/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 12:27:48,478 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 12:27:48,480 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 12:27:48,511 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 12:27:48,512 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 12:27:48,514 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 12:27:48,517 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 12:27:48,521 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 12:27:48,532 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 12:27:48,537 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 12:27:48,538 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 12:27:48,539 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 12:27:48,539 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 12:27:48,541 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 12:27:48,542 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 12:27:48,543 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 12:27:48,543 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 12:27:48,544 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 12:27:48,547 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 12:27:48,551 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 12:27:48,552 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 12:27:48,553 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 12:27:48,554 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 12:27:48,555 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 12:27:48,560 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 12:27:48,560 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 12:27:48,560 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 12:27:48,561 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 12:27:48,561 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 12:27:48,562 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 12:27:48,562 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 12:27:48,562 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 12:27:48,564 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 12:27:48,564 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 12:27:48,565 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 12:27:48,566 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 12:27:48,566 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 12:27:48,566 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 12:27:48,567 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 12:27:48,567 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 12:27:48,567 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 12:27:48,568 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf [2022-01-10 12:27:48,598 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 12:27:48,598 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 12:27:48,599 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 12:27:48,599 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 12:27:48,600 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 12:27:48,600 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 12:27:48,600 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 12:27:48,600 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 12:27:48,600 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 12:27:48,600 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 12:27:48,601 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 12:27:48,601 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 12:27:48,601 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 12:27:48,601 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 12:27:48,601 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 12:27:48,601 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 12:27:48,601 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 12:27:48,601 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 12:27:48,601 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 12:27:48,601 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 12:27:48,602 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 12:27:48,602 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:27:48,602 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 12:27:48,602 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 12:27:48,602 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 12:27:48,602 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 12:27:48,602 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 12:27:48,602 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 12:27:48,602 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 12:27:48,602 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 12:27:48,602 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 12:27:48,603 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 12:27:48,603 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 12:27:48,603 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_BITWISE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 12:27:48,824 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 12:27:48,843 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 12:27:48,845 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 12:27:48,846 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 12:27:48,847 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 12:27:48,848 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c [2022-01-10 12:27:48,888 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/95348a632/9e36735ccfc04201a49dcffc0b700fc5/FLAG14edf929d [2022-01-10 12:27:49,248 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 12:27:49,248 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c [2022-01-10 12:27:49,277 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/95348a632/9e36735ccfc04201a49dcffc0b700fc5/FLAG14edf929d [2022-01-10 12:27:49,658 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/95348a632/9e36735ccfc04201a49dcffc0b700fc5 [2022-01-10 12:27:49,660 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 12:27:49,660 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 12:27:49,665 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 12:27:49,666 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 12:27:49,668 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 12:27:49,668 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:27:49" (1/1) ... [2022-01-10 12:27:49,669 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3d8bdb65 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:49, skipping insertion in model container [2022-01-10 12:27:49,669 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:27:49" (1/1) ... [2022-01-10 12:27:49,674 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 12:27:49,695 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:27:49,913 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c[18005,18018] [2022-01-10 12:27:49,921 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:27:49,938 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 12:27:49,948 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:27:49,998 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c[18005,18018] [2022-01-10 12:27:49,999 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:27:50,008 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 12:27:50,084 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c[18005,18018] [2022-01-10 12:27:50,085 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:27:50,109 INFO L208 MainTranslator]: Completed translation [2022-01-10 12:27:50,110 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50 WrapperNode [2022-01-10 12:27:50,110 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 12:27:50,111 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 12:27:50,111 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 12:27:50,111 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 12:27:50,128 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50" (1/1) ... [2022-01-10 12:27:50,152 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50" (1/1) ... [2022-01-10 12:27:50,192 INFO L137 Inliner]: procedures = 59, calls = 157, calls flagged for inlining = 54, calls inlined = 66, statements flattened = 502 [2022-01-10 12:27:50,192 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 12:27:50,193 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 12:27:50,193 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 12:27:50,193 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 12:27:50,213 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50" (1/1) ... [2022-01-10 12:27:50,213 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50" (1/1) ... [2022-01-10 12:27:50,216 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50" (1/1) ... [2022-01-10 12:27:50,216 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50" (1/1) ... [2022-01-10 12:27:50,222 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50" (1/1) ... [2022-01-10 12:27:50,226 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50" (1/1) ... [2022-01-10 12:27:50,227 