/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 12:25:18,906 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 12:25:18,908 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 12:25:18,954 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 12:25:18,954 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 12:25:18,957 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 12:25:18,960 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 12:25:18,961 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 12:25:18,962 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 12:25:18,963 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 12:25:18,963 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 12:25:18,964 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 12:25:18,964 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 12:25:18,965 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 12:25:18,965 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 12:25:18,966 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 12:25:18,966 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 12:25:18,967 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 12:25:18,968 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 12:25:18,969 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 12:25:18,970 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 12:25:18,971 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 12:25:18,972 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 12:25:18,973 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 12:25:18,985 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 12:25:18,985 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 12:25:18,985 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 12:25:18,986 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 12:25:18,986 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 12:25:18,987 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 12:25:18,987 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 12:25:18,988 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 12:25:18,988 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 12:25:18,988 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 12:25:18,989 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 12:25:18,989 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 12:25:18,990 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 12:25:18,990 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 12:25:18,990 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 12:25:18,990 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 12:25:18,991 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 12:25:18,997 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf [2022-01-10 12:25:19,019 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 12:25:19,022 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 12:25:19,022 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 12:25:19,022 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 12:25:19,023 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 12:25:19,023 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 12:25:19,024 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 12:25:19,024 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 12:25:19,024 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 12:25:19,024 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 12:25:19,024 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 12:25:19,025 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 12:25:19,025 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 12:25:19,025 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 12:25:19,025 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 12:25:19,025 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 12:25:19,025 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 12:25:19,025 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 12:25:19,025 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 12:25:19,025 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 12:25:19,025 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 12:25:19,026 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:25:19,027 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 12:25:19,027 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 12:25:19,027 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 12:25:19,027 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 12:25:19,027 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 12:25:19,027 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 12:25:19,027 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 12:25:19,027 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 12:25:19,027 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 12:25:19,027 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 12:25:19,029 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 12:25:19,029 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_BITWISE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 12:25:19,198 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 12:25:19,212 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 12:25:19,213 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 12:25:19,214 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 12:25:19,217 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 12:25:19,218 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c [2022-01-10 12:25:19,269 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/37210fd91/dd80592a61074137ab5d432a2835ef7b/FLAGbe39cf8d7 [2022-01-10 12:25:19,640 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 12:25:19,640 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c [2022-01-10 12:25:19,655 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/37210fd91/dd80592a61074137ab5d432a2835ef7b/FLAGbe39cf8d7 [2022-01-10 12:25:19,663 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/37210fd91/dd80592a61074137ab5d432a2835ef7b [2022-01-10 12:25:19,665 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 12:25:19,666 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 12:25:19,668 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 12:25:19,668 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 12:25:19,670 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 12:25:19,671 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:25:19" (1/1) ... [2022-01-10 12:25:19,672 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1cc54319 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:19, skipping insertion in model container [2022-01-10 12:25:19,672 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:25:19" (1/1) ... [2022-01-10 12:25:19,676 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 12:25:19,702 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:25:19,889 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c[7477,7490] [2022-01-10 12:25:19,956 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:25:19,969 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 12:25:19,982 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:25:20,010 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c[7477,7490] [2022-01-10 12:25:20,035 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:25:20,038 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 12:25:20,066 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product42.cil.c[7477,7490] [2022-01-10 12:25:20,092 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:25:20,105 INFO L208 MainTranslator]: Completed translation [2022-01-10 12:25:20,105 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20 WrapperNode [2022-01-10 12:25:20,105 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 12:25:20,106 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 12:25:20,106 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 12:25:20,106 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 12:25:20,114 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20" (1/1) ... [2022-01-10 12:25:20,125 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20" (1/1) ... [2022-01-10 12:25:20,158 INFO L137 Inliner]: procedures = 56, calls = 153, calls flagged for inlining = 50, calls inlined = 60, statements flattened = 488 [2022-01-10 12:25:20,158 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 12:25:20,159 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 12:25:20,159 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 12:25:20,159 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 12:25:20,168 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20" (1/1) ... [2022-01-10 12:25:20,168 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20" (1/1) ... [2022-01-10 12:25:20,180 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20" (1/1) ... [2022-01-10 12:25:20,180 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20" (1/1) ... [2022-01-10 12:25:20,200 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20" (1/1) ... [2022-01-10 12:25:20,209 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20" (1/1) ... [2022-01-10 12:25:20,210 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20" (1/1) ... [2022-01-10 12:25:20,212 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 12:25:20,213 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 12:25:20,213 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 12:25:20,213 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 12:25:20,223 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20" (1/1) ... [2022-01-10 12:25:20,229 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:25:20,237 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:25:20,245 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 12:25:20,256 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 12:25:20,270 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 12:25:20,270 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 12:25:20,270 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 12:25:20,270 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 12:25:20,332 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 12:25:20,333 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 12:25:20,668 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 