600847] [2022-01-10 12:24:32,519 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1822600847] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:32,519 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:32,520 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:32,520 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [612053409] [2022-01-10 12:24:32,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:32,520 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:32,520 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:32,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:32,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:32,521 INFO L87 Difference]: Start difference. First operand 273 states and 339 transitions. Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 2 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,562 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:32,562 INFO L93 Difference]: Finished difference Result 652 states and 812 transitions. [2022-01-10 12:24:32,563 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:32,563 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 2 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 72 [2022-01-10 12:24:32,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:32,565 INFO L225 Difference]: With dead ends: 652 [2022-01-10 12:24:32,565 INFO L226 Difference]: Without dead ends: 387 [2022-01-10 12:24:32,565 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:32,566 INFO L933 BasicCegarLoop]: 78 mSDtfsCounter, 27 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:32,566 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 143 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:32,566 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 387 states. [2022-01-10 12:24:32,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 387 to 387. [2022-01-10 12:24:32,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 387 states, 386 states have (on average 1.2305699481865284) internal successors, (475), 386 states have internal predecessors, (475), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 387 states to 387 states and 475 transitions. [2022-01-10 12:24:32,597 INFO L78 Accepts]: Start accepts. Automaton has 387 states and 475 transitions. Word has length 72 [2022-01-10 12:24:32,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:32,597 INFO L470 AbstractCegarLoop]: Abstraction has 387 states and 475 transitions. [2022-01-10 12:24:32,598 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 2 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:32,598 INFO L276 IsEmpty]: Start isEmpty. Operand 387 states and 475 transitions. [2022-01-10 12:24:32,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-01-10 12:24:32,598 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:32,598 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:32,599 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 12:24:32,599 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:32,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:32,599 INFO L85 PathProgramCache]: Analyzing trace with hash -578031081, now seen corresponding path program 1 times [2022-01-10 12:24:32,599 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:32,599 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [932922308] [2022-01-10 12:24:32,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:32,600 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:32,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:32,711 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 12:24:32,711 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:32,711 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [932922308] [2022-01-10 12:24:32,711 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [932922308] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 12:24:32,711 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2007894070] [2022-01-10 12:24:32,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:32,712 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 12:24:32,712 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:24:32,713 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 12:24:32,749 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-10 12:24:32,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:32,848 INFO L263 TraceCheckSpWp]: Trace formula consists of 619 conjuncts, 12 conjunts are in the unsatisfiable core [2022-01-10 12:24:32,852 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 12:24:33,368 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 12:24:33,369 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 12:24:33,532 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 12:24:33,533 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2007894070] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 12:24:33,533 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 12:24:33,533 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 6] total 9 [2022-01-10 12:24:33,533 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [556826099] [2022-01-10 12:24:33,533 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 12:24:33,534 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-01-10 12:24:33,534 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:33,534 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-01-10 12:24:33,534 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2022-01-10 12:24:33,534 INFO L87 Difference]: Start difference. First operand 387 states and 475 transitions. Second operand has 10 states, 10 states have (on average 12.7) internal successors, (127), 9 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:34,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:34,364 INFO L93 Difference]: Finished difference Result 3351 states and 4171 transitions. [2022-01-10 12:24:34,365 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-01-10 12:24:34,365 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 12.7) internal successors, (127), 9 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-01-10 12:24:34,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:34,374 INFO L225 Difference]: With dead ends: 3351 [2022-01-10 12:24:34,374 INFO L226 Difference]: Without dead ends: 3086 [2022-01-10 12:24:34,376 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 139 SyntacticMatches, 5 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 110 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=163, Invalid=389, Unknown=0, NotChecked=0, Total=552 [2022-01-10 12:24:34,376 INFO L933 BasicCegarLoop]: 249 mSDtfsCounter, 1050 mSDsluCounter, 1247 mSDsCounter, 0 mSdLazyCounter, 187 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1050 SdHoareTripleChecker+Valid, 1496 SdHoareTripleChecker+Invalid, 225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 187 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:34,377 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1050 Valid, 1496 Invalid, 225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 187 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 12:24:34,379 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3086 states. [2022-01-10 12:24:34,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3086 to 1037. [2022-01-10 12:24:34,521 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1037 states, 1036 states have (on average 1.2316602316602316) internal successors, (1276), 1036 states have internal predecessors, (1276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:34,523 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1037 states to 1037 states and 1276 transitions. [2022-01-10 12:24:34,524 INFO L78 Accepts]: Start accepts. Automaton has 1037 states and 1276 transitions. Word has length 74 [2022-01-10 12:24:34,524 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:34,524 INFO L470 AbstractCegarLoop]: Abstraction has 1037 states and 1276 transitions. [2022-01-10 12:24:34,525 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 12.7) internal successors, (127), 9 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:34,525 INFO L276 IsEmpty]: Start isEmpty. Operand 1037 states and 1276 transitions. [2022-01-10 12:24:34,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-01-10 12:24:34,529 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:34,529 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:34,548 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-01-10 12:24:34,743 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-10 12:24:34,743 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:34,743 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:34,743 INFO L85 PathProgramCache]: Analyzing trace with hash 929520728, now seen corresponding path program 1 times [2022-01-10 12:24:34,744 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:34,744 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [886958044] [2022-01-10 12:24:34,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:34,744 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:34,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:34,785 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-01-10 12:24:34,785 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:34,785 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [886958044] [2022-01-10 12:24:34,785 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [886958044] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:34,785 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:34,785 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:24:34,786 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1474066236] [2022-01-10 12:24:34,786 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:34,786 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:34,786 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:34,786 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:34,786 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:34,787 INFO L87 Difference]: Start difference. First operand 1037 states and 1276 transitions. Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:34,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:34,898 INFO L93 Difference]: Finished difference Result 1920 states and 2341 transitions. [2022-01-10 12:24:34,898 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:24:34,899 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-01-10 12:24:34,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:34,901 INFO L225 Difference]: With dead ends: 1920 [2022-01-10 12:24:34,901 INFO L226 Difference]: Without dead ends: 891 [2022-01-10 12:24:34,904 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:24:34,904 INFO L933 BasicCegarLoop]: 131 mSDtfsCounter, 234 mSDsluCounter, 265 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 234 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:34,905 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [234 Valid, 396 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:34,906 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 891 states. [2022-01-10 12:24:34,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 891 to 362. [2022-01-10 12:24:34,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 362 states, 361 states have (on average 1.1939058171745152) internal successors, (431), 361 states have internal predecessors, (431), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:34,951 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 362 states to 362 states and 431 transitions. [2022-01-10 12:24:34,952 INFO L78 Accepts]: Start accepts. Automaton has 362 states and 431 transitions. Word has length 74 [2022-01-10 12:24:34,952 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:34,952 INFO L470 AbstractCegarLoop]: Abstraction has 362 states and 431 transitions. [2022-01-10 12:24:34,952 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:34,952 INFO L276 IsEmpty]: Start isEmpty. Operand 362 states and 431 transitions. [2022-01-10 12:24:34,953 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2022-01-10 12:24:34,953 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:34,953 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:34,953 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-01-10 12:24:34,953 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:34,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:34,954 INFO L85 PathProgramCache]: Analyzing trace with hash -1456288709, now seen corresponding path program 1 times [2022-01-10 12:24:34,954 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:34,954 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [170177828] [2022-01-10 12:24:34,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:34,954 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:34,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:34,984 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-01-10 12:24:34,985 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:34,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [170177828] [2022-01-10 12:24:34,985 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [170177828] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:34,985 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:34,985 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:34,985 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1202286716] [2022-01-10 12:24:34,985 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:34,986 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:34,986 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:34,986 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:34,986 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:34,987 INFO L87 Difference]: Start difference. First operand 362 states and 431 transitions. Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:35,032 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:35,033 INFO L93 Difference]: Finished difference Result 705 states and 839 transitions. [2022-01-10 12:24:35,033 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:35,033 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 77 [2022-01-10 12:24:35,033 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:35,033 INFO L225 Difference]: With dead ends: 705 [2022-01-10 12:24:35,033 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 12:24:35,034 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:35,035 INFO L933 BasicCegarLoop]: 92 mSDtfsCounter, 28 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:35,035 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [28 Valid, 158 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:35,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 12:24:35,035 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 12:24:35,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:35,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 12:24:35,035 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 77 [2022-01-10 12:24:35,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:35,036 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 12:24:35,036 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:35,036 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 12:24:35,036 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 12:24:35,038 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 12:24:35,038 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 12:24:35,038 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 12:24:35,038 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-01-10 12:24:35,040 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 12:24:59,887 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 12:24:59,887 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 12:24:59,887 INFO L854 garLoopResultBuilder]: At program point L518(lines 514 520) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:59,887 INFO L854 garLoopResultBuilder]: At program point L511(lines 507 513) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:59,887 INFO L854 garLoopResultBuilder]: At program point L526(lines 521 529) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:59,887 INFO L858 garLoopResultBuilder]: For program point L442(lines 442 449) no Hoare annotation was computed. [2022-01-10 12:24:59,887 INFO L854 garLoopResultBuilder]: At program point L414(lines 410 416) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:59,887 INFO L858 garLoopResultBuilder]: For program point L442-2(lines 442 449) no Hoare annotation was computed. [2022-01-10 12:24:59,888 INFO L854 garLoopResultBuilder]: At program point L463(lines 458 465) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:59,888 INFO L861 garLoopResultBuilder]: At program point L451(lines 432 454) the Hoare annotation is: true [2022-01-10 12:24:59,888 INFO L854 garLoopResultBuilder]: At program point L66-2(lines 66 115) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (= ~methAndRunningLastTime~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 1 ~systemActive~0Int)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse3 .cse5 .cse8 .cse6) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse9 .cse4 .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:59,888 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 12:24:59,888 INFO L854 garLoopResultBuilder]: At program point L116(lines 65 117) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse2 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse6 .cse2 .cse3 (<= 1 ~pumpRunning~0Int)) (and .cse1 .cse4 .cse5 .cse6 .cse2 .cse3))) [2022-01-10 12:24:59,888 INFO L858 garLoopResultBuilder]: For program point L67(lines 66 115) no Hoare annotation was computed. [2022-01-10 12:24:59,888 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 12:24:59,888 INFO L858 garLoopResultBuilder]: For program point L142-3(lines 142 148) no Hoare annotation was computed. [2022-01-10 12:24:59,888 INFO L858 garLoopResultBuilder]: For program point L68(lines 68 72) no Hoare annotation was computed. [2022-01-10 12:24:59,888 INFO L858 garLoopResultBuilder]: For program point L538-3(lines 538 542) no Hoare annotation was computed. [2022-01-10 12:24:59,888 INFO L858 garLoopResultBuilder]: For program point L142-5(lines 141 160) no Hoare annotation was computed. [2022-01-10 12:24:59,888 INFO L858 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2022-01-10 12:24:59,888 INFO L854 garLoopResultBuilder]: At program point L538-5(lines 534 545) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,888 INFO L858 garLoopResultBuilder]: For program point L200-2(lines 200 217) no Hoare annotation was computed. [2022-01-10 12:24:59,888 INFO L858 garLoopResultBuilder]: For program point L149-3(lines 149 155) no Hoare annotation was computed. [2022-01-10 12:24:59,888 INFO L858 garLoopResultBuilder]: For program point L550(lines 550 554) no Hoare annotation was computed. [2022-01-10 12:24:59,889 INFO L858 garLoopResultBuilder]: For program point L76-2(lines 76 82) no Hoare annotation was computed. [2022-01-10 12:24:59,889 INFO L854 garLoopResultBuilder]: At program point L630-1(lines 625 633) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,889 INFO L858 garLoopResultBuilder]: For program point L174-6(lines 174 191) no Hoare annotation was computed. [2022-01-10 12:24:59,889 INFO L854 garLoopResultBuilder]: At program point L575-1(lines 570 578) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~pumpRunning~0Int)) (and .cse0 .cse4 .cse1 .cse2) (and .cse4 .cse1 .cse2 .cse3))) [2022-01-10 12:24:59,889 INFO L854 garLoopResultBuilder]: At program point L550-2(lines 546 557) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0Int 0)) (.cse5 (= ~methAndRunningLastTime~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse6 (<= 1 ~systemActive~0Int)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 (= ~systemActive~0Int 0) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:59,889 INFO L858 garLoopResultBuilder]: For program point L86(lines 86 92) no Hoare annotation was computed. [2022-01-10 12:24:59,889 INFO L858 garLoopResultBuilder]: For program point L321-3(lines 321 325) no Hoare annotation was computed. [2022-01-10 12:24:59,889 INFO L858 garLoopResultBuilder]: For program point L615-3(lines 615 621) no Hoare annotation was computed. [2022-01-10 12:24:59,889 INFO L854 garLoopResultBuilder]: At program point L166-7(lines 162 168) the Hoare annotation is: false [2022-01-10 12:24:59,889 INFO L858 garLoopResultBuilder]: For program point L474-2(lines 474 491) no Hoare annotation was computed. [2022-01-10 12:24:59,889 INFO L858 garLoopResultBuilder]: For program point L562(lines 562 566) no Hoare annotation was computed. [2022-01-10 12:24:59,889 INFO L858 garLoopResultBuilder]: For program point L86-2(lines 86 92) no Hoare annotation was computed. [2022-01-10 12:24:59,889 INFO L858 garLoopResultBuilder]: For program point L321-5(lines 321 325) no Hoare annotation was computed. [2022-01-10 12:24:59,889 INFO L854 garLoopResultBuilder]: At program point L620-3(lines 611 624) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:59,889 INFO L854 garLoopResultBuilder]: At program point L174-7(lines 170 194) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0) .cse0 (= ~pumpRunning~0Int 0) .cse1))) [2022-01-10 12:24:59,889 INFO L854 garLoopResultBuilder]: At program point L253-1(lines 248 256) the Hoare annotation is: false [2022-01-10 12:24:59,889 INFO L854 garLoopResultBuilder]: At program point L474-3(lines 466 494) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0))) (or (and (<= 1 ~systemActive~0Int) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)) (and (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-01-10 12:24:59,890 INFO L854 garLoopResultBuilder]: At program point L562-2(lines 558 569) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (= ~methAndRunningLastTime~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 1 ~systemActive~0Int)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse3 .cse5 .cse8 .cse6) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse9 .cse4 .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:59,890 INFO L858 garLoopResultBuilder]: For program point L96(lines 96 111) no Hoare annotation was computed. [2022-01-10 12:24:59,890 INFO L854 garLoopResultBuilder]: At program point L327-1(lines 312 330) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,890 INFO L858 garLoopResultBuilder]: For program point L302-9(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,890 INFO L854 garLoopResultBuilder]: At program point L200-3(lines 196 220) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1))) [2022-01-10 12:24:59,890 INFO L858 garLoopResultBuilder]: For program point L478-2(lines 478 488) no Hoare annotation was computed. [2022-01-10 12:24:59,890 INFO L854 garLoopResultBuilder]: At program point L159-1(lines 138 161) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0))) (or (and (<= 1 ~systemActive~0Int) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)) (and (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-01-10 12:24:59,890 INFO L854 garLoopResultBuilder]: At program point L351(lines 346 353) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse5 (< ~waterLevel~0Int 4294967296)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (<= 0 ~waterLevel~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int) .cse3) (and .cse4 .cse5 .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse4 .cse5 .cse0 .cse6 .cse2 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:59,890 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 110) no Hoare annotation was computed. [2022-01-10 12:24:59,890 INFO L858 garLoopResultBuilder]: For program point L204-3(lines 204 212) no Hoare annotation was computed. [2022-01-10 12:24:59,890 INFO L858 garLoopResultBuilder]: For program point L302-11(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,890 INFO L858 garLoopResultBuilder]: For program point L479-3(lines 479 485) no Hoare annotation was computed. [2022-01-10 12:24:59,890 INFO L854 garLoopResultBuilder]: At program point L366-2(lines 366 380) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0))) (or (and (<= 1 ~systemActive~0Int) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)) (and (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-01-10 12:24:59,890 INFO L858 garLoopResultBuilder]: For program point L104-2(lines 96 111) no Hoare annotation was computed. [2022-01-10 12:24:59,890 INFO L858 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2022-01-10 12:24:59,891 INFO L854 garLoopResultBuilder]: At program point L234-2(lines 229 236) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:24:59,891 INFO L858 garLoopResultBuilder]: For program point L174-4(lines 174 191) no Hoare annotation was computed. [2022-01-10 12:24:59,891 INFO L854 garLoopResultBuilder]: At program point L308-3(lines 293 311) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:59,891 INFO L858 garLoopResultBuilder]: For program point L1005-1(line 1005) no Hoare annotation was computed. [2022-01-10 12:24:59,891 INFO L861 garLoopResultBuilder]: At program point L381(lines 356 385) the Hoare annotation is: true [2022-01-10 12:24:59,891 INFO L858 garLoopResultBuilder]: For program point L367(line 367) no Hoare annotation was computed. [2022-01-10 12:24:59,891 INFO L858 garLoopResultBuilder]: For program point L142(lines 142 148) no Hoare annotation was computed. [2022-01-10 12:24:59,891 INFO L854 garLoopResultBuilder]: At program point L234(lines 229 236) the Hoare annotation is: (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) (= ~pumpRunning~0Int 0) (<= 0 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) [2022-01-10 12:24:59,891 INFO L858 garLoopResultBuilder]: For program point L335-2(lines 335 341) no Hoare annotation was computed. [2022-01-10 12:24:59,891 INFO L858 garLoopResultBuilder]: For program point L615-2(lines 615 621) no Hoare annotation was computed. [2022-01-10 12:24:59,891 INFO L854 