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50" (1/1) ... [2022-01-10 12:27:50,229 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 12:27:50,230 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 12:27:50,230 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 12:27:50,230 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 12:27:50,243 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50" (1/1) ... [2022-01-10 12:27:50,248 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:27:50,259 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:27:50,280 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 12:27:50,285 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 12:27:50,307 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 12:27:50,307 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 12:27:50,307 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 12:27:50,307 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 12:27:50,354 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 12:27:50,355 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 12:27:50,590 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 12:27:50,595 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 12:27:50,595 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 12:27:50,597 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:27:50 BoogieIcfgContainer [2022-01-10 12:27:50,597 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 12:27:50,598 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 12:27:50,598 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 12:27:50,599 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 12:27:50,601 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:27:50" (1/1) ... [2022-01-10 12:27:50,670 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:27:50 BasicIcfg [2022-01-10 12:27:50,670 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 12:27:50,671 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 12:27:50,672 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 12:27:50,673 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 12:27:50,674 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 12:27:49" (1/4) ... [2022-01-10 12:27:50,674 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8365bbe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:27:50, skipping insertion in model container [2022-01-10 12:27:50,674 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:50" (2/4) ... [2022-01-10 12:27:50,674 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8365bbe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:27:50, skipping insertion in model container [2022-01-10 12:27:50,674 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:27:50" (3/4) ... [2022-01-10 12:27:50,675 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@8365bbe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:27:50, skipping insertion in model container [2022-01-10 12:27:50,675 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:27:50" (4/4) ... [2022-01-10 12:27:50,675 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product44.cil.cTransformedIcfg [2022-01-10 12:27:50,678 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 12:27:50,679 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 12:27:50,704 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 12:27:50,708 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 12:27:50,708 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 12:27:50,717 INFO L276 IsEmpty]: Start isEmpty. Operand has 135 states, 131 states have (on average 1.381679389312977) internal successors, (181), 134 states have internal predecessors, (181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:50,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-01-10 12:27:50,721 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:50,721 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:50,721 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:50,724 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:50,724 INFO L85 PathProgramCache]: Analyzing trace with hash 1599545598, now seen corresponding path program 1 times [2022-01-10 12:27:50,729 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:50,730 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2127155309] [2022-01-10 12:27:50,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:50,730 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:50,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:50,907 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:50,908 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:50,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2127155309] [2022-01-10 12:27:50,909 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2127155309] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:27:50,909 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:27:50,909 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:27:50,910 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1922468114] [2022-01-10 12:27:50,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:27:50,914 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 12:27:50,915 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:50,935 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 12:27:50,936 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:27:50,940 INFO L87 Difference]: Start difference. First operand has 135 states, 131 states have (on average 1.381679389312977) internal successors, (181), 134 states have internal predecessors, (181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:50,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:50,968 INFO L93 Difference]: Finished difference Result 259 states and 350 transitions. [2022-01-10 12:27:50,971 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 12:27:50,972 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-01-10 12:27:50,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:50,979 INFO L225 Difference]: With dead ends: 259 [2022-01-10 12:27:50,979 INFO L226 Difference]: Without dead ends: 125 [2022-01-10 12:27:50,982 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:27:50,989 INFO L933 BasicCegarLoop]: 171 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:50,989 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 171 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:27:51,001 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2022-01-10 12:27:51,014 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 125. [2022-01-10 12:27:51,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 122 states have (on average 1.3360655737704918) internal successors, (163), 124 states have internal predecessors, (163), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,017 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 163 transitions. [2022-01-10 12:27:51,018 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 163 transitions. Word has length 21 [2022-01-10 12:27:51,018 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:51,018 INFO L470 AbstractCegarLoop]: Abstraction has 125 states and 163 transitions. [2022-01-10 12:27:51,018 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,018 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 163 transitions. [2022-01-10 12:27:51,019 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-01-10 12:27:51,019 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:51,019 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:51,019 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 12:27:51,019 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:51,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:51,020 INFO L85 PathProgramCache]: Analyzing trace with hash -1202383059, now seen corresponding path program 1 times [2022-01-10 12:27:51,020 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:51,020 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [243417526] [2022-01-10 12:27:51,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:51,020 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:51,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:51,080 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:51,080 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:51,080 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [243417526] [2022-01-10 12:27:51,080 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [243417526] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:27:51,080 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:27:51,080 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:27:51,081 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [277866517] [2022-01-10 12:27:51,081 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:27:51,081 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:27:51,081 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:51,082 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:27:51,082 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:27:51,082 INFO L87 Difference]: Start difference. First operand 125 states and 163 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:51,111 INFO L93 Difference]: Finished difference Result 312 states and 