/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 12:24:41,939 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 12:24:41,940 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 12:24:41,968 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 12:24:41,968 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 12:24:41,969 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 12:24:41,970 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 12:24:41,971 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 12:24:41,972 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 12:24:41,973 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 12:24:41,973 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 12:24:41,974 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 12:24:41,974 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 12:24:41,975 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 12:24:41,976 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 12:24:41,976 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 12:24:41,977 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 12:24:41,977 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 12:24:41,979 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 12:24:41,980 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 12:24:41,981 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 12:24:41,982 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 12:24:41,983 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 12:24:41,983 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 12:24:41,985 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 12:24:41,985 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 12:24:41,985 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 12:24:41,986 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 12:24:41,986 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 12:24:41,987 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 12:24:41,987 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 12:24:41,988 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 12:24:41,988 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 12:24:41,988 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 12:24:41,989 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 12:24:41,989 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 12:24:41,990 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 12:24:41,990 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 12:24:41,990 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 12:24:41,991 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 12:24:41,991 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 12:24:41,998 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf [2022-01-10 12:24:42,014 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 12:24:42,015 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 12:24:42,015 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 12:24:42,015 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 12:24:42,016 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 12:24:42,016 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 12:24:42,016 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 12:24:42,016 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 12:24:42,016 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 12:24:42,016 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 12:24:42,016 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 12:24:42,016 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 12:24:42,016 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 12:24:42,016 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 12:24:42,017 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 12:24:42,017 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 12:24:42,017 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 12:24:42,017 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 12:24:42,017 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 12:24:42,017 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 12:24:42,017 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 12:24:42,017 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:24:42,017 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 12:24:42,017 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 12:24:42,018 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 12:24:42,018 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 12:24:42,018 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 12:24:42,018 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 12:24:42,018 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 12:24:42,018 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 12:24:42,018 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 12:24:42,018 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 12:24:42,019 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 12:24:42,019 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_BITWISE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 12:24:42,194 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 12:24:42,210 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 12:24:42,211 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 12:24:42,212 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 12:24:42,216 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 12:24:42,217 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c [2022-01-10 12:24:42,270 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a7402cd9e/7be2f786d1614c42a9cd53a88817bd5d/FLAGda855ef54 [2022-01-10 12:24:42,687 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 12:24:42,687 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c [2022-01-10 12:24:42,699 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a7402cd9e/7be2f786d1614c42a9cd53a88817bd5d/FLAGda855ef54 [2022-01-10 12:24:43,047 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a7402cd9e/7be2f786d1614c42a9cd53a88817bd5d [2022-01-10 12:24:43,049 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 12:24:43,049 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 12:24:43,053 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 12:24:43,054 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 12:24:43,056 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 12:24:43,056 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,057 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4fe7fa99 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43, skipping insertion in model container [2022-01-10 12:24:43,057 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,061 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 12:24:43,104 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:24:43,285 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2022-01-10 12:24:43,310 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:43,325 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 12:24:43,330 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:24:43,351 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2022-01-10 12:24:43,363 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:43,372 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 12:24:43,411 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2022-01-10 12:24:43,422 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:24:43,434 INFO L208 MainTranslator]: Completed translation [2022-01-10 12:24:43,434 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43 WrapperNode [2022-01-10 12:24:43,434 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 12:24:43,435 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 12:24:43,435 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 12:24:43,435 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 12:24:43,441 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,451 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,502 INFO L137 Inliner]: procedures = 61, calls = 162, calls flagged for inlining = 59, calls inlined = 175, statements flattened = 1272 [2022-01-10 12:24:43,502 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 12:24:43,503 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 12:24:43,503 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 12:24:43,503 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 12:24:43,511 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,512 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,527 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,527 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,538 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,551 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,554 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,558 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 12:24:43,558 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 12:24:43,558 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 12:24:43,558 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 12:24:43,559 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43" (1/1) ... [2022-01-10 12:24:43,577 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:24:43,586 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:24:43,604 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 12:24:43,611 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 12:24:43,635 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 12:24:43,636 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 12:24:43,636 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 12:24:43,636 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 12:24:43,688 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 12:24:43,689 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 12:24:44,263 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 12:24:44,273 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 12:24:44,273 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 12:24:44,276 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:44 BoogieIcfgContainer [2022-01-10 12:24:44,276 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 12:24:44,277 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 12:24:44,277 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 12:24:44,278 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 12:24:44,280 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:44" (1/1) ... [2022-01-10 12:24:44,460 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:24:44 BasicIcfg [2022-01-10 12:24:44,460 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 12:24:44,461 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 12:24:44,461 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 12:24:44,463 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 12:24:44,463 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 12:24:43" (1/4) ... [2022-01-10 12:24:44,464 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5ee0c9c5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:24:44, skipping insertion in model container [2022-01-10 12:24:44,464 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:24:43" (2/4) ... [2022-01-10 12:24:44,464 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5ee0c9c5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:24:44, skipping insertion in model container [2022-01-10 12:24:44,464 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:24:44" (3/4) ... [2022-01-10 12:24:44,465 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5ee0c9c5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:24:44, skipping insertion in model container [2022-01-10 12:24:44,465 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:24:44" (4/4) ... [2022-01-10 12:24:44,465 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product62.cil.cTransformedIcfg [2022-01-10 12:24:44,469 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 12:24:44,469 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 12:24:44,508 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 12:24:44,514 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 12:24:44,514 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 12:24:44,533 INFO L276 IsEmpty]: Start isEmpty. Operand has 326 states, 322 states have (on average 1.3664596273291925) internal successors, (440), 325 states have internal predecessors, (440), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:44,538 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-10 12:24:44,538 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:44,539 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:44,539 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:44,542 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:44,543 INFO L85 PathProgramCache]: Analyzing trace with hash 1599537341, now seen corresponding path program 1 times [2022-01-10 12:24:44,551 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:44,551 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1388532820] [2022-01-10 12:24:44,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:44,552 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:44,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:44,763 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:44,764 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:44,764 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1388532820] [2022-01-10 12:24:44,765 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1388532820] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:44,765 