12:25:20,677 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 12:25:20,677 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 12:25:20,679 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:25:20 BoogieIcfgContainer [2022-01-10 12:25:20,679 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 12:25:20,679 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 12:25:20,679 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 12:25:20,682 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 12:25:20,684 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:25:20" (1/1) ... [2022-01-10 12:25:20,772 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:25:20 BasicIcfg [2022-01-10 12:25:20,772 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 12:25:20,773 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 12:25:20,773 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 12:25:20,775 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 12:25:20,776 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 12:25:19" (1/4) ... [2022-01-10 12:25:20,776 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@66d6db77 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:25:20, skipping insertion in model container [2022-01-10 12:25:20,776 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:25:20" (2/4) ... [2022-01-10 12:25:20,776 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@66d6db77 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:25:20, skipping insertion in model container [2022-01-10 12:25:20,776 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:25:20" (3/4) ... [2022-01-10 12:25:20,777 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@66d6db77 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:25:20, skipping insertion in model container [2022-01-10 12:25:20,777 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:25:20" (4/4) ... [2022-01-10 12:25:20,777 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product42.cil.cTransformedIcfg [2022-01-10 12:25:20,781 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 12:25:20,781 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 12:25:20,826 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 12:25:20,830 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 12:25:20,831 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 12:25:20,846 INFO L276 IsEmpty]: Start isEmpty. Operand has 127 states, 123 states have (on average 1.3983739837398375) internal successors, (172), 126 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:20,854 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-10 12:25:20,854 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:25:20,854 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:20,855 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:25:20,861 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:25:20,862 INFO L85 PathProgramCache]: Analyzing trace with hash -13948437, now seen corresponding path program 1 times [2022-01-10 12:25:20,868 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:25:20,869 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2041764260] [2022-01-10 12:25:20,869 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:25:20,869 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:25:21,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:25:21,086 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:25:21,086 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:25:21,086 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2041764260] [2022-01-10 12:25:21,087 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2041764260] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:25:21,087 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:25:21,087 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:25:21,088 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [827221165] [2022-01-10 12:25:21,089 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:25:21,092 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 12:25:21,092 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:25:21,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 12:25:21,116 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:25:21,118 INFO L87 Difference]: Start difference. First operand has 127 states, 123 states have (on average 1.3983739837398375) internal successors, (172), 126 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:25:21,157 INFO L93 Difference]: Finished difference Result 244 states and 333 transitions. [2022-01-10 12:25:21,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 12:25:21,159 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-10 12:25:21,159 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:25:21,172 INFO L225 Difference]: With dead ends: 244 [2022-01-10 12:25:21,172 INFO L226 Difference]: Without dead ends: 117 [2022-01-10 12:25:21,175 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:25:21,179 INFO L933 BasicCegarLoop]: 162 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 162 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:25:21,180 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 162 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:25:21,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-01-10 12:25:21,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 117. [2022-01-10 12:25:21,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 114 states have (on average 1.3508771929824561) internal successors, (154), 116 states have internal predecessors, (154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 154 transitions. [2022-01-10 12:25:21,206 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 154 transitions. Word has length 19 [2022-01-10 12:25:21,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:25:21,206 INFO L470 AbstractCegarLoop]: Abstraction has 117 states and 154 transitions. [2022-01-10 12:25:21,206 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,206 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 154 transitions. [2022-01-10 12:25:21,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-10 12:25:21,207 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:25:21,207 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:21,207 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 12:25:21,207 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:25:21,208 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:25:21,208 INFO L85 PathProgramCache]: Analyzing trace with hash 1432591082, now seen corresponding path program 1 times [2022-01-10 12:25:21,208 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:25:21,208 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [925498702] [2022-01-10 12:25:21,208 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:25:21,208 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:25:21,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:25:21,257 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:25:21,257 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:25:21,257 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [925498702] [2022-01-10 12:25:21,257 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [925498702] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:25:21,257 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:25:21,257 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:25:21,257 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1724002712] [2022-01-10 12:25:21,258 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:25:21,258 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:25:21,258 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:25:21,259 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:25:21,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:25:21,259 INFO L87 Difference]: Start difference. First operand 117 states and 154 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:25:21,278 INFO L93 Difference]: Finished difference Result 227 states and 301 transitions. [2022-01-10 12:25:21,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:25:21,279 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-10 12:25:21,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:25:21,280 INFO L225 Difference]: With dead ends: 227 [2022-01-10 12:25:21,280 INFO L226 Difference]: Without dead ends: 117 [2022-01-10 12:25:21,281 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:25:21,281 INFO L933 BasicCegarLoop]: 148 mSDtfsCounter, 139 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:25:21,282 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [139 Valid, 148 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:25:21,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-01-10 12:25:21,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 117. [2022-01-10 12:25:21,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 117 states, 114 states have (on average 1.3245614035087718) internal successors, (151), 116 states have internal predecessors, (151), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,290 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117 states to 117 states and 151 transitions. [2022-01-10 12:25:21,290 INFO L78 Accepts]: Start accepts. Automaton has 117 states and 151 transitions. Word has length 20 [2022-01-10 12:25:21,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:25:21,291 INFO L470 AbstractCegarLoop]: Abstraction has 117 states and 151 transitions. [2022-01-10 12:25:21,291 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,291 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states and 151 transitions. [2022-01-10 12:25:21,292 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-01-10 12:25:21,292 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:25:21,292 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:21,292 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 12:25:21,292 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:25:21,293 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:25:21,293 INFO L85 PathProgramCache]: Analyzing trace with hash 1250315575, now seen corresponding path program 1 times [2022-01-10 12:25:21,293 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:25:21,293 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1643262152] [2022-01-10 12:25:21,293 