411 transitions. [2022-01-10 12:27:51,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:27:51,112 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-01-10 12:27:51,112 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:51,113 INFO L225 Difference]: With dead ends: 312 [2022-01-10 12:27:51,113 INFO L226 Difference]: Without dead ends: 195 [2022-01-10 12:27:51,114 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:27:51,114 INFO L933 BasicCegarLoop]: 160 mSDtfsCounter, 143 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 143 SdHoareTripleChecker+Valid, 246 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:51,115 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [143 Valid, 246 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:27:51,115 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2022-01-10 12:27:51,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 186. [2022-01-10 12:27:51,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 186 states, 183 states have (on average 1.3442622950819672) internal successors, (246), 185 states have internal predecessors, (246), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,127 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186 states to 186 states and 246 transitions. [2022-01-10 12:27:51,127 INFO L78 Accepts]: Start accepts. Automaton has 186 states and 246 transitions. Word has length 22 [2022-01-10 12:27:51,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:51,127 INFO L470 AbstractCegarLoop]: Abstraction has 186 states and 246 transitions. [2022-01-10 12:27:51,128 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,128 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 246 transitions. [2022-01-10 12:27:51,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-10 12:27:51,128 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:51,128 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:51,129 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 12:27:51,129 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:51,129 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:51,129 INFO L85 PathProgramCache]: Analyzing trace with hash 758861555, now seen corresponding path program 1 times [2022-01-10 12:27:51,129 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:51,129 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1012225927] [2022-01-10 12:27:51,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:51,130 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:51,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:51,173 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:51,173 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:51,174 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1012225927] [2022-01-10 12:27:51,174 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1012225927] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:27:51,174 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:27:51,174 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:27:51,174 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1238706396] [2022-01-10 12:27:51,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:27:51,174 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:27:51,174 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:51,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:27:51,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:27:51,175 INFO L87 Difference]: Start difference. First operand 186 states and 246 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:51,222 INFO L93 Difference]: Finished difference Result 430 states and 567 transitions. [2022-01-10 12:27:51,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:27:51,222 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-10 12:27:51,223 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:51,224 INFO L225 Difference]: With dead ends: 430 [2022-01-10 12:27:51,224 INFO L226 Difference]: Without dead ends: 252 [2022-01-10 12:27:51,224 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:27:51,225 INFO L933 BasicCegarLoop]: 163 mSDtfsCounter, 123 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 250 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:51,226 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [123 Valid, 250 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:27:51,226 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 252 states. [2022-01-10 12:27:51,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 252 to 246. [2022-01-10 12:27:51,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 246 states, 243 states have (on average 1.300411522633745) internal successors, (316), 245 states have internal predecessors, (316), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246 states to 246 states and 316 transitions. [2022-01-10 12:27:51,237 INFO L78 Accepts]: Start accepts. Automaton has 246 states and 316 transitions. Word has length 25 [2022-01-10 12:27:51,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:51,238 INFO L470 AbstractCegarLoop]: Abstraction has 246 states and 316 transitions. [2022-01-10 12:27:51,238 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,238 INFO L276 IsEmpty]: Start isEmpty. Operand 246 states and 316 transitions. [2022-01-10 12:27:51,238 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-01-10 12:27:51,238 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:51,239 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:51,239 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 12:27:51,239 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:51,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:51,239 INFO L85 PathProgramCache]: Analyzing trace with hash -737119736, now seen corresponding path program 1 times [2022-01-10 12:27:51,239 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:51,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1116391669] [2022-01-10 12:27:51,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:51,240 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:51,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:51,317 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:51,318 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:51,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1116391669] [2022-01-10 12:27:51,318 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1116391669] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:27:51,318 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:27:51,318 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:27:51,318 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1705302791] [2022-01-10 12:27:51,346 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:27:51,347 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:27:51,348 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:51,348 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:27:51,349 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:27:51,349 INFO L87 Difference]: Start difference. First operand 246 states and 316 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:51,567 INFO L93 Difference]: Finished difference Result 852 states and 1077 transitions. [2022-01-10 12:27:51,567 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-10 12:27:51,567 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-01-10 12:27:51,567 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:51,571 INFO L225 Difference]: With dead ends: 852 [2022-01-10 12:27:51,571 INFO L226 Difference]: Without dead ends: 614 [2022-01-10 12:27:51,572 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 12:27:51,573 INFO L933 BasicCegarLoop]: 292 mSDtfsCounter, 561 mSDsluCounter, 600 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 561 SdHoareTripleChecker+Valid, 892 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:51,573 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [561 Valid, 892 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:27:51,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 614 states. [2022-01-10 12:27:51,593 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 614 to 240. [2022-01-10 12:27:51,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 237 states have (on average 1.2573839662447257) internal successors, (298), 239 states have internal predecessors, (298), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,594 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 298 transitions. [2022-01-10 12:27:51,594 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 298 transitions. Word has length 31 [2022-01-10 12:27:51,594 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:51,595 INFO L470 AbstractCegarLoop]: Abstraction has 240 states and 298 transitions. [2022-01-10 12:27:51,595 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,601 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 298 transitions. [2022-01-10 12:27:51,604 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-01-10 12:27:51,604 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:51,605 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:51,605 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 12:27:51,606 