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:44,765 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:44,766 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1463939388] [2022-01-10 12:24:44,768 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:44,771 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 12:24:44,772 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:44,796 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 12:24:44,797 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:24:44,800 INFO L87 Difference]: Start difference. First operand has 326 states, 322 states have (on average 1.3664596273291925) internal successors, (440), 325 states have internal predecessors, (440), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:44,859 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:44,859 INFO L93 Difference]: Finished difference Result 641 states and 868 transitions. [2022-01-10 12:24:44,861 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 12:24:44,862 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-10 12:24:44,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:44,876 INFO L225 Difference]: With dead ends: 641 [2022-01-10 12:24:44,876 INFO L226 Difference]: Without dead ends: 316 [2022-01-10 12:24:44,882 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:24:44,884 INFO L933 BasicCegarLoop]: 430 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 430 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:44,885 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 430 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:44,899 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-01-10 12:24:44,943 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 316. [2022-01-10 12:24:44,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 313 states have (on average 1.3482428115015974) internal successors, (422), 315 states have internal predecessors, (422), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:44,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 422 transitions. [2022-01-10 12:24:44,948 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 422 transitions. Word has length 19 [2022-01-10 12:24:44,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:44,949 INFO L470 AbstractCegarLoop]: Abstraction has 316 states and 422 transitions. [2022-01-10 12:24:44,949 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:44,950 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 422 transitions. [2022-01-10 12:24:44,951 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-10 12:24:44,951 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:44,951 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:44,951 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 12:24:44,952 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:44,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:44,953 INFO L85 PathProgramCache]: Analyzing trace with hash 508697301, now seen corresponding path program 1 times [2022-01-10 12:24:44,953 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:44,954 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1458237932] [2022-01-10 12:24:44,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:44,954 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:44,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:45,031 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:45,031 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:45,032 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1458237932] [2022-01-10 12:24:45,032 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1458237932] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:45,032 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:45,032 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:45,032 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1908123052] [2022-01-10 12:24:45,032 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:45,034 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:45,034 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:45,034 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:45,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:45,039 INFO L87 Difference]: Start difference. First operand 316 states and 422 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,062 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:45,062 INFO L93 Difference]: Finished difference Result 624 states and 836 transitions. [2022-01-10 12:24:45,063 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:45,063 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-10 12:24:45,063 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:45,065 INFO L225 Difference]: With dead ends: 624 [2022-01-10 12:24:45,065 INFO L226 Difference]: Without dead ends: 316 [2022-01-10 12:24:45,066 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:45,067 INFO L933 BasicCegarLoop]: 416 mSDtfsCounter, 406 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 406 SdHoareTripleChecker+Valid, 416 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:45,067 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [406 Valid, 416 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:45,069 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-01-10 12:24:45,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 316. [2022-01-10 12:24:45,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 313 states have (on average 1.3386581469648562) internal successors, (419), 315 states have internal predecessors, (419), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 419 transitions. [2022-01-10 12:24:45,083 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 419 transitions. Word has length 20 [2022-01-10 12:24:45,083 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:45,084 INFO L470 AbstractCegarLoop]: Abstraction has 316 states and 419 transitions. [2022-01-10 12:24:45,084 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,086 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 419 transitions. [2022-01-10 12:24:45,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-01-10 12:24:45,095 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:45,095 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:45,095 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 12:24:45,096 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:45,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:45,096 INFO L85 PathProgramCache]: Analyzing trace with hash 1770795515, now seen corresponding path program 1 times [2022-01-10 12:24:45,096 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:45,096 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1160743008] [2022-01-10 12:24:45,096 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:45,096 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:45,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:45,147 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:45,147 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:45,147 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1160743008] [2022-01-10 12:24:45,147 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1160743008] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:45,147 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:45,148 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:24:45,148 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1139132223] [2022-01-10 12:24:45,148 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:45,148 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:45,148 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:45,148 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:45,148 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:45,149 INFO L87 Difference]: Start difference. First operand 316 states and 419 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:45,226 INFO L93 Difference]: Finished difference Result 641 states and 845 transitions. [2022-01-10 12:24:45,226 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:45,226 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-01-10 12:24:45,226 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:45,227 INFO L225 Difference]: With dead ends: 641 [2022-01-10 12:24:45,227 INFO L226 Difference]: Without dead ends: 333 [2022-01-10 12:24:45,229 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:45,233 INFO L933 BasicCegarLoop]: 305 mSDtfsCounter, 226 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 74 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:45,233 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [226 Valid, 443 Invalid, 74 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:45,234 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2022-01-10 12:24:45,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 327. [2022-01-10 12:24:45,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 327 states, 324 states have (on average 1.2839506172839505) internal successors, (416), 326 states have internal predecessors, (416), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 416 transitions. [2022-01-10 12:24:45,261 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 416 transitions. Word has length 26 [2022-01-10 12:24:45,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:45,261 INFO L470 AbstractCegarLoop]: Abstraction has 327 states and 416 transitions. [2022-01-10 12:24:45,262 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,262 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 416 transitions. [2022-01-10 12:24:45,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 12:24:45,262 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:45,262 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:45,262 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 12:24:45,263 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:45,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:45,263 INFO L85 PathProgramCache]: Analyzing trace with hash -816370830, now seen corresponding path program 1 times [2022-01-10 12:24:45,263 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:45,263 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1906349158] [2022-01-10 12:24:45,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:45,263 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:45,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:45,329 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:45,329 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:45,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1906349158] [2022-01-10 12:24:45,329 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1906349158] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:45,329 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:45,329 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:45,329 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [105496378] [2022-01-10 12:24:45,330 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:45,331 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:45,331 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:45,332 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:45,332 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:45,332 INFO L87 Difference]: Start difference. First operand 327 states and 416 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:45,372 INFO L93 Difference]: Finished difference Result 646 states and 824 transitions. [2022-01-10 12:24:45,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:45,372 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 12:24:45,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:45,375 INFO L225 Difference]: With dead ends: 646 [2022-01-10 12:24:45,375 INFO L226 Difference]: Without dead ends: 640 [2022-01-10 12:24:45,376 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:45,381 INFO L933 BasicCegarLoop]: 317 mSDtfsCounter, 279 mSDsluCounter, 300 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 279 SdHoareTripleChecker+Valid, 617 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:45,382 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [279 Valid, 617 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:45,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 640 states. [2022-01-10 12:24:45,399 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 640 to 640. [2022-01-10 12:24:45,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 640 states, 637 states have (on average 1.2794348508634223) internal successors, (815), 639 states have internal predecessors, (815), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 640 states to 640 states and 815 transitions. [2022-01-10 12:24:45,401 INFO L78 Accepts]: Start accepts. Automaton has 640 states and 815 transitions. Word has length 33 [2022-01-10 12:24:45,402 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:45,403 INFO L470 AbstractCegarLoop]: Abstraction has 640 states and 815 transitions. [2022-01-10 12:24:45,403 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,403 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 815 transitions. [2022-01-10 12:24:45,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-01-10 12:24:45,405 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:45,405 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:45,406 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 12:24:45,406 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:45,406 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:45,406 INFO L85 PathProgramCache]: Analyzing trace with hash 1722438156, now seen corresponding path program 1 times [2022-01-10 12:24:45,406 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:45,407 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1336950162] [2022-01-10 12:24:45,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:45,407 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:45,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:45,487 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:45,488 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:45,488 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1336950162] [2022-01-10 12:24:45,488 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1336950162] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:45,488 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:45,488 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:24:45,488 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1827035236] [2022-01-10 12:24:45,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:45,488 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:45,488 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:45,489 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:45,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:45,489 INFO L87 Difference]: Start difference. First operand 640 states and 815 transitions. Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:45,645 INFO L93 Difference]: Finished difference Result 1658 states and 2078 transitions. [2022-01-10 12:24:45,645 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:24:45,646 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2022-01-10 12:24:45,646 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:45,648 INFO L225 Difference]: With dead ends: 1658 [2022-01-10 12:24:45,649 INFO L226 Difference]: Without dead ends: 1026 [2022-01-10 12:24:45,649 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:24:45,650 INFO L933 BasicCegarLoop]: 349 mSDtfsCounter, 456 mSDsluCounter, 953 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 1302 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:45,650 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [456 Valid, 1302 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:45,651 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1026 states. [2022-01-10 12:24:45,672 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1026 to 694. [2022-01-10 12:24:45,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 694 states, 691 states have (on average 1.2575976845151953) internal successors, (869), 693 states have internal predecessors, (869), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 694 states to 694 states and 869 transitions. [2022-01-10 12:24:45,677 INFO L78 Accepts]: Start accepts. Automaton has 694 states and 869 transitions. Word has length 59 [2022-01-10 12:24:45,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:45,679 INFO L470 AbstractCegarLoop]: Abstraction has 694 states and 869 transitions. [2022-01-10 12:24:45,679 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,679 INFO L276 IsEmpty]: Start isEmpty. Operand 694 states and 869 transitions. [2022-01-10 12:24:45,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-01-10 12:24:45,680 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:45,680 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:45,680 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 12:24:45,680 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:45,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:45,681 INFO L85 PathProgramCache]: Analyzing trace with hash -213222131, now seen corresponding path program 1 times [2022-01-10 12:24:45,681 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:45,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1121744752] [2022-01-10 12:24:45,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:45,681 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:45,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:45,724 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:45,724 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:45,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1121744752] [2022-01-10 12:24:45,724 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1121744752] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:45,724 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:45,724 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:45,724 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [305622695] [2022-01-10 12:24:45,724 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:45,725 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 12:24:45,725 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:45,725 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 12:24:45,725 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 12:24:45,725 INFO L87 Difference]: Start difference. First operand 694 states and 869 transitions. Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:45,874 INFO L93 Difference]: Finished difference Result 1826 states and 2246 transitions. [2022-01-10 12:24:45,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:24:45,875 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2022-01-10 12:24:45,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:45,879 INFO L225 Difference]: With dead ends: 1826 [2022-01-10 12:24:45,879 INFO L226 Difference]: Without dead ends: 1140 [2022-01-10 12:24:45,880 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:45,881 INFO L933 BasicCegarLoop]: 419 mSDtfsCounter, 357 mSDsluCounter, 622 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 357 SdHoareTripleChecker+Valid, 1041 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:45,881 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [357 Valid, 1041 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:45,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1140 states. [2022-01-10 12:24:45,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1140 to 730. [2022-01-10 12:24:45,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 730 states, 727 states have (on average 1.2448418156808803) internal successors, (905), 729 states have internal predecessors, (905), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 730 states to 730 states and 905 transitions. [2022-01-10 12:24:45,916 INFO L78 Accepts]: Start accepts. Automaton has 730 states and 905 transitions. Word has length 59 [2022-01-10 12:24:45,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:45,916 INFO L470 AbstractCegarLoop]: Abstraction has 730 states and 905 transitions. [2022-01-10 12:24:45,916 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:45,916 INFO L276 IsEmpty]: Start isEmpty. Operand 730 states and 905 transitions. [2022-01-10 12:24:45,918 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-01-10 12:24:45,918 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:45,918 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:45,918 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 12:24:45,918 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:45,918 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:45,918 INFO L85 PathProgramCache]: Analyzing trace with hash -661918770, now seen corresponding path program 1 times [2022-01-10 12:24:45,919 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:45,919 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [355884457] [2022-01-10 12:24:45,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:45,919 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:45,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:45,982 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:45,982 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:45,982 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [355884457] [2022-01-10 12:24:45,983 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [355884457] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:45,983 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:45,983 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:45,983 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1951593422] [2022-01-10 12:24:45,983 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:45,984 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:45,984 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:45,984 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:45,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:45,984 INFO L87 Difference]: Start difference. First operand 730 states and 905 transitions. Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:46,198 INFO L93 Difference]: Finished difference Result 2459 states and 3042 transitions. [2022-01-10 12:24:46,199 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 12:24:46,199 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2022-01-10 12:24:46,199 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:46,203 INFO L225 Difference]: With dead ends: 2459 [2022-01-10 12:24:46,203 INFO L226 Difference]: Without dead ends: 1491 [2022-01-10 12:24:46,204 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 12:24:46,205 INFO L933 BasicCegarLoop]: 358 mSDtfsCounter, 1227 mSDsluCounter, 1095 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1227 SdHoareTripleChecker+Valid, 1453 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:46,205 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1227 Valid, 1453 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:46,206 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1491 states. [2022-01-10 12:24:46,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1491 to 860. [2022-01-10 12:24:46,251 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 860 states, 857 states have (on average 1.2427071178529756) internal successors, (1065), 859 states have internal predecessors, (1065), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 860 states to 860 states and 1065 transitions. [2022-01-10 12:24:46,282 INFO L78 Accepts]: Start accepts. Automaton has 860 states and 1065 transitions. Word has length 59 [2022-01-10 12:24:46,282 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:46,282 INFO L470 AbstractCegarLoop]: Abstraction has 860 states and 1065 transitions. [2022-01-10 12:24:46,282 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,282 INFO L276 IsEmpty]: Start isEmpty. Operand 860 states and 1065 transitions. [2022-01-10 12:24:46,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-01-10 12:24:46,283 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:46,283 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:46,283 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 12:24:46,284 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:46,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:46,284 INFO L85 PathProgramCache]: Analyzing trace with hash -279504778, now seen corresponding path program 1 times [2022-01-10 12:24:46,284 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:46,284 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1322141846] [2022-01-10 12:24:46,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:46,284 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:46,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:46,318 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:24:46,318 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:46,319 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1322141846] [2022-01-10 12:24:46,319 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1322141846] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:46,319 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:46,319 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:24:46,319 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2144051985] [2022-01-10 12:24:46,319 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:46,319 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:24:46,319 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:46,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:24:46,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:46,320 INFO L87 Difference]: Start difference. First operand 860 states and 1065 transitions. Second operand has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:46,359 INFO L93 Difference]: Finished difference Result 860 states and 1065 transitions. [2022-01-10 12:24:46,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:24:46,359 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2022-01-10 12:24:46,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:46,361 INFO L225 Difference]: With dead ends: 860 [2022-01-10 12:24:46,361 INFO L226 Difference]: Without dead ends: 412 [2022-01-10 12:24:46,361 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:24:46,362 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 77 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:46,362 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 130 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:46,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 412 states. [2022-01-10 12:24:46,391 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 412 to 412. [2022-01-10 12:24:46,392 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 412 states, 411 states have (on average 1.2530413625304135) internal successors, (515), 411 states have internal predecessors, (515), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 412 states to 412 states and 515 transitions. [2022-01-10 12:24:46,393 INFO L78 Accepts]: Start accepts. Automaton has 412 states and 515 transitions. Word has length 67 [2022-01-10 