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:25:21,293 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:25:21,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:25:21,328 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:25:21,329 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:25:21,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1643262152] [2022-01-10 12:25:21,329 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1643262152] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:25:21,329 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:25:21,329 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:25:21,329 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [43703238] [2022-01-10 12:25:21,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:25:21,330 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:25:21,330 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:25:21,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:25:21,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:25:21,330 INFO L87 Difference]: Start difference. First operand 117 states and 151 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:25:21,393 INFO L93 Difference]: Finished difference Result 295 states and 382 transitions. [2022-01-10 12:25:21,393 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:25:21,393 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-01-10 12:25:21,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:25:21,397 INFO L225 Difference]: With dead ends: 295 [2022-01-10 12:25:21,397 INFO L226 Difference]: Without dead ends: 185 [2022-01-10 12:25:21,398 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:25:21,399 INFO L933 BasicCegarLoop]: 156 mSDtfsCounter, 115 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 243 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:25:21,399 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [115 Valid, 243 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:25:21,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2022-01-10 12:25:21,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 179. [2022-01-10 12:25:21,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 176 states have (on average 1.3011363636363635) internal successors, (229), 178 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 229 transitions. [2022-01-10 12:25:21,413 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 229 transitions. Word has length 23 [2022-01-10 12:25:21,413 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:25:21,413 INFO L470 AbstractCegarLoop]: Abstraction has 179 states and 229 transitions. [2022-01-10 12:25:21,413 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,414 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 229 transitions. [2022-01-10 12:25:21,414 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-01-10 12:25:21,414 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:25:21,414 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:21,415 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 12:25:21,415 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:25:21,415 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:25:21,415 INFO L85 PathProgramCache]: Analyzing trace with hash 1469554561, now seen corresponding path program 1 times [2022-01-10 12:25:21,415 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:25:21,416 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [446209570] [2022-01-10 12:25:21,416 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:25:21,416 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:25:21,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:25:21,462 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:25:21,463 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:25:21,463 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [446209570] [2022-01-10 12:25:21,463 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [446209570] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:25:21,463 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:25:21,463 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:25:21,463 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [802486363] [2022-01-10 12:25:21,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:25:21,464 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 12:25:21,464 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:25:21,464 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 12:25:21,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 12:25:21,465 INFO L87 Difference]: Start difference. First operand 179 states and 229 transitions. Second operand has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:25:21,558 INFO L93 Difference]: Finished difference Result 683 states and 874 transitions. [2022-01-10 12:25:21,558 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:25:21,558 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-01-10 12:25:21,558 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:25:21,561 INFO L225 Difference]: With dead ends: 683 [2022-01-10 12:25:21,561 INFO L226 Difference]: Without dead ends: 511 [2022-01-10 12:25:21,562 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:25:21,563 INFO L933 BasicCegarLoop]: 174 mSDtfsCounter, 387 mSDsluCounter, 342 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 387 SdHoareTripleChecker+Valid, 516 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:25:21,563 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [387 Valid, 516 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:25:21,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511 states. [2022-01-10 12:25:21,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511 to 185. [2022-01-10 12:25:21,581 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 182 states have (on average 1.2912087912087913) internal successors, (235), 184 states have internal predecessors, (235), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 235 transitions. [2022-01-10 12:25:21,581 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 235 transitions. Word has length 29 [2022-01-10 12:25:21,582 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:25:21,582 INFO L470 AbstractCegarLoop]: Abstraction has 185 states and 235 transitions. [2022-01-10 12:25:21,582 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,582 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 235 transitions. [2022-01-10 12:25:21,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-01-10 12:25:21,583 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:25:21,583 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:21,583 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 12:25:21,583 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:25:21,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:25:21,584 INFO L85 PathProgramCache]: Analyzing trace with hash 1975113186, now seen corresponding path program 1 times [2022-01-10 12:25:21,584 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:25:21,584 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1114604554] [2022-01-10 12:25:21,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:25:21,584 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:25:21,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:25:21,633 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:25:21,633 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:25:21,633 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1114604554] [2022-01-10 12:25:21,633 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1114604554] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:25:21,633 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:25:21,634 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:25:21,634 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1968862972] [2022-01-10 12:25:21,634 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:25:21,634 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:25:21,634 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:25:21,635 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:25:21,635 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:25:21,635 INFO L87 Difference]: Start difference. First operand 185 states and 235 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:25:21,873 INFO L93 Difference]: Finished difference Result 979 states and 1249 transitions. [2022-01-10 12:25:21,874 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-01-10 12:25:21,874 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-01-10 12:25:21,874 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:25:21,876 INFO L225 Difference]: With dead ends: 979 [2022-01-10 12:25:21,876 INFO L226 Difference]: Without dead ends: 567 [2022-01-10 12:25:21,877 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-01-10 12:25:21,879 INFO L933 BasicCegarLoop]: 242 mSDtfsCounter, 620 mSDsluCounter, 601 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 620 SdHoareTripleChecker+Valid, 843 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 12:25:21,879 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [620 Valid, 843 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 12:25:21,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 567 states. [2022-01-10 12:25:21,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 567 to 251. [2022-01-10 12:25:21,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 251 states, 248 states have (on average 1.282258064516129) internal successors, (318), 250 states have internal predecessors, (318), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 251 states to 251 states and 318 transitions. [2022-01-10 12:25:21,909 INFO L78 Accepts]: Start accepts. Automaton has 251 states and 318 transitions. Word has length 29 [2022-01-10 12:25:21,910 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:25:21,913 INFO L470 AbstractCegarLoop]: Abstraction has 251 states and 318 transitions. [2022-01-10 12:25:21,913 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:21,913 INFO L276 IsEmpty]: Start isEmpty. Operand 251 states and 318 transitions. [2022-01-10 12:25:21,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-01-10 12:25:21,917 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:25:21,917 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:21,917 