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:51,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:51,606 INFO L85 PathProgramCache]: Analyzing trace with hash -491460401, now seen corresponding path program 1 times [2022-01-10 12:27:51,606 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:51,606 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [849264147] [2022-01-10 12:27:51,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:51,607 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:51,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:51,700 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:51,700 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:51,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [849264147] [2022-01-10 12:27:51,701 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [849264147] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:27:51,701 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:27:51,701 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:27:51,701 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [687623928] [2022-01-10 12:27:51,701 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:27:51,701 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:27:51,701 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:51,702 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:27:51,702 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:27:51,702 INFO L87 Difference]: Start difference. First operand 240 states and 298 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:51,799 INFO L93 Difference]: Finished difference Result 709 states and 874 transitions. [2022-01-10 12:27:51,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:27:51,800 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-01-10 12:27:51,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:51,803 INFO L225 Difference]: With dead ends: 709 [2022-01-10 12:27:51,804 INFO L226 Difference]: Without dead ends: 477 [2022-01-10 12:27:51,804 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:27:51,808 INFO L933 BasicCegarLoop]: 214 mSDtfsCounter, 301 mSDsluCounter, 543 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 301 SdHoareTripleChecker+Valid, 757 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:51,809 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [301 Valid, 757 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:27:51,811 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 477 states. [2022-01-10 12:27:51,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 477 to 249. [2022-01-10 12:27:51,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 249 states, 246 states have (on average 1.2479674796747968) internal successors, (307), 248 states have internal predecessors, (307), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,834 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 307 transitions. [2022-01-10 12:27:51,836 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 307 transitions. Word has length 35 [2022-01-10 12:27:51,836 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:51,840 INFO L470 AbstractCegarLoop]: Abstraction has 249 states and 307 transitions. [2022-01-10 12:27:51,840 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,840 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 307 transitions. [2022-01-10 12:27:51,843 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-01-10 12:27:51,843 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:51,843 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:51,843 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 12:27:51,844 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:51,844 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:51,844 INFO L85 PathProgramCache]: Analyzing trace with hash 861849296, now seen corresponding path program 1 times [2022-01-10 12:27:51,845 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:51,845 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [168291932] [2022-01-10 12:27:51,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:51,845 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:51,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:51,910 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:51,910 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:51,910 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [168291932] [2022-01-10 12:27:51,910 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [168291932] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:27:51,910 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:27:51,910 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:27:51,910 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [645069065] [2022-01-10 12:27:51,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:27:51,911 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 12:27:51,911 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:51,911 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 12:27:51,911 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 12:27:51,912 INFO L87 Difference]: Start difference. First operand 249 states and 307 transitions. Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:51,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:51,977 INFO L93 Difference]: Finished difference Result 739 states and 904 transitions. [2022-01-10 12:27:51,977 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:27:51,977 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-01-10 12:27:51,978 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:51,979 INFO L225 Difference]: With dead ends: 739 [2022-01-10 12:27:51,979 INFO L226 Difference]: Without dead ends: 498 [2022-01-10 12:27:51,979 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:27:51,985 INFO L933 BasicCegarLoop]: 204 mSDtfsCounter, 261 mSDsluCounter, 360 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 564 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:51,987 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [261 Valid, 564 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:27:51,988 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2022-01-10 12:27:52,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 255. [2022-01-10 12:27:52,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 252 states have (on average 1.242063492063492) internal successors, (313), 254 states have internal predecessors, (313), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:52,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 313 transitions. [2022-01-10 12:27:52,005 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 313 transitions. Word has length 35 [2022-01-10 12:27:52,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:52,006 INFO L470 AbstractCegarLoop]: Abstraction has 255 states and 313 transitions. [2022-01-10 12:27:52,006 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:52,006 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 313 transitions. [2022-01-10 12:27:52,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-01-10 12:27:52,007 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:52,007 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:52,007 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 12:27:52,007 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:52,008 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:52,008 INFO L85 PathProgramCache]: Analyzing trace with hash 17377425, now seen corresponding path program 1 times [2022-01-10 12:27:52,008 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:52,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1521175618] [2022-01-10 12:27:52,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:52,008 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:52,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:52,094 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:52,094 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:52,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1521175618] [2022-01-10 12:27:52,094 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1521175618] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:27:52,094 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:27:52,094 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:27:52,095 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [879505919] [2022-01-10 12:27:52,095 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:27:52,095 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:27:52,095 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:52,095 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:27:52,095 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:27:52,095 INFO L87 Difference]: Start difference. First operand 255 states and 313 transitions. Second operand has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 2 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:52,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:52,180 INFO L93 Difference]: Finished difference Result 635 states and 777 transitions. [2022-01-10 12:27:52,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:27:52,181 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 2 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-01-10 