12:24:46,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:46,393 INFO L470 AbstractCegarLoop]: Abstraction has 412 states and 515 transitions. [2022-01-10 12:24:46,393 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,393 INFO L276 IsEmpty]: Start isEmpty. Operand 412 states and 515 transitions. [2022-01-10 12:24:46,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-01-10 12:24:46,394 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:46,394 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:46,394 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 12:24:46,394 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:46,395 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:46,395 INFO L85 PathProgramCache]: Analyzing trace with hash -2077863054, now seen corresponding path program 1 times [2022-01-10 12:24:46,395 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:46,395 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [129943175] [2022-01-10 12:24:46,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:46,395 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:46,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:46,441 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 12:24:46,441 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:46,441 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [129943175] [2022-01-10 12:24:46,441 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [129943175] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:46,441 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:46,441 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 12:24:46,441 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [902911824] [2022-01-10 12:24:46,441 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:46,442 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 12:24:46,442 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:46,442 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 12:24:46,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:24:46,442 INFO L87 Difference]: Start difference. First operand 412 states and 515 transitions. Second operand has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:46,666 INFO L93 Difference]: Finished difference Result 1414 states and 1760 transitions. [2022-01-10 12:24:46,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-10 12:24:46,667 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-01-10 12:24:46,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:46,669 INFO L225 Difference]: With dead ends: 1414 [2022-01-10 12:24:46,670 INFO L226 Difference]: Without dead ends: 1010 [2022-01-10 12:24:46,670 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=191, Unknown=0, NotChecked=0, Total=272 [2022-01-10 12:24:46,671 INFO L933 BasicCegarLoop]: 329 mSDtfsCounter, 574 mSDsluCounter, 1044 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 574 SdHoareTripleChecker+Valid, 1373 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:46,671 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [574 Valid, 1373 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:24:46,672 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1010 states. [2022-01-10 12:24:46,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1010 to 390. [2022-01-10 12:24:46,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 390 states, 389 states have (on average 1.2416452442159382) internal successors, (483), 389 states have internal predecessors, (483), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 483 transitions. [2022-01-10 12:24:46,726 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 483 transitions. Word has length 74 [2022-01-10 12:24:46,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:46,727 INFO L470 AbstractCegarLoop]: Abstraction has 390 states and 483 transitions. [2022-01-10 12:24:46,727 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,727 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 483 transitions. [2022-01-10 12:24:46,727 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-10 12:24:46,727 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:46,728 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:46,728 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 12:24:46,728 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:46,728 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:46,728 INFO L85 PathProgramCache]: Analyzing trace with hash -1251912056, now seen corresponding path program 1 times [2022-01-10 12:24:46,728 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:46,728 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448642759] [2022-01-10 12:24:46,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:46,729 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:46,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:46,764 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-01-10 12:24:46,765 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:46,765 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448642759] [2022-01-10 12:24:46,765 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448642759] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:46,765 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:46,765 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:46,765 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1242011645] [2022-01-10 12:24:46,765 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:46,766 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 12:24:46,766 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:46,766 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 12:24:46,766 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 12:24:46,766 INFO L87 Difference]: Start difference. First operand 390 states and 483 transitions. Second operand has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:46,852 INFO L93 Difference]: Finished difference Result 880 states and 1085 transitions. [2022-01-10 12:24:46,852 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-10 12:24:46,852 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-10 12:24:46,853 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:46,854 INFO L225 Difference]: With dead ends: 880 [2022-01-10 12:24:46,854 INFO L226 Difference]: Without dead ends: 498 [2022-01-10 12:24:46,855 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:46,855 INFO L933 BasicCegarLoop]: 154 mSDtfsCounter, 205 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 205 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:46,856 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [205 Valid, 289 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:46,856 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2022-01-10 12:24:46,898 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 390. [2022-01-10 12:24:46,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 390 states, 389 states have (on average 1.218508997429306) internal successors, (474), 389 states have internal predecessors, (474), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 474 transitions. [2022-01-10 12:24:46,900 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 474 transitions. Word has length 75 [2022-01-10 12:24:46,900 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:46,900 INFO L470 AbstractCegarLoop]: Abstraction has 390 states and 474 transitions. [2022-01-10 12:24:46,900 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:46,901 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 474 transitions. [2022-01-10 12:24:46,901 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-10 12:24:46,901 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:46,901 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:46,901 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-10 12:24:46,902 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:46,902 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:46,902 INFO L85 PathProgramCache]: Analyzing trace with hash 1225220776, now seen corresponding path program 1 times [2022-01-10 12:24:46,902 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:46,902 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1001082180] [2022-01-10 12:24:46,902 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:46,902 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:46,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:46,938 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-01-10 12:24:46,938 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:46,938 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1001082180] [2022-01-10 12:24:46,938 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1001082180] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:46,938 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:46,938 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:24:46,938 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1110467659] [2022-01-10 12:24:46,939 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:46,939 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:46,939 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:46,939 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:46,939 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:46,939 INFO L87 Difference]: Start difference. First operand 390 states and 474 transitions. Second operand has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:47,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:47,039 INFO L93 Difference]: Finished difference Result 1015 states and 1242 transitions. [2022-01-10 12:24:47,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:24:47,039 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-10 12:24:47,040 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:47,041 INFO L225 Difference]: With dead ends: 1015 [2022-01-10 12:24:47,041 INFO L226 Difference]: Without dead ends: 633 [2022-01-10 12:24:47,042 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:24:47,042 INFO L933 BasicCegarLoop]: 162 mSDtfsCounter, 380 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 380 SdHoareTripleChecker+Valid, 434 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:47,043 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [380 Valid, 434 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:47,043 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 633 states. [2022-01-10 12:24:47,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 633 to 390. [2022-01-10 12:24:47,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 390 states, 389 states have (on average 1.1953727506426735) internal successors, (465), 389 states have internal predecessors, (465), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:47,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 465 transitions. [2022-01-10 12:24:47,080 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 465 transitions. Word has length 75 [2022-01-10 12:24:47,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:47,080 INFO L470 AbstractCegarLoop]: Abstraction has 390 states and 465 transitions. [2022-01-10 12:24:47,080 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:47,080 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 465 transitions. [2022-01-10 12:24:47,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-10 12:24:47,081 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:47,081 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:47,081 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 12:24:47,081 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:47,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:47,082 INFO L85 PathProgramCache]: Analyzing trace with hash 1930285672, now seen corresponding path program 1 times [2022-01-10 12:24:47,082 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:47,082 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [522721374] [2022-01-10 12:24:47,082 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:47,082 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:47,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:47,134 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-01-10 12:24:47,135 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:47,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [522721374] [2022-01-10 12:24:47,135 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [522721374] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:47,135 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:47,135 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:24:47,135 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1551495076] [2022-01-10 12:24:47,135 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:47,135 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:24:47,135 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:47,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:24:47,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:24:47,136 INFO L87 Difference]: Start difference. First operand 390 states and 465 transitions. Second operand has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:47,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:47,239 INFO L93 Difference]: Finished difference Result 914 states and 1082 transitions. [2022-01-10 12:24:47,239 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:24:47,239 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-10 12:24:47,240 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:47,241 INFO L225 Difference]: With dead ends: 914 [2022-01-10 12:24:47,241 INFO L226 Difference]: Without dead ends: 532 [2022-01-10 12:24:47,241 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:24:47,242 INFO L933 BasicCegarLoop]: 162 mSDtfsCounter, 196 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 430 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:47,242 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [196 Valid, 430 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:47,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 532 states. [2022-01-10 12:24:47,272 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 532 to 306. [2022-01-10 12:24:47,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 306 states, 305 states have (on average 1.2098360655737705) internal successors, (369), 305 states have internal predecessors, (369), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:47,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 306 states to 306 states and 369 transitions. [2022-01-10 12:24:47,273 INFO L78 Accepts]: Start accepts. Automaton has 306 states and 369 transitions. Word has length 75 [2022-01-10 12:24:47,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:47,273 INFO L470 AbstractCegarLoop]: Abstraction has 306 states and 369 transitions. [2022-01-10 12:24:47,274 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:47,274 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 369 transitions. [2022-01-10 12:24:47,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-01-10 12:24:47,274 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:24:47,274 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:24:47,275 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-01-10 12:24:47,275 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:24:47,275 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:24:47,275 INFO L85 PathProgramCache]: Analyzing trace with hash 1886032146, now seen corresponding path program 1 times [2022-01-10 12:24:47,275 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:24:47,275 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1135457740] [2022-01-10 12:24:47,275 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:24:47,275 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:24:47,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:24:47,332 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 48 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-01-10 12:24:47,333 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:24:47,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1135457740] [2022-01-10 12:24:47,333 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1135457740] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:24:47,333 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:24:47,333 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 12:24:47,333 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [853052750] [2022-01-10 12:24:47,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:24:47,333 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 12:24:47,333 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:24:47,334 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 12:24:47,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:24:47,334 INFO L87 Difference]: Start difference. First operand 306 states and 369 transitions. Second operand has 6 states, 6 states have (on average 16.0) internal successors, (96), 6 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:47,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:24:47,475 INFO L93 Difference]: Finished difference Result 744 states and 884 transitions. [2022-01-10 12:24:47,475 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-01-10 12:24:47,476 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 16.0) internal successors, (96), 6 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 117 [2022-01-10 12:24:47,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:24:47,476 INFO L225 Difference]: With dead ends: 744 [2022-01-10 12:24:47,476 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 12:24:47,477 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=51, Invalid=105, Unknown=0, NotChecked=0, Total=156 [2022-01-10 12:24:47,477 INFO L933 BasicCegarLoop]: 286 mSDtfsCounter, 275 mSDsluCounter, 873 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 275 SdHoareTripleChecker+Valid, 1159 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:24:47,478 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [275 Valid, 1159 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:24:47,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 12:24:47,478 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 12:24:47,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:47,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 12:24:47,478 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 117 [2022-01-10 12:24:47,478 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:24:47,479 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 12:24:47,479 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 16.0) internal successors, (96), 6 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:24:47,479 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 12:24:47,479 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 12:24:47,481 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 12:24:47,481 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 12:24:47,481 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 12:24:47,481 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-01-10 12:24:47,482 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 12:25:00,082 WARN L228 SmtUtils]: Spent 5.39s on a formula simplification that was a NOOP. DAG size: 146 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2022-01-10 12:25:15,947 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 12:25:15,948 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 12:25:15,948 INFO L854 garLoopResultBuilder]: At program point L702(lines 698 704) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,948 INFO L854 garLoopResultBuilder]: At program point L695(lines 691 697) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,948 INFO L854 garLoopResultBuilder]: At program point L710(lines 705 713) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,948 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2022-01-10 12:25:15,948 INFO L854 garLoopResultBuilder]: At program point L479(lines 475 481) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,948 INFO L858 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2022-01-10 12:25:15,948 INFO L854 garLoopResultBuilder]: At program point L539(lines 534 541) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,948 INFO L861 garLoopResultBuilder]: At program point L517(lines 498 520) the Hoare annotation is: true [2022-01-10 12:25:15,949 INFO L854 garLoopResultBuilder]: At program point L726-2(lines 726 773) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4 .cse3) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:15,949 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 12:25:15,949 INFO L854 garLoopResultBuilder]: At program point L774(lines 725 775) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) .cse2))) [2022-01-10 12:25:15,949 INFO L858 garLoopResultBuilder]: For program point L727(lines 726 773) no Hoare annotation was computed. [2022-01-10 12:25:15,949 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 12:25:15,949 INFO L858 garLoopResultBuilder]: For program point L792-3(lines 792 798) no Hoare annotation was computed. [2022-01-10 12:25:15,949 INFO L858 garLoopResultBuilder]: For program point L728(lines 728 732) no Hoare annotation was computed. [2022-01-10 12:25:15,950 INFO L858 garLoopResultBuilder]: For program point L583-3(lines 583 587) no Hoare annotation was computed. [2022-01-10 12:25:15,950 INFO L858 garLoopResultBuilder]: For program point L792-5(lines 791 810) no Hoare annotation was computed. [2022-01-10 12:25:15,950 INFO L858 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2022-01-10 12:25:15,954 INFO L854 garLoopResultBuilder]: At program point L583-5(lines 579 590) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,954 INFO L858 garLoopResultBuilder]: For program point L876-2(lines 876 893) no Hoare annotation was computed. [2022-01-10 12:25:15,954 INFO L858 garLoopResultBuilder]: For program point L799-3(lines 799 805) no Hoare annotation was computed. [2022-01-10 12:25:15,954 INFO L858 garLoopResultBuilder]: For program point L595(lines 595 599) no Hoare annotation was computed. [2022-01-10 12:25:15,954 INFO L858 garLoopResultBuilder]: For program point L736-2(lines 736 742) no Hoare annotation was computed. [2022-01-10 12:25:15,955 INFO L854 garLoopResultBuilder]: At program point L620-6(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,955 INFO L858 garLoopResultBuilder]: For program point L850-6(lines 850 867) no Hoare annotation was computed. [2022-01-10 12:25:15,956 INFO L854 garLoopResultBuilder]: At program point L620-11(lines 615 623) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,956 INFO L854 garLoopResultBuilder]: At program point L595-2(lines 591 602) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4 .cse3) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:15,956 INFO L858 garLoopResultBuilder]: For program point L746(lines 746 752) no Hoare annotation was computed. [2022-01-10 12:25:15,956 INFO L854 garLoopResultBuilder]: At program point L937-5(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,956 INFO L854 garLoopResultBuilder]: At program point L675-3(lines 670 678) the Hoare annotation is: false [2022-01-10 12:25:15,956 INFO L858 garLoopResultBuilder]: For program point L824-14(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,956 INFO L858 garLoopResultBuilder]: For program point L550-2(lines 550 567) no Hoare annotation was computed. [2022-01-10 12:25:15,956 INFO L858 garLoopResultBuilder]: For program point L607(lines 607 611) no Hoare annotation was computed. [2022-01-10 12:25:15,956 INFO L858 garLoopResultBuilder]: For program point L746-2(lines 746 752) no Hoare annotation was computed. [2022-01-10 12:25:15,956 INFO L858 garLoopResultBuilder]: For program point L880-3(lines 880 888) no Hoare annotation was computed. [2022-01-10 12:25:15,956 INFO L858 garLoopResultBuilder]: For program point L1014-9(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,957 INFO L858 garLoopResultBuilder]: For program point L660-7(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,957 INFO L854 garLoopResultBuilder]: At program point L816-15(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,957 INFO L854 garLoopResultBuilder]: At program point L946-1(lines 941 949) the Hoare annotation is: false [2022-01-10 12:25:15,957 INFO L854 garLoopResultBuilder]: At program point L550-3(lines 542 570) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,957 INFO L854 garLoopResultBuilder]: At program point L607-2(lines 603 614) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 (<= ~methaneLevelCritical~0Int 0)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:15,957 INFO L858 garLoopResultBuilder]: For program point L756(lines 756 769) no Hoare annotation was computed. [2022-01-10 12:25:15,957 INFO L854 garLoopResultBuilder]: At program point L927-3(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,957 INFO L858 garLoopResultBuilder]: For program point L850-4(lines 850 867) no Hoare annotation was computed. [2022-01-10 12:25:15,957 INFO L858 garLoopResultBuilder]: For program point L1014-11(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,957 INFO L854 garLoopResultBuilder]: At program point L665-7(lines 656 669) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,957 INFO L854 garLoopResultBuilder]: At program point L824-15(lines 820 844) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 .cse2))) [2022-01-10 12:25:15,957 INFO L858 garLoopResultBuilder]: For program point L554-2(lines 554 564) no Hoare annotation was computed. [2022-01-10 12:25:15,957 INFO L854 garLoopResultBuilder]: At program point L809-1(lines 788 811) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,957 INFO L854 garLoopResultBuilder]: At program point L1029(lines 1024 1031) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse8 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse4 (= ~methAndRunningLastTime~0Int 0)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4) (and .cse5 .cse0 .cse6 .cse2 .cse7 .cse8 .cse3 .cse9) (and .cse5 .cse0 .cse6 .cse2 .cse7 .cse8 .cse4 .cse9))) [2022-01-10 12:25:15,958 INFO L858 garLoopResultBuilder]: For program point L764(lines 764 768) no Hoare annotation was computed. [2022-01-10 12:25:15,958 INFO L854 garLoopResultBuilder]: At program point L876-3(lines 872 896) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 .cse2))) [2022-01-10 12:25:15,958 INFO L854 garLoopResultBuilder]: At program point L675-2(lines 670 678) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,958 INFO L858 garLoopResultBuilder]: For program point L824-10(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,958 INFO L854 garLoopResultBuilder]: At program point L1020-3(lines 1005 1023) the Hoare annotation is: false [2022-01-10 12:25:15,958 INFO L858 garLoopResultBuilder]: For program point L995-21(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,958 INFO L854 garLoopResultBuilder]: At program point L850-7(lines 846 870) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 .cse2))) [2022-01-10 12:25:15,958 INFO L858 garLoopResultBuilder]: For program point L555-3(lines 555 561) no Hoare annotation was computed. [2022-01-10 