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 12:25:21,917 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:25:21,918 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:25:21,918 INFO L85 PathProgramCache]: Analyzing trace with hash 1369648411, now seen corresponding path program 1 times [2022-01-10 12:25:21,918 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:25:21,918 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2109328703] [2022-01-10 12:25:21,918 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:25:21,918 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:25:21,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:25:22,016 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:25:22,016 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:25:22,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2109328703] [2022-01-10 12:25:22,016 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2109328703] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:25:22,016 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:25:22,016 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 12:25:22,016 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1069081907] [2022-01-10 12:25:22,017 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:25:22,017 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-01-10 12:25:22,017 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:25:22,018 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-01-10 12:25:22,018 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:25:22,018 INFO L87 Difference]: Start difference. First operand 251 states and 318 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:22,184 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:25:22,184 INFO L93 Difference]: Finished difference Result 711 states and 905 transitions. [2022-01-10 12:25:22,185 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-10 12:25:22,185 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-01-10 12:25:22,185 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:25:22,186 INFO L225 Difference]: With dead ends: 711 [2022-01-10 12:25:22,186 INFO L226 Difference]: Without dead ends: 467 [2022-01-10 12:25:22,187 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:25:22,191 INFO L933 BasicCegarLoop]: 233 mSDtfsCounter, 155 mSDsluCounter, 962 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 1195 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:25:22,194 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [155 Valid, 1195 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:25:22,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 467 states. [2022-01-10 12:25:22,230 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 467 to 461. [2022-01-10 12:25:22,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 461 states, 458 states have (on average 1.2707423580786026) internal successors, (582), 460 states have internal predecessors, (582), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:22,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 461 states and 582 transitions. [2022-01-10 12:25:22,232 INFO L78 Accepts]: Start accepts. Automaton has 461 states and 582 transitions. Word has length 38 [2022-01-10 12:25:22,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:25:22,233 INFO L470 AbstractCegarLoop]: Abstraction has 461 states and 582 transitions. [2022-01-10 12:25:22,233 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:22,234 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 582 transitions. [2022-01-10 12:25:22,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-01-10 12:25:22,235 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:25:22,235 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:22,236 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 12:25:22,236 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:25:22,236 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:25:22,236 INFO L85 PathProgramCache]: Analyzing trace with hash 859114234, now seen corresponding path program 1 times [2022-01-10 12:25:22,236 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:25:22,236 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [670671133] [2022-01-10 12:25:22,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:25:22,237 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:25:22,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:25:22,308 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:25:22,308 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:25:22,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [670671133] [2022-01-10 12:25:22,309 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [670671133] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:25:22,309 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:25:22,309 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:25:22,309 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [723841899] [2022-01-10 12:25:22,309 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:25:22,310 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 12:25:22,310 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:25:22,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 12:25:22,310 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 12:25:22,310 INFO L87 Difference]: Start difference. First operand 461 states and 582 transitions. Second operand has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:22,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:25:22,377 INFO L93 Difference]: Finished difference Result 892 states and 1133 transitions. [2022-01-10 12:25:22,378 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-10 12:25:22,378 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-01-10 12:25:22,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:25:22,380 INFO L225 Difference]: With dead ends: 892 [2022-01-10 12:25:22,380 INFO L226 Difference]: Without dead ends: 566 [2022-01-10 12:25:22,380 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:25:22,381 INFO L933 BasicCegarLoop]: 207 mSDtfsCounter, 261 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 482 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:25:22,382 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [261 Valid, 482 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:25:22,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 566 states. [2022-01-10 12:25:22,454 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 566 to 461. [2022-01-10 12:25:22,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 461 states, 458 states have (on average 1.2641921397379912) internal successors, (579), 460 states have internal predecessors, (579), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:22,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 461 states and 579 transitions. [2022-01-10 12:25:22,456 INFO L78 Accepts]: Start accepts. Automaton has 461 states and 579 transitions. Word has length 38 [2022-01-10 12:25:22,456 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:25:22,456 INFO L470 AbstractCegarLoop]: Abstraction has 461 states and 579 transitions. [2022-01-10 12:25:22,456 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.5) internal successors, (38), 4 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:22,456 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 579 transitions. [2022-01-10 12:25:22,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-01-10 12:25:22,457 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:25:22,457 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:22,457 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 12:25:22,458 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:25:22,458 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:25:22,458 INFO L85 PathProgramCache]: Analyzing trace with hash 353555609, now seen corresponding path program 1 times [2022-01-10 12:25:22,458 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:25:22,459 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [793313469] [2022-01-10 12:25:22,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:25:22,459 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:25:22,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:25:22,507 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:25:22,507 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:25:22,507 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [793313469] [2022-01-10 12:25:22,507 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [793313469] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:25:22,507 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:25:22,507 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:25:22,507 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [623386938] [2022-01-10 12:25:22,507 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:25:22,508 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:25:22,508 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:25:22,508 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:25:22,509 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:25:22,509 INFO L87 Difference]: Start difference. First operand 461 states and 579 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:22,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:25:22,612 INFO L93 Difference]: Finished difference Result 1136 states and 1437 transitions. [2022-01-10 12:25:22,613 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:25:22,613 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-01-10 12:25:22,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:25:22,615 INFO L225 Difference]: With dead ends: 1136 [2022-01-10 12:25:22,615 INFO L226 Difference]: Without dead ends: 810 [2022-01-10 12:25:22,616 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:25:22,617 INFO L933 BasicCegarLoop]: 283 mSDtfsCounter, 472 mSDsluCounter, 598 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 472 SdHoareTripleChecker+Valid, 881 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:25:22,620 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [472 Valid, 881 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:25:22,621 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 810 states. [2022-01-10 12:25:22,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 810 to 458. [2022-01-10 