12:27:52,181 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:52,182 INFO L225 Difference]: With dead ends: 635 [2022-01-10 12:27:52,182 INFO L226 Difference]: Without dead ends: 316 [2022-01-10 12:27:52,183 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:27:52,184 INFO L933 BasicCegarLoop]: 156 mSDtfsCounter, 85 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 294 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:52,184 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [85 Valid, 294 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:27:52,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-01-10 12:27:52,223 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 316. [2022-01-10 12:27:52,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 313 states have (on average 1.2364217252396166) internal successors, (387), 315 states have internal predecessors, (387), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:52,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 387 transitions. [2022-01-10 12:27:52,225 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 387 transitions. Word has length 35 [2022-01-10 12:27:52,225 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:52,225 INFO L470 AbstractCegarLoop]: Abstraction has 316 states and 387 transitions. [2022-01-10 12:27:52,225 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 2 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:52,225 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 387 transitions. [2022-01-10 12:27:52,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-01-10 12:27:52,226 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:52,226 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:52,226 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 12:27:52,226 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:52,226 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:52,226 INFO L85 PathProgramCache]: Analyzing trace with hash 1916980708, now seen corresponding path program 1 times [2022-01-10 12:27:52,227 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:52,227 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1429742868] [2022-01-10 12:27:52,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:52,227 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:52,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:52,346 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:52,347 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:52,347 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1429742868] [2022-01-10 12:27:52,347 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1429742868] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:27:52,347 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:27:52,347 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:27:52,347 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [546641968] [2022-01-10 12:27:52,347 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:27:52,347 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 12:27:52,347 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:52,348 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 12:27:52,348 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:27:52,348 INFO L87 Difference]: Start difference. First operand 316 states and 387 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:52,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:52,608 INFO L93 Difference]: Finished difference Result 1554 states and 1920 transitions. [2022-01-10 12:27:52,608 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-01-10 12:27:52,608 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-01-10 12:27:52,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:52,612 INFO L225 Difference]: With dead ends: 1554 [2022-01-10 12:27:52,612 INFO L226 Difference]: Without dead ends: 1161 [2022-01-10 12:27:52,612 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2022-01-10 12:27:52,613 INFO L933 BasicCegarLoop]: 316 mSDtfsCounter, 796 mSDsluCounter, 805 mSDsCounter, 0 mSdLazyCounter, 130 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 796 SdHoareTripleChecker+Valid, 1121 SdHoareTripleChecker+Invalid, 189 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 130 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:52,616 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [796 Valid, 1121 Invalid, 189 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:27:52,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1161 states. [2022-01-10 12:27:52,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1161 to 590. [2022-01-10 12:27:52,662 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 590 states, 587 states have (on average 1.2146507666098807) internal successors, (713), 589 states have internal predecessors, (713), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:52,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 590 states to 590 states and 713 transitions. [2022-01-10 12:27:52,663 INFO L78 Accepts]: Start accepts. Automaton has 590 states and 713 transitions. Word has length 44 [2022-01-10 12:27:52,663 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:52,663 INFO L470 AbstractCegarLoop]: Abstraction has 590 states and 713 transitions. [2022-01-10 12:27:52,664 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:52,664 INFO L276 IsEmpty]: Start isEmpty. Operand 590 states and 713 transitions. [2022-01-10 12:27:52,664 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-01-10 12:27:52,664 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:52,664 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:52,664 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 12:27:52,665 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:52,665 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:52,665 INFO L85 PathProgramCache]: Analyzing trace with hash -926213355, now seen corresponding path program 1 times [2022-01-10 12:27:52,665 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:52,665 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2009817669] [2022-01-10 12:27:52,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:52,665 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:52,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:52,695 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:52,695 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:52,695 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2009817669] [2022-01-10 12:27:52,695 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2009817669] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:27:52,695 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:27:52,695 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:27:52,695 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1810253306] [2022-01-10 12:27:52,695 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:27:52,695 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:27:52,695 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:52,696 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:27:52,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:27:52,696 INFO L87 Difference]: Start difference. First operand 590 states and 713 transitions. Second operand has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:52,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:52,759 INFO L93 Difference]: Finished difference Result 590 states and 713 transitions. [2022-01-10 12:27:52,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:27:52,760 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2022-01-10 12:27:52,761 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:52,762 INFO L225 Difference]: With dead ends: 590 [2022-01-10 12:27:52,762 INFO L226 Difference]: Without dead ends: 307 [2022-01-10 12:27:52,762 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:27:52,764 INFO L933 BasicCegarLoop]: 74 mSDtfsCounter, 33 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 81 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:52,764 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [33 Valid, 81 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:27:52,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 307 states. [2022-01-10 12:27:52,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 307 to 307. [2022-01-10 12:27:52,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 307 states, 306 states have (on average 1.2516339869281046) internal successors, (383), 306 states have internal predecessors, (383), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:52,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 383 transitions. [2022-01-10 12:27:52,790 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 383 transitions. Word has length 61 [2022-01-10 12:27:52,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:52,791 INFO L470 AbstractCegarLoop]: Abstraction has 307 states and 383 transitions. [2022-01-10 12:27:52,791 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:52,791 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 383 transitions. [2022-01-10 12:27:52,791 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-10 12:27:52,791 