12:25:15,958 INFO L854 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,958 INFO L858 garLoopResultBuilder]: For program point L764-2(lines 756 769) no Hoare annotation was computed. [2022-01-10 12:25:15,958 INFO L858 garLoopResultBuilder]: For program point L1014-6(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,958 INFO L858 garLoopResultBuilder]: For program point L660-5(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,958 INFO L854 garLoopResultBuilder]: At program point L816-11(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,958 INFO L858 garLoopResultBuilder]: For program point L854-9(lines 854 862) no Hoare annotation was computed. [2022-01-10 12:25:15,958 INFO L858 garLoopResultBuilder]: For program point L995-23(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,958 INFO L858 garLoopResultBuilder]: For program point L526-1(line 526) no Hoare annotation was computed. [2022-01-10 12:25:15,958 INFO L861 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2022-01-10 12:25:15,959 INFO L858 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2022-01-10 12:25:15,959 INFO L858 garLoopResultBuilder]: For program point L792(lines 792 798) no Hoare annotation was computed. [2022-01-10 12:25:15,959 INFO L858 garLoopResultBuilder]: For program point L1014-8(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,959 INFO L854 garLoopResultBuilder]: At program point L665-5(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,959 INFO L854 garLoopResultBuilder]: At program point L824-11(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,959 INFO L854 garLoopResultBuilder]: At program point L927-5(lines 922 929) the Hoare annotation is: false [2022-01-10 12:25:15,959 INFO L858 garLoopResultBuilder]: For program point L824-12(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,959 INFO L854 garLoopResultBuilder]: At program point L1001-7(lines 986 1004) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,959 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-10 12:25:15,960 INFO L854 garLoopResultBuilder]: At program point L527-1(lines 522 529) the Hoare annotation is: false [2022-01-10 12:25:15,960 INFO L861 garLoopResultBuilder]: At program point L779(lines 716 781) the Hoare annotation is: true [2022-01-10 12:25:15,960 INFO L858 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2022-01-10 12:25:15,960 INFO L858 garLoopResultBuilder]: For program point L583(lines 583 587) no Hoare annotation was computed. [2022-01-10 12:25:15,960 INFO L858 garLoopResultBuilder]: For program point L792-2(lines 791 810) no Hoare annotation was computed. [2022-01-10 12:25:15,960 INFO L854 garLoopResultBuilder]: At program point L1020-2(lines 1005 1023) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,960 INFO L858 garLoopResultBuilder]: For program point L995-15(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,960 INFO L854 garLoopResultBuilder]: At program point L850-5(lines 846 870) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,960 INFO L858 garLoopResultBuilder]: For program point L660-6(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,960 INFO L854 garLoopResultBuilder]: At program point L816-13(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,960 INFO L858 garLoopResultBuilder]: For program point L828-21(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,960 INFO L861 garLoopResultBuilder]: At program point L492(lines 484 494) the Hoare annotation is: true [2022-01-10 12:25:15,961 INFO L858 garLoopResultBuilder]: For program point L432-1(lines 432 436) no Hoare annotation was computed. [2022-01-10 12:25:15,961 INFO L854 garLoopResultBuilder]: At program point L583-2(lines 579 590) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= ~methaneLevelCritical~0Int 0) .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0Int 0) .cse6))) [2022-01-10 12:25:15,961 INFO L858 garLoopResultBuilder]: For program point L876(lines 876 893) no Hoare annotation was computed. [2022-01-10 12:25:15,961 INFO L858 garLoopResultBuilder]: For program point L799-1(lines 799 805) no Hoare annotation was computed. [2022-01-10 12:25:15,961 INFO L858 garLoopResultBuilder]: For program point L854-6(lines 854 862) no Hoare annotation was computed. [2022-01-10 12:25:15,961 INFO L858 garLoopResultBuilder]: For program point L995-17(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,961 INFO L854 garLoopResultBuilder]: At program point L665-6(lines 656 669) the Hoare annotation is: false [2022-01-10 12:25:15,961 INFO L854 garLoopResultBuilder]: At program point L824-13(lines 820 844) the Hoare annotation is: false [2022-01-10 12:25:15,961 INFO L854 garLoopResultBuilder]: At program point L620-10(lines 615 623) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,961 INFO L854 garLoopResultBuilder]: At program point L816-14(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,962 INFO L858 garLoopResultBuilder]: For program point L792-6(lines 792 798) no Hoare annotation was computed. [2022-01-10 12:25:15,962 INFO L854 garLoopResultBuilder]: At program point L620(lines 615 623) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 .cse4 .cse5 (<= ~methaneLevelCritical~0Int 0) .cse6) (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~methaneLevelCritical~0Int) .cse6))) [2022-01-10 12:25:15,962 INFO L858 garLoopResultBuilder]: For program point L850-2(lines 850 867) no Hoare annotation was computed. [2022-01-10 12:25:15,962 INFO L854 garLoopResultBuilder]: At program point L620-5(lines 615 623) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse4 .cse1 .cse2 .cse3))) [2022-01-10 12:25:15,962 INFO L854 garLoopResultBuilder]: At program point L927-4(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,962 INFO L858 garLoopResultBuilder]: For program point L824-8(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,962 INFO L854 garLoopResultBuilder]: At program point L1001-5(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,962 INFO L858 garLoopResultBuilder]: For program point L995-18(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,962 INFO L854 garLoopResultBuilder]: At program point L937-9(lines 930 940) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,962 INFO L858 garLoopResultBuilder]: For program point L583-6(lines 583 587) no Hoare annotation was computed. [2022-01-10 12:25:15,962 INFO L858 garLoopResultBuilder]: For program point L792-8(lines 791 810) no Hoare annotation was computed. [2022-01-10 12:25:15,962 INFO L854 garLoopResultBuilder]: At program point L937(lines 930 940) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~methaneLevelCritical~0Int) .cse6) (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 .cse4 .cse5 (<= ~methaneLevelCritical~0Int 0) .cse6))) [2022-01-10 12:25:15,963 INFO L854 garLoopResultBuilder]: At program point L675-1(lines 670 678) the Hoare annotation is: false [2022-01-10 12:25:15,963 INFO L858 garLoopResultBuilder]: For program point L824-6(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,963 INFO L858 garLoopResultBuilder]: For program point L550(lines 550 567) no Hoare annotation was computed. [2022-01-10 12:25:15,963 INFO L858 garLoopResultBuilder]: For program point L660-4(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,963 INFO L854 garLoopResultBuilder]: At program point L816-9(lines 812 818) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,963 INFO L858 garLoopResultBuilder]: For program point L828-15(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,963 INFO L858 garLoopResultBuilder]: For program point L995-20(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,963 INFO L858 garLoopResultBuilder]: For program point L912-21(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,963 INFO L854 garLoopResultBuilder]: At program point L583-8(lines 579 590) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,963 INFO L858 garLoopResultBuilder]: For program point L876-4(lines 876 893) no Hoare annotation was computed. [2022-01-10 12:25:15,963 INFO L858 garLoopResultBuilder]: For program point L799-5(lines 799 805) no Hoare annotation was computed. [2022-01-10 12:25:15,963 INFO L858 garLoopResultBuilder]: For program point L880(lines 880 888) no Hoare annotation was computed. [2022-01-10 12:25:15,963 INFO L858 garLoopResultBuilder]: For program point L1014-3(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,963 INFO L858 garLoopResultBuilder]: For program point L660-3(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,963 INFO L854 garLoopResultBuilder]: At program point L816-7(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,963 INFO L854 garLoopResultBuilder]: At program point L946(lines 941 949) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| ~pumpRunning~0Int) (<= 1 ~methaneLevelCritical~0Int)) [2022-01-10 12:25:15,963 INFO L854 garLoopResultBuilder]: At program point L550-1(lines 542 570) the Hoare annotation is: (let ((.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse5 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse6 .cse7 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse4 .cse0 .cse1 .cse5 .cse2 .cse6 .cse7 .cse3))) [2022-01-10 12:25:15,964 INFO L854 garLoopResultBuilder]: At program point L665-4(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,964 INFO L854 garLoopResultBuilder]: At program point L824-9(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,964 INFO L854 garLoopResultBuilder]: At program point L620-8(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,964 INFO L854 garLoopResultBuilder]: At program point L816-10(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,964 INFO L854 garLoopResultBuilder]: At program point L1001-6(lines 986 1004) the Hoare annotation is: false [2022-01-10 12:25:15,964 INFO L854 garLoopResultBuilder]: At program point L912-23(lines 905 921) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,964 INFO L854 garLoopResultBuilder]: At program point L902-7(lines 897 904) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,964 INFO L854 garLoopResultBuilder]: At program point L620-12(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,964 INFO L858 garLoopResultBuilder]: For program point L850-10(lines 850 867) no Hoare annotation was computed. [2022-01-10 12:25:15,964 INFO L854 garLoopResultBuilder]: At program point L620-17(lines 615 623) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,964 INFO L854 garLoopResultBuilder]: At program point L927(lines 922 929) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~8#1Int|)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 .cse5 .cse6 .cse7 (<= 1 ~methaneLevelCritical~0Int) .cse8) (and .cse0 .cse1 .cse2 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse4 .cse5 .cse6 .cse7 (<= ~methaneLevelCritical~0Int 0) .cse8))) [2022-01-10 12:25:15,966 INFO L858 garLoopResultBuilder]: For program point L850(lines 850 867) no Hoare annotation was computed. [2022-01-10 12:25:15,966 INFO L858 garLoopResultBuilder]: For program point L1014-5(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,966 INFO L854 garLoopResultBuilder]: At program point L665-3(lines 656 669) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-10 12:25:15,966 INFO L854 garLoopResultBuilder]: At program point L824-7(lines 820 844) the Hoare annotation is: (let ((.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-10 12:25:15,966 INFO L858 garLoopResultBuilder]: For program point L554(lines 554 564) no Hoare annotation was computed. [2022-01-10 12:25:15,966 INFO L854 garLoopResultBuilder]: At program point L809(lines 788 811) the Hoare annotation is: (let ((.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse5 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse6 .cse7 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse4 .cse0 .cse1 .cse5 .cse2 .cse6 .cse7 .cse3))) [2022-01-10 12:25:15,966 INFO L858 garLoopResultBuilder]: For program point L995-12(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,966 INFO L854 garLoopResultBuilder]: At program point L937-7(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,966 INFO L858 garLoopResultBuilder]: For program point L828-18(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,966 INFO L854 garLoopResultBuilder]: At program point L937-10(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,966 INFO L854 garLoopResultBuilder]: At program point L675-5(lines 670 678) the Hoare annotation is: false [2022-01-10 12:25:15,966 INFO L858 garLoopResultBuilder]: For program point L824-22(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,966 INFO L858 garLoopResultBuilder]: For program point L550-4(lines 550 567) no Hoare annotation was computed. [2022-01-10 12:25:15,966 INFO L854 garLoopResultBuilder]: At program point L876-1(lines 872 896) the Hoare annotation is: (let ((.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-10 12:25:15,967 INFO L854 garLoopResultBuilder]: At program point L675(lines 670 678) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,967 INFO L858 garLoopResultBuilder]: For program point L824-2(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,967 INFO L854 garLoopResultBuilder]: At program point L1020-1(lines 1005 1023) the Hoare annotation is: false [2022-01-10 12:25:15,967 INFO L858 garLoopResultBuilder]: For program point L995-9(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,967 INFO L854 garLoopResultBuilder]: At program point L850-3(lines 846 870) the Hoare annotation is: (let ((.