garLoopResultBuilder]: At program point L166-5(lines 162 168) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,891 INFO L858 garLoopResultBuilder]: For program point L178-9(lines 178 186) no Hoare annotation was computed. [2022-01-10 12:24:59,891 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2022-01-10 12:24:59,891 INFO L854 garLoopResultBuilder]: At program point L1006-1(lines 1001 1008) the Hoare annotation is: false [2022-01-10 12:24:59,892 INFO L861 garLoopResultBuilder]: At program point L121(lines 56 123) the Hoare annotation is: true [2022-01-10 12:24:59,892 INFO L858 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2022-01-10 12:24:59,892 INFO L858 garLoopResultBuilder]: For program point L538(lines 538 542) no Hoare annotation was computed. [2022-01-10 12:24:59,892 INFO L858 garLoopResultBuilder]: For program point L142-2(lines 141 160) no Hoare annotation was computed. [2022-01-10 12:24:59,892 INFO L854 garLoopResultBuilder]: At program point L343(lines 331 345) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~waterLevel~0Int)) (.cse0 (= ~systemActive~0Int 0))) (or (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 (<= 0 ~waterLevel~0Int) .cse2) (and .cse3 .cse0 .cse1 .cse2 .cse4 (<= ~methaneLevelCritical~0Int 0)) (and (or (and .cse3 .cse1 .cse2 .cse4 (= ~methAndRunningLastTime~0Int 0)) (and .cse3 .cse1 .cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 1)) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 0))) .cse0))) [2022-01-10 12:24:59,892 INFO L854 garLoopResultBuilder]: At program point L620-2(lines 611 624) the Hoare annotation is: false [2022-01-10 12:24:59,892 INFO L854 garLoopResultBuilder]: At program point L174-5(lines 170 194) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,892 INFO L854 garLoopResultBuilder]: At program point L226-3(lines 221 228) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,892 INFO L854 garLoopResultBuilder]: At program point L166-6(lines 162 168) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:24:59,892 INFO L861 garLoopResultBuilder]: At program point L426(lines 418 428) the Hoare annotation is: true [2022-01-10 12:24:59,892 INFO L858 garLoopResultBuilder]: For program point L370-1(lines 370 374) no Hoare annotation was computed. [2022-01-10 12:24:59,892 INFO L854 garLoopResultBuilder]: At program point L538-2(lines 534 545) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 ~waterLevel~0Int) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,892 INFO L858 garLoopResultBuilder]: For program point L200(lines 200 217) no Hoare annotation was computed. [2022-01-10 12:24:59,892 INFO L858 garLoopResultBuilder]: For program point L149-1(lines 149 155) no Hoare annotation was computed. [2022-01-10 12:24:59,892 INFO L858 garLoopResultBuilder]: For program point L302-6(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,893 INFO L858 garLoopResultBuilder]: For program point L142-6(lines 142 148) no Hoare annotation was computed. [2022-01-10 12:24:59,893 INFO L854 garLoopResultBuilder]: At program point L630(lines 625 633) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 ~waterLevel~0Int) (<= 1 ~pumpRunning~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:24:59,893 INFO L858 garLoopResultBuilder]: For program point L174-2(lines 174 191) no Hoare annotation was computed. [2022-01-10 12:24:59,893 INFO L854 garLoopResultBuilder]: At program point L575(lines 570 578) the Hoare annotation is: (let ((.cse1 (= ~systemActive~0Int 0)) (.cse9 (<= 1 ~pumpRunning~0Int)) (.cse5 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse6 (< ~waterLevel~0Int 4294967296)) (.cse8 (<= 0 ~waterLevel~0Int)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse7 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse8 .cse3 (<= ~methaneLevelCritical~0Int 0) .cse9) (and .cse5 .cse6 .cse1 .cse2 .cse8 .cse3) (and .cse5 .cse6 .cse7 .cse8 .cse3 (= ~methAndRunningLastTime~0Int 0) .cse9) (and .cse5 .cse6 .cse7 .cse2 .cse8 .cse3) (and .cse0 .cse7 .cse2 .cse3 .cse4))) [2022-01-10 12:24:59,893 INFO L858 garLoopResultBuilder]: For program point L302-8(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,893 INFO L858 garLoopResultBuilder]: For program point L538-6(lines 538 542) no Hoare annotation was computed. [2022-01-10 12:24:59,893 INFO L858 garLoopResultBuilder]: For program point L142-8(lines 141 160) no Hoare annotation was computed. [2022-01-10 12:24:59,893 INFO L858 garLoopResultBuilder]: For program point L321(lines 321 325) no Hoare annotation was computed. [2022-01-10 12:24:59,893 INFO L858 garLoopResultBuilder]: For program point L615-1(lines 615 621) no Hoare annotation was computed. [2022-01-10 12:24:59,893 INFO L854 garLoopResultBuilder]: At program point L166-3(lines 162 168) the Hoare annotation is: false [2022-01-10 12:24:59,893 INFO L858 garLoopResultBuilder]: For program point L474(lines 474 491) no Hoare annotation was computed. [2022-01-10 12:24:59,893 INFO L854 garLoopResultBuilder]: At program point L308-2(lines 293 311) the Hoare annotation is: false [2022-01-10 12:24:59,893 INFO L854 garLoopResultBuilder]: At program point L538-8(lines 534 545) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,893 INFO L858 garLoopResultBuilder]: For program point L200-4(lines 200 217) no Hoare annotation was computed. [2022-01-10 12:24:59,893 INFO L858 garLoopResultBuilder]: For program point L149-5(lines 149 155) no Hoare annotation was computed. [2022-01-10 12:24:59,893 INFO L858 garLoopResultBuilder]: For program point L321-2(lines 321 325) no Hoare annotation was computed. [2022-01-10 12:24:59,894 INFO L854 garLoopResultBuilder]: At program point L620-1(lines 611 624) the Hoare annotation is: (let ((.cse3 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse4 (< ~waterLevel~0Int 4294967296)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (<= 0 ~waterLevel~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse3 .cse4 .cse0 .cse1 .cse5 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse3 .cse4 .cse0 .cse1 .cse5 .cse2 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 12:24:59,894 INFO L854 garLoopResultBuilder]: At program point L174-3(lines 170 194) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1))) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse5 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse6 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse7 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= 1 ~pumpRunning~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse5 .cse6 .cse0 .cse1 .cse2 .cse3 .cse7 .cse4) (and .cse5 .cse6 .cse2 .cse7 .cse4 (<= ~methaneLevelCritical~0Int 0) .cse8) (and .cse5 .cse6 .cse2 .cse7 .cse4 (= ~methAndRunningLastTime~0Int 0) .cse8))) [2022-01-10 12:24:59,894 INFO L854 garLoopResultBuilder]: At program point L253(lines 248 256) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse5 (<= 1 ~waterLevel~0Int)) (.cse6 (= ~systemActive~0Int 0)) (.cse7 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse8 (< ~waterLevel~0Int 4294967296)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse9 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse1 .cse3 .cse4 .cse5) (and .cse7 .cse8 .cse2 .cse9 .cse4 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) (and .cse7 .cse8 .cse6 .cse1 .cse3 .cse9 .cse4) (and .cse7 .cse8 .cse1 .cse2 .cse3 .cse9 .cse4))) [2022-01-10 12:24:59,894 INFO L854 garLoopResultBuilder]: At program point L474-1(lines 466 494) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (= ~methAndRunningLastTime~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 1 ~systemActive~0Int)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse3 .cse5 .cse8 .cse6) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse9 .cse4 .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:59,894 INFO L858 garLoopResultBuilder]: For program point L178-6(lines 178 186) no Hoare annotation was computed. [2022-01-10 12:24:59,894 INFO L854 garLoopResultBuilder]: At program point L630-2(lines 625 633) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,894 INFO L858 garLoopResultBuilder]: For program point L174-10(lines 174 191) no Hoare annotation was computed. [2022-01-10 12:24:59,894 INFO L854 garLoopResultBuilder]: At program point L575-2(lines 570 578) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~pumpRunning~0Int)) (and .cse0 .cse4 .cse1 .cse2) (and .cse4 .cse1 .cse2 .cse3))) [2022-01-10 12:24:59,894 INFO L854 garLoopResultBuilder]: At program point L327(lines 312 330) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 1)) (= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~2#1Int| 1) (<= 1 ~waterLevel~0Int) (= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int| 1) (<= 1 ~pumpRunning~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 0)) [2022-01-10 12:24:59,894 INFO L858 garLoopResultBuilder]: For program point L302-3(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,894 INFO L854 garLoopResultBuilder]: At program point L200-1(lines 196 220) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0Int 0) .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4) (and (<= ~waterLevel~0Int 1) .cse2 .cse6 .cse4 (<= 1 ~waterLevel~0Int)))) [2022-01-10 12:24:59,894 INFO L858 garLoopResultBuilder]: For program point L478(lines 478 488) no Hoare annotation was computed. [2022-01-10 12:24:59,894 INFO L854 garLoopResultBuilder]: At program point L159(lines 138 161) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (= ~methAndRunningLastTime~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 1 ~systemActive~0Int)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse3 .cse5 .cse8 .cse6) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse9 .cse4 .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:59,894 INFO L854 garLoopResultBuilder]: At program point L226-2(lines 221 228) the Hoare annotation is: false [2022-01-10 12:24:59,894 INFO L854 garLoopResultBuilder]: At program point L166-4(lines 162 168) the Hoare annotation is: false [2022-01-10 12:24:59,895 INFO L858 garLoopResultBuilder]: For program point L321-6(lines 321 325) no Hoare annotation was computed. [2022-01-10 12:24:59,895 INFO L858 garLoopResultBuilder]: For program point L615-5(lines 615 621) no Hoare annotation was computed. [2022-01-10 12:24:59,895 INFO L854 garLoopResultBuilder]: At program point L166-11(lines 162 168) the Hoare annotation is: false [2022-01-10 12:24:59,895 INFO L858 garLoopResultBuilder]: For program point L474-4(lines 474 491) no Hoare annotation was computed. [2022-01-10 12:24:59,895 INFO L858 garLoopResultBuilder]: For program point L204(lines 204 212) no Hoare annotation was computed. [2022-01-10 12:24:59,895 INFO L858 garLoopResultBuilder]: For program point L302-5(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,895 INFO L858 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2022-01-10 12:24:59,895 INFO L858 garLoopResultBuilder]: For program point L321-8(lines 321 325) no Hoare annotation was computed. [2022-01-10 12:24:59,895 INFO L854 garLoopResultBuilder]: At program point L620-5(lines 611 624) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:59,895 INFO L854 garLoopResultBuilder]: At program point L174-11(lines 170 194) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0) .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3 .cse4))) [2022-01-10 12:24:59,895 INFO L854 garLoopResultBuilder]: At program point L253-2(lines 248 256) the Hoare annotation is: false [2022-01-10 12:24:59,895 INFO L854 garLoopResultBuilder]: At program point L474-5(lines 466 494) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0))) (or (and (<= 1 ~systemActive~0Int) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)) (and (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-01-10 12:24:59,895 INFO L854 garLoopResultBuilder]: At program point L234-1(lines 229 236) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 1)) (= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~2#1Int| 1) (<= 1 ~waterLevel~0Int) (= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int| 1) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 0)) [2022-01-10 12:24:59,895 INFO L858 garLoopResultBuilder]: For program point L174(lines 174 191) no Hoare annotation was computed. [2022-01-10 12:24:59,895 INFO L854 garLoopResultBuilder]: At program point L308-1(lines 293 311) the Hoare annotation is: (let ((.