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:52,792 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:52,792 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 12:27:52,792 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:52,792 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:52,792 INFO L85 PathProgramCache]: Analyzing trace with hash 925359092, now seen corresponding path program 1 times [2022-01-10 12:27:52,792 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:52,793 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [87579095] [2022-01-10 12:27:52,793 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:52,793 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:52,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:52,830 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:52,831 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:52,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [87579095] [2022-01-10 12:27:52,831 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [87579095] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 12:27:52,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [463746357] [2022-01-10 12:27:52,831 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:52,831 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 12:27:52,831 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:27:52,833 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 12:27:52,833 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-10 12:27:52,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:52,931 INFO L263 TraceCheckSpWp]: Trace formula consists of 597 conjuncts, 5 conjunts are in the unsatisfiable core [2022-01-10 12:27:52,935 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 12:27:53,076 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:53,076 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 12:27:53,160 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:53,160 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [463746357] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 12:27:53,160 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 12:27:53,160 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 5 [2022-01-10 12:27:53,160 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [694996220] [2022-01-10 12:27:53,161 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 12:27:53,161 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:27:53,161 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:53,161 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:27:53,161 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:27:53,161 INFO L87 Difference]: Start difference. First operand 307 states and 383 transitions. Second operand has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:53,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:53,253 INFO L93 Difference]: Finished difference Result 680 states and 854 transitions. [2022-01-10 12:27:53,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 12:27:53,254 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-10 12:27:53,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:53,255 INFO L225 Difference]: With dead ends: 680 [2022-01-10 12:27:53,255 INFO L226 Difference]: Without dead ends: 381 [2022-01-10 12:27:53,256 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 137 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-01-10 12:27:53,256 INFO L933 BasicCegarLoop]: 129 mSDtfsCounter, 136 mSDsluCounter, 263 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 392 SdHoareTripleChecker+Invalid, 49 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:53,256 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [136 Valid, 392 Invalid, 49 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:27:53,257 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 381 states. [2022-01-10 12:27:53,284 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 381 to 314. [2022-01-10 12:27:53,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 314 states, 313 states have (on average 1.2236421725239617) internal successors, (383), 313 states have internal predecessors, (383), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:53,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 383 transitions. [2022-01-10 12:27:53,285 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 383 transitions. Word has length 68 [2022-01-10 12:27:53,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:53,286 INFO L470 AbstractCegarLoop]: Abstraction has 314 states and 383 transitions. [2022-01-10 12:27:53,286 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:53,286 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 383 transitions. [2022-01-10 12:27:53,286 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2022-01-10 12:27:53,286 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:53,287 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:53,322 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-01-10 12:27:53,524 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-01-10 12:27:53,525 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:53,525 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:53,525 INFO L85 PathProgramCache]: Analyzing trace with hash 962686439, now seen corresponding path program 1 times [2022-01-10 12:27:53,525 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:53,525 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1786688855] [2022-01-10 12:27:53,525 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:53,526 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:53,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:53,567 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2022-01-10 12:27:53,567 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:53,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1786688855] [2022-01-10 12:27:53,567 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1786688855] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:27:53,567 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:27:53,568 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:27:53,568 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1671667793] [2022-01-10 12:27:53,568 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:27:53,568 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:27:53,568 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:53,568 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:27:53,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:27:53,568 INFO L87 Difference]: Start difference. First operand 314 states and 383 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:53,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:53,623 INFO L93 Difference]: Finished difference Result 626 states and 764 transitions. [2022-01-10 12:27:53,623 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:27:53,624 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 128 [2022-01-10 12:27:53,624 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:53,625 INFO L225 Difference]: With dead ends: 626 [2022-01-10 12:27:53,625 INFO L226 Difference]: Without dead ends: 320 [2022-01-10 12:27:53,625 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:27:53,626 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 28 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 167 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:53,626 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [28 Valid, 167 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:27:53,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 320 states. [2022-01-10 12:27:53,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 320 to 314. [2022-01-10 12:27:53,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 314 states, 313 states have (on average 1.2140575079872205) internal successors, (380), 313 states have internal predecessors, (380), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:53,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 380 transitions. [2022-01-10 12:27:53,652 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 380 transitions. Word has length 128 [2022-01-10 12:27:53,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:53,652 INFO L470 AbstractCegarLoop]: Abstraction has 314 states and 380 transitions. [2022-01-10 12:27:53,652 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:53,652 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 380 transitions. [2022-01-10 12:27:53,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 148 [2022-01-10 12:27:53,653 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:53,653 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:53,653 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 12:27:53,653 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:53,653 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:53,654 INFO L85 PathProgramCache]: Analyzing trace with hash 1364416583, now seen corresponding path program 1 times [2022-01-10 12:27:53,654 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:53,654 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [169684127] [2022-01-10 12:27:53,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:53,654 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:53,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:53,773 INFO L134 CoverageAnalysis]: Checked inductivity of 204 backedges. 