12:25:22,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 458 states, 455 states have (on average 1.2593406593406593) internal successors, (573), 457 states have internal predecessors, (573), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:22,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 458 states to 458 states and 573 transitions. [2022-01-10 12:25:22,661 INFO L78 Accepts]: Start accepts. Automaton has 458 states and 573 transitions. Word has length 38 [2022-01-10 12:25:22,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:25:22,662 INFO L470 AbstractCegarLoop]: Abstraction has 458 states and 573 transitions. [2022-01-10 12:25:22,662 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 5 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:22,662 INFO L276 IsEmpty]: Start isEmpty. Operand 458 states and 573 transitions. [2022-01-10 12:25:22,663 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-01-10 12:25:22,663 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:25:22,663 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:22,663 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 12:25:22,663 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:25:22,663 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:25:22,664 INFO L85 PathProgramCache]: Analyzing trace with hash -1169759521, now seen corresponding path program 1 times [2022-01-10 12:25:22,664 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:25:22,664 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [228991569] [2022-01-10 12:25:22,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:25:22,664 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:25:22,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:25:22,740 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:25:22,740 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:25:22,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [228991569] [2022-01-10 12:25:22,740 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [228991569] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:25:22,740 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:25:22,740 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:25:22,741 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [569744833] [2022-01-10 12:25:22,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:25:22,742 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 12:25:22,742 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:25:22,742 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 12:25:22,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:25:22,743 INFO L87 Difference]: Start difference. First operand 458 states and 573 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:23,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:25:23,121 INFO L93 Difference]: Finished difference Result 2815 states and 3510 transitions. [2022-01-10 12:25:23,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-01-10 12:25:23,121 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-01-10 12:25:23,122 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:25:23,129 INFO L225 Difference]: With dead ends: 2815 [2022-01-10 12:25:23,129 INFO L226 Difference]: Without dead ends: 2364 [2022-01-10 12:25:23,131 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-01-10 12:25:23,132 INFO L933 BasicCegarLoop]: 205 mSDtfsCounter, 1104 mSDsluCounter, 1272 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1104 SdHoareTripleChecker+Valid, 1477 SdHoareTripleChecker+Invalid, 163 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:25:23,132 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1104 Valid, 1477 Invalid, 163 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:25:23,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2364 states. [2022-01-10 12:25:23,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2364 to 853. [2022-01-10 12:25:23,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 853 states, 850 states have (on average 1.2458823529411764) internal successors, (1059), 852 states have internal predecessors, (1059), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:23,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 853 states to 853 states and 1059 transitions. [2022-01-10 12:25:23,219 INFO L78 Accepts]: Start accepts. Automaton has 853 states and 1059 transitions. Word has length 41 [2022-01-10 12:25:23,219 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:25:23,219 INFO L470 AbstractCegarLoop]: Abstraction has 853 states and 1059 transitions. [2022-01-10 12:25:23,219 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:23,219 INFO L276 IsEmpty]: Start isEmpty. Operand 853 states and 1059 transitions. [2022-01-10 12:25:23,220 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-01-10 12:25:23,220 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:25:23,220 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:23,220 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 12:25:23,220 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:25:23,221 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:25:23,221 INFO L85 PathProgramCache]: Analyzing trace with hash -1926913389, now seen corresponding path program 1 times [2022-01-10 12:25:23,221 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:25:23,221 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [69526370] [2022-01-10 12:25:23,221 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:25:23,221 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:25:23,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:25:23,270 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:25:23,270 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:25:23,270 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [69526370] [2022-01-10 12:25:23,270 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [69526370] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:25:23,270 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:25:23,270 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:25:23,270 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [938548352] [2022-01-10 12:25:23,270 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:25:23,270 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:25:23,271 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:25:23,271 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:25:23,271 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:25:23,271 INFO L87 Difference]: Start difference. First operand 853 states and 1059 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:23,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:25:23,470 INFO L93 Difference]: Finished difference Result 1786 states and 2241 transitions. [2022-01-10 12:25:23,470 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-01-10 12:25:23,470 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-01-10 12:25:23,470 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:25:23,471 INFO L225 Difference]: With dead ends: 1786 [2022-01-10 12:25:23,471 INFO L226 Difference]: Without dead ends: 245 [2022-01-10 12:25:23,473 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-01-10 12:25:23,473 INFO L933 BasicCegarLoop]: 278 mSDtfsCounter, 361 mSDsluCounter, 656 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 361 SdHoareTripleChecker+Valid, 934 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:25:23,474 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [361 Valid, 934 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:25:23,475 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 245 states. [2022-01-10 12:25:23,488 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 245 to 173. [2022-01-10 12:25:23,489 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 173 states, 170 states have (on average 1.1529411764705881) internal successors, (196), 172 states have internal predecessors, (196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:23,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 173 states to 173 states and 196 transitions. [2022-01-10 12:25:23,491 INFO L78 Accepts]: Start accepts. Automaton has 173 states and 196 transitions. Word has length 42 [2022-01-10 12:25:23,491 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:25:23,491 INFO L470 AbstractCegarLoop]: Abstraction has 173 states and 196 transitions. [2022-01-10 12:25:23,491 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:23,491 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 196 transitions. [2022-01-10 12:25:23,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-01-10 12:25:23,492 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:25:23,492 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:23,492 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-10 12:25:23,492 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:25:23,493 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:25:23,493 INFO L85 PathProgramCache]: Analyzing trace with hash -1092302268, now seen corresponding path program 1 times [2022-01-10 12:25:23,493 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:25:23,493 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [510071235] [2022-01-10 12:25:23,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:25:23,493 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:25:23,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:25:23,534 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:25:23,534 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:25:23,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [510071235] [2022-01-10 12:25:23,535 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [510071235] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:25:23,535 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:25:23,535 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:25:23,535 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1650985256] [2022-01-10 12:25:23,535 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:25:23,535 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:25:23,535 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:25:23,535 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:25:23,536 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:25:23,536 INFO L87 Difference]: Start difference. First operand 