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int| 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse2 (< ~waterLevel~0Int 4294967296)) (.cse4 (<= 1 ~systemActive~0Int)) (.cse5 (= ~pumpRunning~0Int 0)) (.cse6 (<= 0 ~waterLevel~0Int)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse1 (<= ~waterLevel~0Int 1) .cse3 .cse4 .cse5 .cse7 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse2 .cse4 .cse5 .cse6 .cse7 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse2 .cse4 .cse5 .cse6 .cse7 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 12:24:59,895 INFO L858 garLoopResultBuilder]: For program point L1005(line 1005) no Hoare annotation was computed. [2022-01-10 12:24:59,895 INFO L854 garLoopResultBuilder]: At program point L327-2(lines 312 330) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,896 INFO L858 garLoopResultBuilder]: For program point L302-15(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,896 INFO L854 garLoopResultBuilder]: At program point L200-5(lines 196 220) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:24:59,896 INFO L858 garLoopResultBuilder]: For program point L478-4(lines 478 488) no Hoare annotation was computed. [2022-01-10 12:24:59,896 INFO L854 garLoopResultBuilder]: At program point L159-2(lines 138 161) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0))) (or (and (<= 1 ~systemActive~0Int) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)) (and (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-01-10 12:24:59,896 INFO L858 garLoopResultBuilder]: For program point L615(lines 615 621) no Hoare annotation was computed. [2022-01-10 12:24:59,896 INFO L854 garLoopResultBuilder]: At program point L166-1(lines 162 168) the Hoare annotation is: false [2022-01-10 12:24:59,896 INFO L858 garLoopResultBuilder]: For program point L178-3(lines 178 186) no Hoare annotation was computed. [2022-01-10 12:24:59,896 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2022-01-10 12:24:59,896 INFO L854 garLoopResultBuilder]: At program point L1006(lines 1001 1008) the Hoare annotation is: false [2022-01-10 12:24:59,896 INFO L858 garLoopResultBuilder]: For program point L204-6(lines 204 212) no Hoare annotation was computed. [2022-01-10 12:24:59,896 INFO L858 garLoopResultBuilder]: For program point L302-17(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,896 INFO L858 garLoopResultBuilder]: For program point L479-6(lines 479 485) no Hoare annotation was computed. [2022-01-10 12:24:59,896 INFO L854 garLoopResultBuilder]: At program point L620(lines 611 624) the Hoare annotation is: false [2022-01-10 12:24:59,896 INFO L854 garLoopResultBuilder]: At program point L174-1(lines 170 194) the Hoare annotation is: false [2022-01-10 12:24:59,896 INFO L854 garLoopResultBuilder]: At program point L226-1(lines 221 228) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0Int 0) .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) .cse5))) [2022-01-10 12:24:59,897 INFO L854 garLoopResultBuilder]: At program point L166-2(lines 162 168) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1))) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 .cse2 .cse3 (<= 0 ~waterLevel~0Int) .cse4))) [2022-01-10 12:24:59,897 INFO L854 garLoopResultBuilder]: At program point L234-3(lines 229 236) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:24:59,897 INFO L858 garLoopResultBuilder]: For program point L174-8(lines 174 191) no Hoare annotation was computed. [2022-01-10 12:24:59,897 INFO L854 garLoopResultBuilder]: At program point L308-5(lines 293 311) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:24:59,897 INFO L858 garLoopResultBuilder]: For program point L1005-2(line 1005) no Hoare annotation was computed. [2022-01-10 12:24:59,897 INFO L858 garLoopResultBuilder]: For program point L302(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,897 INFO L858 garLoopResultBuilder]: For program point L615-4(lines 615 621) no Hoare annotation was computed. [2022-01-10 12:24:59,897 INFO L854 garLoopResultBuilder]: At program point L166-9(lines 162 168) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,897 INFO L858 garLoopResultBuilder]: For program point L178-15(lines 178 186) no Hoare annotation was computed. [2022-01-10 12:24:59,897 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2022-01-10 12:24:59,897 INFO L854 garLoopResultBuilder]: At program point L1006-2(lines 1001 1008) the Hoare annotation is: false [2022-01-10 12:24:59,897 INFO L858 garLoopResultBuilder]: For program point L302-2(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,897 INFO L854 garLoopResultBuilder]: At program point L620-4(lines 611 624) the Hoare annotation is: false [2022-01-10 12:24:59,897 INFO L854 garLoopResultBuilder]: At program point L174-9(lines 170 194) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,897 INFO L854 garLoopResultBuilder]: At program point L226-5(lines 221 228) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:24:59,897 INFO L854 garLoopResultBuilder]: At program point L166-10(lines 162 168) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:24:59,897 INFO L854 garLoopResultBuilder]: At program point L308(lines 293 311) the Hoare annotation is: false [2022-01-10 12:24:59,897 INFO L858 garLoopResultBuilder]: For program point L302-12(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,898 INFO L858 garLoopResultBuilder]: For program point L178(lines 178 186) no Hoare annotation was computed. [2022-01-10 12:24:59,898 INFO L858 garLoopResultBuilder]: For program point L302-14(lines 302 306) no Hoare annotation was computed. [2022-01-10 12:24:59,898 INFO L854 garLoopResultBuilder]: At program point L226(lines 221 228) the Hoare annotation is: false [2022-01-10 12:24:59,898 INFO L854 garLoopResultBuilder]: At program point L166(lines 162 168) the Hoare annotation is: false [2022-01-10 12:24:59,898 INFO L854 garLoopResultBuilder]: At program point L308-4(lines 293 311) the Hoare annotation is: false [2022-01-10 12:24:59,898 INFO L858 garLoopResultBuilder]: For program point L178-12(lines 178 186) no Hoare annotation was computed. [2022-01-10 12:24:59,898 INFO L854 garLoopResultBuilder]: At program point L226-4(lines 221 228) the Hoare annotation is: false [2022-01-10 12:24:59,898 INFO L854 garLoopResultBuilder]: At program point L166-8(lines 162 168) the Hoare annotation is: false [2022-01-10 12:24:59,902 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:59,903 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 12:25:00,005 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:25:00 BasicIcfg [2022-01-10 12:25:00,005 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 12:25:00,005 INFO L158 Benchmark]: Toolchain (without parser) took 30820.79ms. Allocated memory was 241.2MB in the beginning and 821.0MB in the end (delta: 579.9MB). Free memory was 183.7MB in the beginning and 629.2MB in the end (delta: -445.5MB). Peak memory consumption was 483.5MB. Max. memory is 8.0GB. [2022-01-10 12:25:00,005 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 241.2MB. Free memory is still 201.2MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 12:25:00,006 INFO L158 Benchmark]: CACSL2BoogieTranslator