145 proven. 2 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2022-01-10 12:27:53,773 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:53,773 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [169684127] [2022-01-10 12:27:53,773 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [169684127] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 12:27:53,773 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1220830640] [2022-01-10 12:27:53,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:53,774 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 12:27:53,774 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:27:53,804 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 12:27:53,805 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-01-10 12:27:53,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:53,938 INFO L263 TraceCheckSpWp]: Trace formula consists of 965 conjuncts, 15 conjunts are in the unsatisfiable core [2022-01-10 12:27:53,941 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 12:27:54,167 INFO L134 CoverageAnalysis]: Checked inductivity of 204 backedges. 124 proven. 6 refuted. 0 times theorem prover too weak. 74 trivial. 0 not checked. [2022-01-10 12:27:54,168 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 12:27:54,400 INFO L134 CoverageAnalysis]: Checked inductivity of 204 backedges. 126 proven. 4 refuted. 0 times theorem prover too weak. 74 trivial. 0 not checked. [2022-01-10 12:27:54,400 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1220830640] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 12:27:54,400 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 12:27:54,401 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 15 [2022-01-10 12:27:54,401 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1790510667] [2022-01-10 12:27:54,401 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 12:27:54,401 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-01-10 12:27:54,401 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:54,401 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-01-10 12:27:54,402 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-01-10 12:27:54,402 INFO L87 Difference]: Start difference. First operand 314 states and 380 transitions. Second operand has 15 states, 15 states have (on average 11.466666666666667) internal successors, (172), 15 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:54,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:27:54,826 INFO L93 Difference]: Finished difference Result 1080 states and 1316 transitions. [2022-01-10 12:27:54,826 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-10 12:27:54,827 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 11.466666666666667) internal successors, (172), 15 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 147 [2022-01-10 12:27:54,827 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:27:54,827 INFO L225 Difference]: With dead ends: 1080 [2022-01-10 12:27:54,827 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 12:27:54,828 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 321 GetRequests, 294 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 117 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=176, Invalid=636, Unknown=0, NotChecked=0, Total=812 [2022-01-10 12:27:54,829 INFO L933 BasicCegarLoop]: 226 mSDtfsCounter, 1372 mSDsluCounter, 1206 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1372 SdHoareTripleChecker+Valid, 1432 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:27:54,829 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1372 Valid, 1432 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:27:54,829 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 12:27:54,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 12:27:54,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:54,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 12:27:54,830 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 147 [2022-01-10 12:27:54,830 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:27:54,830 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 12:27:54,830 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 11.466666666666667) internal successors, (172), 15 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:54,830 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 12:27:54,830 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 12:27:54,832 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 12:27:54,832 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 12:27:54,832 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 12:27:54,853 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-01-10 12:27:55,047 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-10 12:27:55,049 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 12:28:02,768 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 12:28:02,768 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 12:28:02,769 INFO L854 garLoopResultBuilder]: At program point L817(lines 813 819) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 12:28:02,769 INFO L854 garLoopResultBuilder]: At program point L810(lines 806 812) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 12:28:02,769 INFO L854 garLoopResultBuilder]: At program point L825(lines 820 828) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 12:28:02,769 INFO L858 garLoopResultBuilder]: For program point L914(lines 914 921) no Hoare annotation was computed. [2022-01-10 12:28:02,769 INFO L854 garLoopResultBuilder]: At program point L889(lines 885 891) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 12:28:02,769 INFO L858 garLoopResultBuilder]: For program point L914-2(lines 914 921) no Hoare annotation was computed. [2022-01-10 12:28:02,769 INFO L854 garLoopResultBuilder]: At program point L943(lines 938 945) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 12:28:02,769 INFO L861 garLoopResultBuilder]: At program point L923(lines 904 926) the Hoare annotation is: true [2022-01-10 12:28:02,769 INFO L854 garLoopResultBuilder]: At program point L733-2(lines 733 782) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0Int 1))) (let ((.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (or .cse11 (<= 4294967297 ~waterLevel~0Int))) (.cse10 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~systemActive~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse8 .cse3 .cse4 .cse9 .cse10) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse10) (and .cse11 .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5)))) [2022-01-10 12:28:02,769 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 12:28:02,769 INFO L854 garLoopResultBuilder]: At program point L783(lines 732 784) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:02,770 INFO L858 garLoopResultBuilder]: For program point L734(lines 733 782) no Hoare annotation was computed. [2022-01-10 12:28:02,770 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 12:28:02,770 INFO L854 garLoopResultBuilder]: At program point L639-2(lines 634 642) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:02,770 INFO L858 garLoopResultBuilder]: For program point L735(lines 735 739) no Hoare annotation was computed. [2022-01-10 12:28:02,770 INFO L854 garLoopResultBuilder]: At program point L953-1(lines 946 955) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:02,770 INFO L858 garLoopResultBuilder]: For program point L743(lines 743 749) no Hoare annotation was computed. [2022-01-10 12:28:02,770 INFO L858 garLoopResultBuilder]: For program point L536-3(lines 536 542) no Hoare annotation was computed. [2022-01-10 12:28:02,770 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-01-10 12:28:02,770 INFO L858 garLoopResultBuilder]: For program point L743-2(lines 743 749) no Hoare annotation was computed. [2022-01-10 12:28:02,770 INFO L858 garLoopResultBuilder]: For program point L63-3(lines 63 67) no Hoare annotation was computed. [2022-01-10 12:28:02,770 INFO L858 garLoopResultBuilder]: For program point L536-5(lines 532 554) no Hoare annotation was computed. [2022-01-10 12:28:02,770 INFO L854 garLoopResultBuilder]: At program point L75-2(lines 71 82) the Hoare annotation is: (let ((.cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1))) (.cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse4 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse9 (<= 1 ~pumpRunning~0Int)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse5 (<= ~waterLevel~0Int 2)) (.cse7 (= ~systemActive~0Int 0)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse10 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse11 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse12 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse6 .cse9) (and .cse1 .cse10 .cse11 .cse6 .cse12 .cse9) (and .cse1 .cse2 .cse5 .cse6 (<= 2 ~waterLevel~0Int)) (and .cse7 .cse8 .cse2 .cse10 .cse11 .cse6 .cse12))) [2022-01-10 12:28:02,770 INFO L858 garLoopResultBuilder]: For program point L753(lines 753 759) no