173 states and 196 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:23,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:25:23,612 INFO L93 Difference]: Finished difference Result 444 states and 503 transitions. [2022-01-10 12:25:23,613 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 12:25:23,613 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-01-10 12:25:23,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:25:23,613 INFO L225 Difference]: With dead ends: 444 [2022-01-10 12:25:23,613 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 12:25:23,614 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 12:25:23,614 INFO L933 BasicCegarLoop]: 171 mSDtfsCounter, 242 mSDsluCounter, 266 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 437 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:25:23,614 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [242 Valid, 437 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:25:23,615 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 12:25:23,615 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 12:25:23,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:23,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 12:25:23,615 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 43 [2022-01-10 12:25:23,615 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:25:23,615 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 12:25:23,615 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:25:23,615 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 12:25:23,615 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 12:25:23,617 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 12:25:23,618 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 12:25:23,618 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 12:25:23,618 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 12:25:23,619 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 12:25:32,814 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 12:25:32,814 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 12:25:32,814 INFO L854 garLoopResultBuilder]: At program point L534(lines 530 536) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:25:32,814 INFO L854 garLoopResultBuilder]: At program point L527(lines 523 529) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:25:32,814 INFO L854 garLoopResultBuilder]: At program point L542(lines 537 545) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:25:32,814 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-01-10 12:25:32,814 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 12:25:32,815 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-01-10 12:25:32,815 INFO L854 garLoopResultBuilder]: At program point L165-2(lines 165 212) the Hoare annotation is: (let ((.cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse6 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse6) (<= (+ 2 .cse6) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) .cse5 (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse1 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) (and .cse0 .cse1 .cse2 .cse4 (<= ~methaneLevelCritical~0Int 0)))) [2022-01-10 12:25:32,815 INFO L861 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-01-10 12:25:32,815 INFO L854 garLoopResultBuilder]: At program point L213(lines 164 214) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,815 INFO L858 garLoopResultBuilder]: For program point L166(lines 165 212) no Hoare annotation was computed. [2022-01-10 12:25:32,815 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 12:25:32,815 INFO L858 garLoopResultBuilder]: For program point L237-3(lines 237 243) no Hoare annotation was computed. [2022-01-10 12:25:32,815 INFO L858 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-01-10 12:25:32,815 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 12:25:32,815 INFO L858 garLoopResultBuilder]: For program point L415-3(lines 415 419) no Hoare annotation was computed. [2022-01-10 12:25:32,815 INFO L858 garLoopResultBuilder]: For program point L237-5(lines 236 255) no Hoare annotation was computed. [2022-01-10 12:25:32,815 INFO L858 garLoopResultBuilder]: For program point L175(lines 175 181) no Hoare annotation was computed. [2022-01-10 12:25:32,815 INFO L854 garLoopResultBuilder]: At program point L415-5(lines 411 422) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,816 INFO L858 garLoopResultBuilder]: For program point L269-2(lines 269 286) no Hoare annotation was computed. [2022-01-10 12:25:32,816 INFO L858 garLoopResultBuilder]: For program point L244-3(lines 244 250) no Hoare annotation was computed. [2022-01-10 12:25:32,816 INFO L858 garLoopResultBuilder]: For program point L427(lines 427 431) no Hoare annotation was computed. [2022-01-10 12:25:32,816 INFO L858 garLoopResultBuilder]: For program point L175-2(lines 175 181) no Hoare annotation was computed. [2022-01-10 12:25:32,816 INFO L858 garLoopResultBuilder]: For program point L492-1(lines 492 498) no Hoare annotation was computed. [2022-01-10 12:25:32,816 INFO L854 garLoopResultBuilder]: At program point L261-3(lines 257 263) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,816 INFO L854 garLoopResultBuilder]: At program point L452-3(lines 447 455) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,816 INFO L854 garLoopResultBuilder]: At program point L427-2(lines 423 434) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (let ((.cse3 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse3) (<= (+ 2 .cse3) ~waterLevel~0Int)))) (.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|)) (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,816 INFO L858 garLoopResultBuilder]: For program point L185(lines 185 191) no Hoare annotation was computed. [2022-01-10 12:25:32,816 INFO L854 garLoopResultBuilder]: At program point L497-1(lines 488 501) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) .cse0 .cse1))) [2022-01-10 12:25:32,816 INFO L854 garLoopResultBuilder]: At program point L269-3(lines 265 289) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,816 INFO L858 garLoopResultBuilder]: For program point L922-2(lines 922 942) no Hoare annotation was computed. [2022-01-10 12:25:32,817 INFO L858 garLoopResultBuilder]: For program point L439(lines 439 443) no Hoare annotation was computed. [2022-01-10 12:25:32,817 INFO L858 garLoopResultBuilder]: For program point L185-2(lines 185 191) no Hoare annotation was computed. [2022-01-10 12:25:32,817 INFO L858 garLoopResultBuilder]: For program point L389-3(lines 389 393) no Hoare annotation was computed. [2022-01-10 12:25:32,817 INFO L854 garLoopResultBuilder]: At program point L928-3(lines 913 945) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,817 INFO L854 garLoopResultBuilder]: At program point L484-1(lines 479 487) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,817 INFO L854 garLoopResultBuilder]: At program point L439-2(lines 435 446) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 ~waterLevel~0Int))) (or (and .cse0 .cse1 (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int)))) (and .cse3 .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) (and .cse3 .cse0 .cse1 .cse4 (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 12:25:32,817 INFO L858 garLoopResultBuilder]: For program point L195(lines 195 208) no Hoare annotation was computed. [2022-01-10 12:25:32,817 INFO L858 garLoopResultBuilder]: For program point L389-5(lines 389 393) no Hoare annotation was computed. [2022-01-10 12:25:32,817 INFO L854 garLoopResultBuilder]: At program point L254-1(lines 233 256) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,817 INFO L858 garLoopResultBuilder]: For program point L928-2(lines 928 941) no Hoare annotation was computed. [2022-01-10 12:25:32,817 INFO L854 garLoopResultBuilder]: At program point L404(lines 399 406) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int)))) (and (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,817 INFO L858 garLoopResultBuilder]: For program point L203(lines 203 207) no Hoare annotation was computed. [2022-01-10 12:25:32,818 INFO L854 garLoopResultBuilder]: At program point L395-1(lines 380 398) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:32,818 INFO L854 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,818 INFO L854 garLoopResultBuilder]: At program point L340-1(lines 335 343) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) [2022-01-10 12:25:32,818 INFO L858 garLoopResultBuilder]: For program point L203-2(lines 195 208) no Hoare annotation was computed. [2022-01-10 12:25:32,818 INFO L858 garLoopResultBuilder]: For program point L273-3(lines 273 281) no Hoare annotation was computed. [2022-01-10 12:25:32,818 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-01-10 12:25:32,818 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-01-10 12:25:32,818 INFO L858 garLoopResultBuilder]: For program point L932-3(lines 932 938) no Hoare annotation was computed. [2022-01-10 12:25:32,818 INFO L858 garLoopResultBuilder]: For program point L237(lines 237 243) no Hoare annotation was computed. [2022-01-10 12:25:32,818 INFO L854 garLoopResultBuilder]: At program point L452-2(lines 447 455) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:32,818 INFO L854 garLoopResultBuilder]: At program point L261-2(lines 257 263) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:25:32,818 INFO L861 garLoopResultBuilder]: At program point L218(lines 155 220) the Hoare annotation is: true [2022-01-10 12:25:32,818 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-01-10 12:25:32,819 INFO L858 garLoopResultBuilder]: For program point L507-1(line 507) no Hoare annotation was computed. [2022-01-10 12:25:32,819 INFO L858 garLoopResultBuilder]: For program point L415(lines 415 419) no Hoare annotation was computed. [2022-01-10 12:25:32,819 INFO L858 garLoopResultBuilder]: For program point L237-2(lines 236 255) no Hoare annotation was computed. [2022-01-10 12:25:32,819 INFO L854 garLoopResultBuilder]: At program point L331-1(lines 324 334) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:32,819 INFO L861 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-01-10 12:25:32,819 INFO L858 garLoopResultBuilder]: For program point L66-1(lines 66 70) no Hoare annotation was computed. [2022-01-10 12:25:32,819 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 507) no Hoare annotation was computed. [2022-01-10 12:25:32,819 INFO L854 garLoopResultBuilder]: At program point L508-1(lines 503 510) the Hoare annotation is: false [2022-01-10 12:25:32,819 INFO L854 garLoopResultBuilder]: At program point L415-2(lines 411 422) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) [2022-01-10 12:25:32,819 INFO L858 garLoopResultBuilder]: For program point L269(lines 269 286) no Hoare annotation was computed. [2022-01-10 12:25:32,819 INFO L858 garLoopResultBuilder]: For program point L244-1(lines 244 250) no Hoare annotation was computed. [2022-01-10 12:25:32,819 INFO L858 garLoopResultBuilder]: For program point L306-3(lines 306 312) no Hoare annotation was computed. [2022-01-10 12:25:32,819 INFO L858 garLoopResultBuilder]: For program point L237-6(lines 237 243) no Hoare annotation was computed. [2022-01-10 12:25:32,819 INFO L858 garLoopResultBuilder]: For program point L492(lines 492 498) no Hoare annotation was computed. [2022-01-10 12:25:32,819 INFO L854 garLoopResultBuilder]: At program point L261-1(lines 257 263) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) [2022-01-10 12:25:32,820 INFO L854 garLoopResultBuilder]: At program point L452-1(lines 447 455) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 .cse4 .cse3 .cse5) (and .