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-10 12:25:15,967 INFO L858 garLoopResultBuilder]: For program point L555(lines 555 561) no Hoare annotation was computed. [2022-01-10 12:25:15,967 INFO L858 garLoopResultBuilder]: For program point L995-14(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,967 INFO L858 garLoopResultBuilder]: For program point L912-15(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,967 INFO L854 garLoopResultBuilder]: At program point L620-9(lines 615 623) the Hoare annotation is: false [2022-01-10 12:25:15,967 INFO L854 garLoopResultBuilder]: At program point L816-12(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,967 INFO L858 garLoopResultBuilder]: For program point L880-6(lines 880 888) no Hoare annotation was computed. [2022-01-10 12:25:15,967 INFO L858 garLoopResultBuilder]: For program point L1014-15(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,967 INFO L858 garLoopResultBuilder]: For program point L660-11(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,967 INFO L854 garLoopResultBuilder]: At program point L816-23(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,967 INFO L854 garLoopResultBuilder]: At program point L946-2(lines 941 949) the Hoare annotation is: false [2022-01-10 12:25:15,967 INFO L854 garLoopResultBuilder]: At program point L550-5(lines 542 570) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,967 INFO L858 garLoopResultBuilder]: For program point L1014(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,967 INFO L858 garLoopResultBuilder]: For program point L660-1(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,968 INFO L854 garLoopResultBuilder]: At program point L816-3(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,968 INFO L858 garLoopResultBuilder]: For program point L854-3(lines 854 862) no Hoare annotation was computed. [2022-01-10 12:25:15,968 INFO L858 garLoopResultBuilder]: For program point L995-11(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,968 INFO L858 garLoopResultBuilder]: For program point L526(line 526) no Hoare annotation was computed. [2022-01-10 12:25:15,968 INFO L854 garLoopResultBuilder]: At program point L1001-4(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,968 INFO L854 garLoopResultBuilder]: At program point L912-17(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,968 INFO L854 garLoopResultBuilder]: At program point L902-5(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,968 INFO L854 garLoopResultBuilder]: At program point L937-8(lines 930 940) the Hoare annotation is: false [2022-01-10 12:25:15,968 INFO L854 garLoopResultBuilder]: At program point L927-6(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,968 INFO L858 garLoopResultBuilder]: For program point L850-8(lines 850 867) no Hoare annotation was computed. [2022-01-10 12:25:15,968 INFO L858 garLoopResultBuilder]: For program point L1014-17(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,968 INFO L854 garLoopResultBuilder]: At program point L665-11(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,968 INFO L854 garLoopResultBuilder]: At program point L824-23(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,968 INFO L858 garLoopResultBuilder]: For program point L554-4(lines 554 564) no Hoare annotation was computed. [2022-01-10 12:25:15,968 INFO L854 garLoopResultBuilder]: At program point L809-2(lines 788 811) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,968 INFO L858 garLoopResultBuilder]: For program point L1014-2(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,968 INFO L854 garLoopResultBuilder]: At program point L665-1(lines 656 669) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:25:15,969 INFO L854 garLoopResultBuilder]: At program point L824-3(lines 820 844) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-10 12:25:15,969 INFO L854 garLoopResultBuilder]: At program point L927-2(lines 922 929) the Hoare annotation is: false [2022-01-10 12:25:15,969 INFO L858 garLoopResultBuilder]: For program point L824-4(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,969 INFO L854 garLoopResultBuilder]: At program point L1001-3(lines 986 1004) the Hoare annotation is: (let ((.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse12 (= ~methAndRunningLastTime~0Int 0)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse13 (<= ~methaneLevelCritical~0Int 0)) (.cse11 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse1 .cse2 .cse4 .cse10 .cse5 .cse11) (and .cse9 .cse1 .cse2 .cse10 .cse5 .cse12 .cse11) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse6 .cse7 .cse13 .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse6 .cse7 .cse12 .cse8) (and .cse9 .cse1 .cse2 .cse10 .cse5 .cse13 .cse11))) [2022-01-10 12:25:15,969 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-10 12:25:15,969 INFO L854 garLoopResultBuilder]: At program point L527(lines 522 529) the Hoare annotation is: false [2022-01-10 12:25:15,969 INFO L858 garLoopResultBuilder]: For program point L828-12(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,969 INFO L858 garLoopResultBuilder]: For program point L912-18(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,970 INFO L854 garLoopResultBuilder]: At program point L876-5(lines 872 896) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,970 INFO L854 garLoopResultBuilder]: At program point L675-4(lines 670 678) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,970 INFO L858 garLoopResultBuilder]: For program point L824-18(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,970 INFO L854 garLoopResultBuilder]: At program point L1020-5(lines 1005 1023) the Hoare annotation is: false [2022-01-10 12:25:15,970 INFO L858 garLoopResultBuilder]: For program point L995-33(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,970 INFO L854 garLoopResultBuilder]: At program point L850-11(lines 846 870) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,970 INFO L858 garLoopResultBuilder]: For program point L555-6(lines 555 561) no Hoare annotation was computed. [2022-01-10 12:25:15,970 INFO L854 garLoopResultBuilder]: At program point L1020(lines 1005 1023) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,970 INFO L858 garLoopResultBuilder]: For program point L995-3(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,970 INFO L854 garLoopResultBuilder]: At program point L850-1(lines 846 870) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-10 12:25:15,970 INFO L858 garLoopResultBuilder]: For program point L660-2(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,970 INFO L854 garLoopResultBuilder]: At program point L816-5(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,970 INFO L858 garLoopResultBuilder]: For program point L828-9(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,970 INFO L854 garLoopResultBuilder]: At program point L620-7(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,970 INFO L854 garLoopResultBuilder]: At program point L816-8(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,970 INFO L854 garLoopResultBuilder]: At program point L912-20(lines 905 921) the Hoare annotation is: false [2022-01-10 12:25:15,971 INFO L854 garLoopResultBuilder]: At program point L902-6(lines 897 904) the Hoare annotation is: false [2022-01-10 12:25:15,971 INFO L858 garLoopResultBuilder]: For program point L1014-12(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,971 INFO L858 garLoopResultBuilder]: For program point L660-9(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,971 INFO L854 garLoopResultBuilder]: At program point L816-19(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,971 INFO L858 garLoopResultBuilder]: For program point L854-15(lines 854 862) no Hoare annotation was computed. [2022-01-10 12:25:15,971 INFO L858 garLoopResultBuilder]: For program point L995-35(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,971 INFO L858 garLoopResultBuilder]: For program point L526-2(line 526) no Hoare annotation was computed. [2022-01-10 12:25:15,971 INFO L858 garLoopResultBuilder]: For program point L854(lines 854 862) no Hoare annotation was computed. [2022-01-10 12:25:15,971 INFO L858 garLoopResultBuilder]: For program point L995-5(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,971 INFO L854 garLoopResultBuilder]: At program point L665-2(lines 656 669) the Hoare annotation is: false [2022-01-10 12:25:15,971 INFO L854 garLoopResultBuilder]: At program point L824-5(lines 820 844) the Hoare annotation is: false [2022-01-10 12:25:15,971 INFO L854 garLoopResultBuilder]: At program point L620-4(lines 615 623) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse5 .cse6 .cse7 (<= 1 ~methaneLevelCritical~0Int) .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse5 .cse6 .cse7 (<= ~methaneLevelCritical~0Int 0) .cse8))) [2022-01-10 12:25:15,971 INFO L854 garLoopResultBuilder]: At program point L816-6(lines 812 818) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1))) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 12:25:15,971 INFO L854 garLoopResultBuilder]: At program point L937-6(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,971 INFO L858 garLoopResultBuilder]: For program point L1014-14(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 12:25:15,972 INFO L854 garLoopResultBuilder]: At program point L665-9(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,972 INFO L854 garLoopResultBuilder]: At program point L824-19(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,972 INFO L854 garLoopResultBuilder]: At program point L927-8(lines 922 929) the Hoare annotation is: false [2022-01-10 12:25:15,972 INFO L858 garLoopResultBuilder]: For program point L824-20(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,972 INFO L854 garLoopResultBuilder]: At program point L1001-11(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,972 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-10 12:25:15,972 INFO L854 garLoopResultBuilder]: At program point L527-2(lines 522 529) the Hoare annotation is: false [2022-01-10 12:25:15,972 INFO L854 garLoopResultBuilder]: At program point L927-1(lines 922 929) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,973 INFO L858 garLoopResultBuilder]: For program point L824(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,973 INFO L854 garLoopResultBuilder]: At program point L1001-1(lines 986 1004) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int|)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 .cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:15,973 INFO L858 garLoopResultBuilder]: For program point L995-6(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,973 INFO L854 garLoopResultBuilder]: At program point L937-4(lines 930 940) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse5 .cse6 .cse7 (<= 1 ~methaneLevelCritical~0Int) .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse5 .cse6 .cse7 (<= ~methaneLevelCritical~0Int 0) .cse8))) [2022-01-10 12:25:15,973 INFO L858 garLoopResultBuilder]: For program point L912-12(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,973 INFO L854 garLoopResultBuilder]: At program point L1020-4(lines 1005 1023) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,973 INFO L858 garLoopResultBuilder]: For program point L995-27(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,973 INFO L854 garLoopResultBuilder]: At program point L850-9(lines 846 870) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,973 INFO L858 garLoopResultBuilder]: For program point L660-10(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,973 INFO L854 garLoopResultBuilder]: At program point L816-21(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,973 INFO L858 garLoopResultBuilder]: For program point L828-33(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,973 INFO L858 garLoopResultBuilder]: For program point L660(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,973 INFO L854 garLoopResultBuilder]: At program point L816-1(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,973 INFO L858 garLoopResultBuilder]: For program point L828-3(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,974 INFO L858 garLoopResultBuilder]: For program point L995-8(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,974 INFO L858 garLoopResultBuilder]: For program point L912-9(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,974 INFO L854 garLoopResultBuilder]: At program point L912-14(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,974 INFO L854 garLoopResultBuilder]: At program point L902-4(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,974 INFO L858 garLoopResultBuilder]: For program point L854-12(lines 854 862) no Hoare annotation was computed. [2022-01-10 12:25:15,974 INFO L858 garLoopResultBuilder]: For program point L995-29(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,975 INFO L854 garLoopResultBuilder]: At program point L665-10(lines 656 669) the Hoare annotation is: false [2022-01-10 12:25:15,975 INFO L854 garLoopResultBuilder]: At program point L824-21(lines 820 844) the Hoare annotation is: false [2022-01-10 12:25:15,975 INFO L854 garLoopResultBuilder]: At program point L620-16(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,975 INFO L854 garLoopResultBuilder]: At program point L816-22(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,975 INFO L854 garLoopResultBuilder]: At program point L665(lines 656 669) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:25:15,975 INFO L854 garLoopResultBuilder]: At program point L824-1(lines 820 844) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-10 12:25:15,975 INFO L854 garLoopResultBuilder]: At program point L620-2(lines 615 623) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,975 INFO L854 garLoopResultBuilder]: At program point L816-2(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:25:15,975 INFO L854 garLoopResultBuilder]: At program point L1001-2(lines 986 1004) the Hoare annotation is: false [2022-01-10 12:25:15,975 INFO L854 garLoopResultBuilder]: At program point L912-11(lines 905 921) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse6 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse4 .cse5 .cse6 (<= ~methaneLevelCritical~0Int 0) .cse7) (and .cse0 .cse1 .cse2 (= ~pumpRunning~0Int 0) .