took 444.99ms. Allocated memory was 241.2MB in the beginning and 333.4MB in the end (delta: 92.3MB). Free memory was 183.5MB in the beginning and 288.6MB in the end (delta: -105.1MB). Peak memory consumption was 6.9MB. Max. memory is 8.0GB. [2022-01-10 12:25:00,006 INFO L158 Benchmark]: Boogie Procedure Inliner took 63.96ms. Allocated memory is still 333.4MB. Free memory was 288.1MB in the beginning and 284.9MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 12:25:00,006 INFO L158 Benchmark]: Boogie Preprocessor took 39.66ms. Allocated memory is still 333.4MB. Free memory was 284.9MB in the beginning and 281.7MB in the end (delta: 3.2MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 12:25:00,006 INFO L158 Benchmark]: RCFGBuilder took 398.62ms. Allocated memory is still 333.4MB. Free memory was 281.7MB in the beginning and 256.6MB in the end (delta: 25.1MB). Peak memory consumption was 25.2MB. Max. memory is 8.0GB. [2022-01-10 12:25:00,007 INFO L158 Benchmark]: IcfgTransformer took 114.73ms. Allocated memory is still 333.4MB. Free memory was 256.6MB in the beginning and 247.2MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. [2022-01-10 12:25:00,007 INFO L158 Benchmark]: TraceAbstraction took 29752.90ms. Allocated memory was 333.4MB in the beginning and 821.0MB in the end (delta: 487.6MB). Free memory was 246.7MB in the beginning and 629.2MB in the end (delta: -382.6MB). Peak memory consumption was 454.7MB. Max. memory is 8.0GB. [2022-01-10 12:25:00,010 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 241.2MB. Free memory is still 201.2MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 444.99ms. Allocated memory was 241.2MB in the beginning and 333.4MB in the end (delta: 92.3MB). Free memory was 183.5MB in the beginning and 288.6MB in the end (delta: -105.1MB). Peak memory consumption was 6.9MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 63.96ms. Allocated memory is still 333.4MB. Free memory was 288.1MB in the beginning and 284.9MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 39.66ms. Allocated memory is still 333.4MB. Free memory was 284.9MB in the beginning and 281.7MB in the end (delta: 3.2MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 398.62ms. Allocated memory is still 333.4MB. Free memory was 281.7MB in the beginning and 256.6MB in the end (delta: 25.1MB). Peak memory consumption was 25.2MB. Max. memory is 8.0GB. * IcfgTransformer took 114.73ms. Allocated memory is still 333.4MB. Free memory was 256.6MB in the beginning and 247.2MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. * TraceAbstraction took 29752.90ms. Allocated memory was 333.4MB in the beginning and 821.0MB in the end (delta: 487.6MB). Free memory was 246.7MB in the beginning and 629.2MB in the end (delta: -382.6MB). Peak memory consumption was 454.7MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1005]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 1005]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 1005]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 174 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 29.6s, OverallIterations: 14, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 24.8s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4120 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4120 mSDsluCounter, 7870 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4948 mSDsCounter, 154 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 556 IncrementalHoareTripleChecker+Invalid, 710 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 154 mSolverCounterUnsat, 2922 mSDtfsCounter, 556 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 227 GetRequests, 166 SyntacticMatches, 5 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 120 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1037occurred in iteration=12, InterpolantAutomatonStates: 76, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 14 MinimizatonAttempts, 4432 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 83 LocationsWithAnnotation, 83 PreInvPairs, 270 NumberOfFragments, 3271 HoareAnnotationTreeSize, 83 FomulaSimplifications, 79422 FormulaSimplificationTreeSizeReduction, 17.0s HoareSimplificationTime, 83 FomulaSimplificationsInter, 421494 FormulaSimplificationTreeSizeReductionInter, 7.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 800 NumberOfCodeBlocks, 800 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 858 ConstructedInterpolants, 0 QuantifiedInterpolants, 3725 SizeOfPredicates, 4 NumberOfNonLiveVariables, 619 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 16 InterpolantComputations, 13 PerfectInterpolantSequences, 114/132 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: ((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 229]: Loop Invariant Derived loop invariant: (((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 229]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 514]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: ((((((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 570]: Loop Invariant Derived loop invariant: ((((((((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32))) || (((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning) - InvariantResult [Line: 570]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) - InvariantResult [Line: 546]: Loop Invariant Derived loop invariant: (((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: ((((((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: (((((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: ((((((((\result == 1bv32 && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && tmp___0 == 1bv32 - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 331]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (systemActive == 0bv32 && (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning))) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 56]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 570]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: ((((((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 229]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 229]: Loop Invariant Derived loop invariant: (((((((((\result == 1bv32 && ~bvule32(1bv32, tmp)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) && tmp___0 == 1bv32 - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 356]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-01-10 12:25:00,076 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...