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse6 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse6) (<= (+ 2 .cse6) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) .cse5 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse1 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,820 INFO L854 garLoopResultBuilder]: At program point L306-5(lines 299 315) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|)) (.cse3 (let ((.cse8 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse8) (<= (+ 2 .cse8) ~waterLevel~0Int)))) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0)) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0Int 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) .cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)) .cse6 .cse7) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 .cse4 .cse5 .cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) .cse7))) [2022-01-10 12:25:32,820 INFO L854 garLoopResultBuilder]: At program point L295-1(lines 290 297) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= ~pumpRunning~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and (<= ~waterLevel~0Int 1) .cse0))) [2022-01-10 12:25:32,820 INFO L858 garLoopResultBuilder]: For program point L415-6(lines 415 419) no Hoare annotation was computed. [2022-01-10 12:25:32,820 INFO L858 garLoopResultBuilder]: For program point L237-8(lines 236 255) no Hoare annotation was computed. [2022-01-10 12:25:32,820 INFO L854 garLoopResultBuilder]: At program point L497(lines 488 501) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse1 (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:32,820 INFO L854 garLoopResultBuilder]: At program point L269-1(lines 265 289) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,820 INFO L858 garLoopResultBuilder]: For program point L922(lines 922 942) no Hoare annotation was computed. [2022-01-10 12:25:32,820 INFO L854 garLoopResultBuilder]: At program point L415-8(lines 411 422) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,820 INFO L858 garLoopResultBuilder]: For program point L269-4(lines 269 286) no Hoare annotation was computed. [2022-01-10 12:25:32,820 INFO L858 garLoopResultBuilder]: For program point L244-5(lines 244 250) no Hoare annotation was computed. [2022-01-10 12:25:32,820 INFO L858 garLoopResultBuilder]: For program point L389(lines 389 393) no Hoare annotation was computed. [2022-01-10 12:25:32,821 INFO L854 garLoopResultBuilder]: At program point L928-1(lines 913 945) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|)) (.cse7 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)) (and .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse5 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse5) (<= (+ 2 .cse5) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) .cse6 .cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 .cse2 .cse4 .cse3 .cse6 .cse7) (and .cse1 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,821 INFO L854 garLoopResultBuilder]: At program point L484(lines 479 487) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,821 INFO L858 garLoopResultBuilder]: For program point L492-2(lines 492 498) no Hoare annotation was computed. [2022-01-10 12:25:32,821 INFO L854 garLoopResultBuilder]: At program point L261-5(lines 257 263) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,821 INFO L854 garLoopResultBuilder]: At program point L452-5(lines 447 455) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,821 INFO L858 garLoopResultBuilder]: For program point L389-2(lines 389 393) no Hoare annotation was computed. [2022-01-10 12:25:32,821 INFO L854 garLoopResultBuilder]: At program point L254(lines 233 256) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|)) (.cse7 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)) (and .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse5 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse5) (<= (+ 2 .cse5) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) .cse6 .cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 .cse2 .cse4 .cse3 .cse6 .cse7) (and .cse1 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,821 INFO L858 garLoopResultBuilder]: For program point L928(lines 928 941) no Hoare annotation was computed. [2022-01-10 12:25:32,821 INFO L854 garLoopResultBuilder]: At program point L497-2(lines 488 501) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) .cse0 .cse1))) [2022-01-10 12:25:32,821 INFO L854 garLoopResultBuilder]: At program point L269-5(lines 265 289) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,821 INFO L858 garLoopResultBuilder]: For program point L922-4(lines 922 942) no Hoare annotation was computed. [2022-01-10 12:25:32,821 INFO L854 garLoopResultBuilder]: At program point L395(lines 380 398) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:32,821 INFO L854 garLoopResultBuilder]: At program point L340(lines 335 343) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) [2022-01-10 12:25:32,821 INFO L858 garLoopResultBuilder]: For program point L389-6(lines 389 393) no Hoare annotation was computed. [2022-01-10 12:25:32,822 INFO L854 garLoopResultBuilder]: At program point L928-5(lines 913 945) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,822 INFO L854 garLoopResultBuilder]: At program point L484-2(lines 479 487) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,822 INFO L858 garLoopResultBuilder]: For program point L273(lines 273 281) no Hoare annotation was computed. [2022-01-10 12:25:32,822 INFO L858 garLoopResultBuilder]: For program point L932(lines 932 938) no Hoare annotation was computed. [2022-01-10 12:25:32,822 INFO L858 garLoopResultBuilder]: For program point L389-8(lines 389 393) no Hoare annotation was computed. [2022-01-10 12:25:32,822 INFO L854 garLoopResultBuilder]: At program point L254-2(lines 233 256) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))))) [2022-01-10 12:25:32,822 INFO L858 garLoopResultBuilder]: For program point L928-4(lines 928 941) no Hoare annotation was computed. [2022-01-10 12:25:32,822 INFO L854 garLoopResultBuilder]: At program point L452(lines 447 455) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0Int 1)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse13 (<= 1 ~waterLevel~0Int)) (.cse9 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse12 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|)) (.cse5 (let ((.cse15 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse15) (<= (+ 2 .cse15) ~waterLevel~0Int)))) (.cse6 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1))) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0)) (.cse8 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse14 (<= 1 ~methaneLevelCritical~0Int)) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse0 .cse1 .cse3 .cse12 .cse13 .cse14) (and .cse11 .cse0 .cse1 .cse2 .cse3 .cse13 .cse9) (and .cse0 .cse1 .cse3 .cse12 .cse4 .cse5 .cse6 .cse7 .cse8 .cse14 .cse10))) [2022-01-10 12:25:32,822 INFO L854 garLoopResultBuilder]: At program point L261(lines 257 263) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 12:25:32,822 INFO L858 garLoopResultBuilder]: For program point L507(line 507) no Hoare annotation was computed. [2022-01-10 12:25:32,822 INFO L854 garLoopResultBuilder]: At program point L395-2(lines 380 398) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:32,822 INFO L854 garLoopResultBuilder]: At program point L340-2(lines 335 343) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1))) [2022-01-10 12:25:32,823 INFO L854 garLoopResultBuilder]: At program point L331(lines 324 334) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse5 (<= 1 ~waterLevel~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse6 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse8 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse10 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|)) (.cse11 (let ((.cse16 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse16) (<= (+ 2 .cse16) ~waterLevel~0Int)))) (.cse12 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1))) (.cse13 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0)) (.cse14 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse9 (<= 1 ~methaneLevelCritical~0Int)) (.cse15 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse8 .cse5 .cse9) (and .cse1 .cse2 .cse3 .cse4 .cse10 .cse11 .cse12 .cse13 .cse14 .cse6 .cse15 .cse7) (and .cse1 .cse2 .cse4 .cse8 .cse10 .cse11 .cse12 .cse13 .cse14 .cse9 .cse15))) [2022-01-10 12:25:32,823 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 507) no Hoare annotation was computed. [2022-01-10 12:25:32,823 INFO L854 garLoopResultBuilder]: At program point L508(lines 503 510) the Hoare annotation is: false [2022-01-10 12:25:32,823 INFO L858 garLoopResultBuilder]: For program point L273-6(lines 273 281) no Hoare annotation was computed. [2022-01-10 12:25:32,823 INFO L858 garLoopResultBuilder]: For program point L932-6(lines 932 938) no Hoare annotation was computed. [2022-01-10 12:25:32,823 INFO L858 