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 .cse5 .cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~9#1Int|) (<= 1 ~methaneLevelCritical~0Int) .cse7))) [2022-01-10 12:25:15,976 INFO L854 garLoopResultBuilder]: At program point L902-3(lines 897 904) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,976 INFO L854 garLoopResultBuilder]: At program point L927-7(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,976 INFO L858 garLoopResultBuilder]: For program point L824-16(lines 824 841) no Hoare annotation was computed. [2022-01-10 12:25:15,976 INFO L854 garLoopResultBuilder]: At program point L1001-9(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,976 INFO L858 garLoopResultBuilder]: For program point L995-30(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,976 INFO L854 garLoopResultBuilder]: At program point L937-14(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,976 INFO L858 garLoopResultBuilder]: For program point L995(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,976 INFO L854 garLoopResultBuilder]: At program point L937-2(lines 930 940) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,976 INFO L858 garLoopResultBuilder]: For program point L828-6(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,976 INFO L858 garLoopResultBuilder]: For program point L660-8(lines 660 666) no Hoare annotation was computed. [2022-01-10 12:25:15,976 INFO L854 garLoopResultBuilder]: At program point L816-17(lines 812 818) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,976 INFO L858 garLoopResultBuilder]: For program point L828-27(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,976 INFO L858 garLoopResultBuilder]: For program point L995-32(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,976 INFO L858 garLoopResultBuilder]: For program point L912-33(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,976 INFO L858 garLoopResultBuilder]: For program point L995-2(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,976 INFO L858 garLoopResultBuilder]: For program point L912-3(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,976 INFO L854 garLoopResultBuilder]: At program point L620-3(lines 615 623) the Hoare annotation is: false [2022-01-10 12:25:15,976 INFO L854 garLoopResultBuilder]: At program point L816-4(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L665-8(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L824-17(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L620-14(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L816-18(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L1001-10(lines 986 1004) the Hoare annotation is: false [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L912-35(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L902-11(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L1001(lines 986 1004) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int|)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 .cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L912-5(lines 905 921) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L902-1(lines 897 904) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L937-3(lines 930 940) the Hoare annotation is: false [2022-01-10 12:25:15,977 INFO L858 garLoopResultBuilder]: For program point L995-24(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,977 INFO L854 garLoopResultBuilder]: At program point L937-12(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,977 INFO L858 garLoopResultBuilder]: For program point L828-30(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,977 INFO L858 garLoopResultBuilder]: For program point L828(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,977 INFO L858 garLoopResultBuilder]: For program point L912-6(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,978 INFO L858 garLoopResultBuilder]: For program point L995-26(lines 995 999) no Hoare annotation was computed. [2022-01-10 12:25:15,978 INFO L858 garLoopResultBuilder]: For program point L912-27(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L620-15(lines 615 623) the Hoare annotation is: false [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L816-20(lines 812 818) the Hoare annotation is: false [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L620-1(lines 615 623) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L816(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L912-8(lines 905 921) the Hoare annotation is: false [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L902-2(lines 897 904) the Hoare annotation is: false [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L1001-8(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L912-29(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L902-9(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L937-13(lines 930 940) the Hoare annotation is: false [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L937-1(lines 930 940) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,978 INFO L858 garLoopResultBuilder]: For program point L828-24(lines 828 836) no Hoare annotation was computed. [2022-01-10 12:25:15,978 INFO L858 garLoopResultBuilder]: For program point L912-30(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,978 INFO L858 garLoopResultBuilder]: For program point L912(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,978 INFO L854 garLoopResultBuilder]: At program point L620-13(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,979 INFO L854 garLoopResultBuilder]: At program point L816-16(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,979 INFO L854 garLoopResultBuilder]: At program point L912-32(lines 905 921) the Hoare annotation is: false [2022-01-10 12:25:15,979 INFO L854 garLoopResultBuilder]: At program point L902-10(lines 897 904) the Hoare annotation is: false [2022-01-10 12:25:15,979 INFO L854 garLoopResultBuilder]: At program point L912-2(lines 905 921) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,979 INFO L854 garLoopResultBuilder]: At program point L902(lines 897 904) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 12:25:15,979 INFO L854 garLoopResultBuilder]: At program point L937-11(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,979 INFO L858 garLoopResultBuilder]: For program point L912-24(lines 912 918) no Hoare annotation was computed. [2022-01-10 12:25:15,979 INFO L854 garLoopResultBuilder]: At program point L912-26(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,979 INFO L854 garLoopResultBuilder]: At program point L902-8(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 12:25:15,981 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:15,982 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 12:25:16,112 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:25:16 BasicIcfg [2022-01-10 12:25:16,112 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 12:25:16,113 INFO L158 Benchmark]: Toolchain (without parser) took 33063.31ms. Allocated memory was 240.1MB in the beginning and 558.9MB in the end (delta: 318.8MB). Free memory was 194.8MB in the beginning and 238.3MB in the end (delta: -43.6MB). Peak memory consumption was 323.9MB. Max. memory is 8.0GB. [2022-01-10 12:25:16,113 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 240.1MB. Free memory is still 212.0MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 12:25:16,113 INFO L158 Benchmark]: CACSL2BoogieTranslator took 380.78ms. Allocated memory is still 240.1MB. Free memory was 194.5MB in the beginning and 201.2MB in the end (delta: -6.6MB). Peak memory consumption was 8.7MB. Max. memory is 8.0GB. [2022-01-10 12:25:16,113 INFO L158 Benchmark]: Boogie Procedure Inliner took 67.51ms. Allocated memory is still 240.1MB. Free memory was 201.2MB in the beginning and 196.1MB in the end (delta: 5.1MB). Peak memory consumption was 5.2MB. Max. memory is 8.0GB. [2022-01-10 12:25:16,114 INFO L158 Benchmark]: Boogie Preprocessor took 54.83ms. Allocated memory is still 240.1MB. Free memory was 195.7MB in the beginning and 192.2MB in the end (delta: 3.5MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 12:25:16,114 INFO L158 Benchmark]: RCFGBuilder took 717.67ms. Allocated memory was 240.1MB in the beginning and 288.4MB in the end (delta: 48.2MB). Free memory was 192.2MB in the beginning and 260.2MB in the end (delta: -68.0MB). Peak memory consumption was 41.1MB. Max. memory is 8.0GB. [2022-01-10 12:25:16,114 INFO L158 Benchmark]: IcfgTransformer took 183.20ms. Allocated memory is still 288.4MB. Free memory was 260.2MB in the beginning and 244.0MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 8.0GB. [2022-01-10 12:25:16,114 INFO L158 Benchmark]: TraceAbstraction took 31651.22ms. Allocated memory was 288.4MB in the beginning and 558.9MB in the end (delta: 270.5MB). Free memory was 243.4MB in the beginning and 238.3MB in the end (delta: 5.1MB). Peak memory consumption was 323.4MB. Max. memory is 8.0GB. [2022-01-10 12:25:16,118 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 240.1MB. Free memory is still 212.0MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 380.78ms. Allocated memory is still 240.1MB. Free memory was 194.5MB in the beginning and 201.2MB in the end (delta: -6.6MB). Peak memory consumption was 8.7MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 67.51ms. Allocated memory is still 240.1MB. Free memory was 201.2MB in the beginning and 196.1MB in the end (delta: 5.1MB). Peak memory consumption was 5.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 54.83ms. Allocated memory is still 240.1MB. Free memory was 195.7MB in the beginning and 192.2MB in the end (delta: 3.5MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 717.67ms. Allocated memory was 240.1MB in the beginning and 288.4MB in the end (delta: 48.2MB). Free memory was 192.2MB in the beginning and 260.2MB in the end (delta: -68.0MB). Peak memory consumption was 41.1MB. Max. memory is 8.0GB. * IcfgTransformer took 183.20ms. Allocated memory is still 288.4MB. Free memory was 260.2MB in the beginning and 244.0MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 8.0GB. * TraceAbstraction took 31651.22ms. Allocated memory was 288.4MB in the beginning and 558.9MB in the end (delta: 270.5MB). Free memory was 243.4MB in the beginning and 238.3MB in the end (delta: 5.1MB). Peak memory consumption was 323.4MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 326 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 31.5s, OverallIterations: 13, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 28.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4658 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4658 mSDsluCounter, 9517 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5707 mSDsCounter, 232 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 706 IncrementalHoareTripleChecker+Invalid, 938 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 232 mSolverCounterUnsat, 3810 mSDtfsCounter, 706 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 98 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 73 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=860occurred in iteration=7, InterpolantAutomatonStates: 77, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 13 MinimizatonAttempts, 2576 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 177 LocationsWithAnnotation, 177 PreInvPairs, 491 NumberOfFragments, 4671 HoareAnnotationTreeSize, 177 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 21.0s HoareSimplificationTime, 177 FomulaSimplificationsInter, 4593693 FormulaSimplificationTreeSizeReductionInter, 7.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 758 NumberOfCodeBlocks, 758 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 745 ConstructedInterpolants, 0 QuantifiedInterpolants, 1416 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 13 InterpolantComputations, 13 PerfectInterpolantSequences, 186/186 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 716]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || ((((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, tmp) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 698]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || ((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || (((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp___0, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(tmp___0, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning)) || ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp___0, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning)) || ((((((~bvule32(tmp___0, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning)) || ((((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || (((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 591]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 603]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp___0, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 1024]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning RESULT: Ultimate proved your program to be correct! [2022-01-10 12:25:16,217 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...