garLoopResultBuilder]: For program point L306(lines 306 312) no Hoare annotation was computed. [2022-01-10 12:25:32,823 INFO L854 garLoopResultBuilder]: At program point L452-4(lines 447 455) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:32,823 INFO L854 garLoopResultBuilder]: At program point L261-4(lines 257 263) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:25:32,823 INFO L858 garLoopResultBuilder]: For program point L507-2(line 507) no Hoare annotation was computed. [2022-01-10 12:25:32,823 INFO L854 garLoopResultBuilder]: At program point L306-2(lines 299 315) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0Int 0)) (.cse13 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|)) (.cse3 (let ((.cse16 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse16) (<= (+ 2 .cse16) ~waterLevel~0Int)))) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1))) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0)) (.cse9 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse15 (<= 1 ~methaneLevelCritical~0Int)) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (.cse11 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse4 (= ~pumpRunning~0Int 1)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0)) (.cse14 (<= 1 ~waterLevel~0Int)) (.cse8 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse0 .cse12 .cse1 .cse13 .cse14 .cse15) (and .cse0 .cse12 .cse1 .cse13 .cse2 .cse3 .cse5 .cse7 .cse9 .cse15 .cse10) (and .cse11 .cse0 .cse1 .cse4 .cse6 .cse14 .cse8))) [2022-01-10 12:25:32,824 INFO L854 garLoopResultBuilder]: At program point L295(lines 290 297) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse3 (= ~pumpRunning~0Int 1)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0)) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) .cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) .cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse3 .cse4 (<= 1 ~waterLevel~0Int) .cse5))) [2022-01-10 12:25:32,824 INFO L854 garLoopResultBuilder]: At program point L331-2(lines 324 334) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 12:25:32,824 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 507) no Hoare annotation was computed. [2022-01-10 12:25:32,824 INFO L854 garLoopResultBuilder]: At program point L508-2(lines 503 510) the Hoare annotation is: false [2022-01-10 12:25:32,824 INFO L858 garLoopResultBuilder]: For program point L306-6(lines 306 312) no Hoare annotation was computed. [2022-01-10 12:25:32,824 INFO L854 garLoopResultBuilder]: At program point L306-8(lines 299 315) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|)) (.cse3 (let ((.cse8 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse8) (<= (+ 2 .cse8) ~waterLevel~0Int)))) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0)) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~pumpRunning~0Int 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) .cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)) .cse6 .cse7) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 .cse4 .cse5 .cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int) .cse7))) [2022-01-10 12:25:32,824 INFO L854 garLoopResultBuilder]: At program point L295-2(lines 290 297) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= ~pumpRunning~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~4#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~3#1Int| 1)) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and (<= ~waterLevel~0Int 1) .cse0))) [2022-01-10 12:25:32,826 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:25:32,829 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 12:25:32,920 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:25:32 BasicIcfg [2022-01-10 12:25:32,921 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 12:25:32,921 INFO L158 Benchmark]: Toolchain (without parser) took 13255.55ms. Allocated memory was 203.4MB in the beginning and 1.1GB in the end (delta: 932.2MB). Free memory was 152.2MB in the beginning and 548.9MB in the end (delta: -396.7MB). Peak memory consumption was 546.3MB. Max. memory is 8.0GB. [2022-01-10 12:25:32,921 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 203.4MB. Free memory was 169.4MB in the beginning and 169.4MB in the end (delta: 72.3kB). There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 12:25:32,921 INFO L158 Benchmark]: CACSL2BoogieTranslator took 437.95ms. Allocated memory is still 203.4MB. Free memory was 152.0MB in the beginning and 164.6MB in the end (delta: -12.6MB). Peak memory consumption was 11.0MB. Max. memory is 8.0GB. [2022-01-10 12:25:32,922 INFO L158 Benchmark]: Boogie Procedure Inliner took 52.13ms. Allocated memory is still 203.4MB. Free memory was 164.6MB in the beginning and 161.4MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 12:25:32,922 INFO L158 Benchmark]: Boogie Preprocessor took 53.75ms. Allocated memory is still 203.4MB. Free memory was 161.4MB in the beginning and 159.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 12:25:32,922 INFO L158 Benchmark]: RCFGBuilder took 465.83ms. Allocated memory is still 203.4MB. Free memory was 159.3MB in the beginning and 138.9MB in the end (delta: 20.4MB). Peak memory consumption was 21.0MB. Max. memory is 8.0GB. [2022-01-10 12:25:32,922 INFO L158 Benchmark]: IcfgTransformer took 92.98ms. Allocated memory is still 203.4MB. Free memory was 138.9MB in the beginning and 131.0MB in the end (delta: 7.9MB). Peak memory consumption was 7.3MB. Max. memory is 8.0GB. [2022-01-10 12:25:32,922 INFO L158 Benchmark]: TraceAbstraction took 12147.33ms. Allocated memory was 203.4MB in the beginning and 1.1GB in the end (delta: 932.2MB). Free memory was 130.5MB in the beginning and 548.9MB in the end (delta: -418.4MB). Peak memory consumption was 524.8MB. Max. memory is 8.0GB. [2022-01-10 12:25:32,927 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 203.4MB. Free memory was 169.4MB in the beginning and 169.4MB in the end (delta: 72.3kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 437.95ms. Allocated memory is still 203.4MB. Free memory was 152.0MB in the beginning and 164.6MB in the end (delta: -12.6MB). Peak memory consumption was 11.0MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 52.13ms. Allocated memory is still 203.4MB. Free memory was 164.6MB in the beginning and 161.4MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 53.75ms. Allocated memory is still 203.4MB. Free memory was 161.4MB in the beginning and 159.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 465.83ms. Allocated memory is still 203.4MB. Free memory was 159.3MB in the beginning and 138.9MB in the end (delta: 20.4MB). Peak memory consumption was 21.0MB. Max. memory is 8.0GB. * IcfgTransformer took 92.98ms. Allocated memory is still 203.4MB. Free memory was 138.9MB in the beginning and 131.0MB in the end (delta: 7.9MB). Peak memory consumption was 7.3MB. Max. memory is 8.0GB. * TraceAbstraction took 12147.33ms. Allocated memory was 203.4MB in the beginning and 1.1GB in the end (delta: 932.2MB). Free memory was 130.5MB in the beginning and 548.9MB in the end (delta: -418.4MB). Peak memory consumption was 524.8MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 507]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 507]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 507]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 127 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 12.0s, OverallIterations: 11, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3856 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3856 mSDsluCounter, 7318 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5059 mSDsCounter, 159 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 624 IncrementalHoareTripleChecker+Invalid, 783 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 159 mSolverCounterUnsat, 2259 mSDtfsCounter, 624 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 74 GetRequests, 24 SyntacticMatches, 0 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=853occurred in iteration=9, InterpolantAutomatonStates: 63, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 11 MinimizatonAttempts, 2694 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 62 LocationsWithAnnotation, 62 PreInvPairs, 574 NumberOfFragments, 3361 HoareAnnotationTreeSize, 62 FomulaSimplifications, 174156 FormulaSimplificationTreeSizeReduction, 3.3s HoareSimplificationTime, 62 FomulaSimplificationsInter, 169776 FormulaSimplificationTreeSizeReductionInter, 5.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.4s InterpolantComputationTime, 360 NumberOfCodeBlocks, 360 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 349 ConstructedInterpolants, 0 QuantifiedInterpolants, 883 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 11 InterpolantComputations, 11 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: ((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: ((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: ((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 523]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 479]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || ((~bvule32(\result, 1bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 479]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || ((~bvule32(\result, 1bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || ((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32))) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 399]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((~bvule32(1bv32, systemActive) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 0bv32 == pumpRunning) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 479]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 1bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 435]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((~bvule32(1bv32, systemActive) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 0bv32 == pumpRunning) - InvariantResult [Line: 423]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 0bv32 == pumpRunning) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp___0)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 257]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning RESULT: Ultimate proved your program to be correct! [2022-01-10 12:25:32,972 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...