Hoare annotation was computed. [2022-01-10 12:28:02,770 INFO L854 garLoopResultBuilder]: At program point L63-5(lines 59 70) the Hoare annotation is: false [2022-01-10 12:28:02,771 INFO L858 garLoopResultBuilder]: For program point L568-2(lines 568 585) no Hoare annotation was computed. [2022-01-10 12:28:02,771 INFO L858 garLoopResultBuilder]: For program point L543-3(lines 543 549) no Hoare annotation was computed. [2022-01-10 12:28:02,771 INFO L858 garLoopResultBuilder]: For program point L87(lines 87 91) no Hoare annotation was computed. [2022-01-10 12:28:02,771 INFO L858 garLoopResultBuilder]: For program point L753-2(lines 753 759) no Hoare annotation was computed. [2022-01-10 12:28:02,771 INFO L858 garLoopResultBuilder]: For program point L140-1(lines 140 146) no Hoare annotation was computed. [2022-01-10 12:28:02,771 INFO L854 garLoopResultBuilder]: At program point L560-3(lines 556 562) the Hoare annotation is: false [2022-01-10 12:28:02,771 INFO L854 garLoopResultBuilder]: At program point L132-1(lines 127 135) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:02,771 INFO L854 garLoopResultBuilder]: At program point L87-2(lines 83 94) the Hoare annotation is: (let ((.cse15 (<= ~waterLevel~0Int 1))) (let ((.cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1))) (.cse4 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse5 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse10 (or .cse15 (<= 4294967297 ~waterLevel~0Int))) (.cse12 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= 1 ~systemActive~0Int)) (.cse6 (<= ~waterLevel~0Int 2)) (.cse1 (= ~systemActive~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse13 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse14 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse1 .cse2 .cse3 .cse8 .cse9 .cse7 .cse10) (and .cse0 .cse11 .cse4 .cse5 .cse6 .cse7 .cse12) (and .cse11 .cse3 .cse8 .cse9 .cse7 .cse10) (and .cse11 .cse8 .cse9 .cse7 .cse10 .cse12) (and .cse11 .cse13 .cse9 .cse7 .cse14 .cse12) (and .cse15 .cse11 .cse3 .cse7 (<= 1 ~waterLevel~0Int)) (and .cse11 .cse3 .cse6 .cse7 (<= 2 ~waterLevel~0Int)) (and .cse1 .cse2 .cse3 .cse13 .cse9 .cse7 .cse14)))) [2022-01-10 12:28:02,771 INFO L858 garLoopResultBuilder]: For program point L763(lines 763 778) no Hoare annotation was computed. [2022-01-10 12:28:02,771 INFO L854 garLoopResultBuilder]: At program point L145-1(lines 136 149) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:02,771 INFO L854 garLoopResultBuilder]: At program point L568-3(lines 564 588) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:02,771 INFO L858 garLoopResultBuilder]: For program point L964-2(lines 964 981) no Hoare annotation was computed. [2022-01-10 12:28:02,771 INFO L854 garLoopResultBuilder]: At program point L718(lines 713 720) the Hoare annotation is: (let ((.cse8 (<= ~waterLevel~0Int 1))) (let ((.cse5 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (or .cse8 (<= 4294967297 ~waterLevel~0Int))) (.cse6 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse3 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse6 .cse2 .cse7) (and .cse0 .cse5 .cse6 .cse2 .cse7 .cse3) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse6 .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse3) (and .cse8 .cse0 .cse4 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse4 .cse1 .cse2 (<= 2 ~waterLevel~0Int))))) [2022-01-10 12:28:02,771 INFO L858 garLoopResultBuilder]: For program point L771(lines 771 777) no Hoare annotation was computed. [2022-01-10 12:28:02,772 INFO L858 garLoopResultBuilder]: For program point L688-3(lines 688 692) no Hoare annotation was computed. [2022-01-10 12:28:02,772 INFO L854 garLoopResultBuilder]: At program point L639-3(lines 634 642) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:02,772 INFO L854 garLoopResultBuilder]: At program point L964-3(lines 956 984) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:02,772 INFO L858 garLoopResultBuilder]: For program point L771-2(lines 763 778) no Hoare annotation was computed. [2022-01-10 12:28:02,772 INFO L858 garLoopResultBuilder]: For program point L702(lines 702 708) no Hoare annotation was computed. [2022-01-10 12:28:02,772 INFO L858 garLoopResultBuilder]: For program point L688-5(lines 688 692) no Hoare annotation was computed. [2022-01-10 12:28:02,772 INFO L858 garLoopResultBuilder]: For program point L968-2(lines 968 978) no Hoare annotation was computed. [2022-01-10 12:28:02,772 INFO L854 garLoopResultBuilder]: At program point L553-1(lines 529 555) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:02,772 INFO L854 garLoopResultBuilder]: At program point L639(lines 634 642) the Hoare annotation is: (let ((.cse13 (<= ~waterLevel~0Int 1))) (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse5 (<= 1 ~pumpRunning~0Int)) (.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse8 (or .cse13 (<= 4294967297 ~waterLevel~0Int))) (.cse1 (<= 1 ~systemActive~0Int)) (.cse3 (<= ~waterLevel~0Int 2)) (.cse12 (<= 2 ~waterLevel~0Int)) (.cse9 (= ~systemActive~0Int 0)) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse7 .cse4 .cse8 .cse5) (and .cse9 .cse10 .cse11 .cse6 .cse7 .cse4 .cse8) (and .cse0 .cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 .cse4 .cse12 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse5) (and .cse10 .cse1 .cse11 .cse6 .cse7 .cse4 .cse8) (and .cse9 .cse10 .cse11 .cse3 .cse4 .cse12) (and .cse13 .cse10 .cse1 .cse11 .cse2 .cse4) (and .cse10 .cse1 .cse11 .cse3 .cse4 .cse12) (and .cse13 .cse9 .cse10 .cse11 .cse2 .cse4)))) [2022-01-10 12:28:02,772 INFO L854 garLoopResultBuilder]: At program point L620(lines 615 622) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (and (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (<= ~waterLevel~0Int 2) .cse2) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2)))) [2022-01-10 12:28:02,772 INFO L858 garLoopResultBuilder]: For program point L702-2(lines 702 708) no Hoare annotation was computed. [2022-01-10 12:28:02,772 INFO L854 garLoopResultBuilder]: At program point L694-1(lines 679 697) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0)) [2022-01-10 12:28:02,772 INFO L858 garLoopResultBuilder]: For program point L969-3(lines 969 975) no Hoare annotation was computed. [2022-01-10 12:28:02,772 INFO L854 garLoopResultBuilder]: At program point L841-2(lines 841 855) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:02,773 INFO L854 garLoopResultBuilder]: At program point L953(lines 946 955) the Hoare annotation is: (let ((.cse13 (<= ~waterLevel~0Int 1))) (let ((.cse0 (= ~systemActive~0Int 0)) (.cse9 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse7 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse6 (or .cse13 (<= 4294967297 ~waterLevel~0Int))) (.cse11 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse12 (<= 1 ~pumpRunning~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse8 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse10 (<= ~waterLevel~0Int 2)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse14 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse8 .cse9 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse10 .cse5 .cse11 .cse12) (and .cse13 .cse0 .cse1 .cse2 .cse5 (<= 1 ~waterLevel~0Int)) (and .cse1 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse10 .cse5 .cse14) (and .cse7 .cse8 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse10 .cse5 .cse14 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse11 .cse12) (and .cse13 .cse1 .cse8 .cse2 .cse9 .cse5) (and .cse7 .cse8 .cse3 .cse4 .cse5 .cse6 .cse11 .cse12) (and .cse1 .cse8 .cse2 .cse10 .cse5 .cse14)))) [2022-01-10 12:28:02,773 INFO L854 garLoopResultBuilder]: At program point L710(lines 698 712) the Hoare annotation is: (let ((.cse1 (= ~systemActive~0Int 0)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse0 (<= ~waterLevel~0Int 1))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0Int)) (and .cse1 .cse2 (<= ~waterLevel~0Int 2) .cse3 (<= 2 ~waterLevel~0Int)) (and .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse3 (or .cse0 (<= 4294967297 ~waterLevel~0Int))))) [2022-01-10 12:28:02,773 INFO L858 garLoopResultBuilder]: For program point L572-3(lines 572 580) no Hoare annotation was computed. [2022-01-10 12:28:02,773 INFO L858 garLoopResultBuilder]: For program point L932-1(line 932) no Hoare annotation was computed. [2022-01-10 12:28:02,773 INFO L861 garLoopResultBuilder]: At program point L856(lines 831 860) the Hoare annotation is: true [2022-01-10 12:28:02,773 INFO L858 garLoopResultBuilder]: For program point L842(line 842) no Hoare annotation was computed. [2022-01-10 12:28:02,773 INFO L858 garLoopResultBuilder]: For program point L536(lines 536 542) no Hoare annotation was computed. [2022-01-10 12:28:02,773 INFO L854 garLoopResultBuilder]: At program point L100-1(lines 95 103) the Hoare annotation is: false [2022-01-10 12:28:02,773 INFO L854 garLoopResultBuilder]: At program point L560-2(lines 556 562) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 0)) [2022-01-10 12:28:02,773 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-01-10 12:28:02,773 INFO L854 garLoopResultBuilder]: At program point L933-1(lines 928 935) the Hoare annotation is: false [2022-01-10 12:28:02,773 INFO L861 garLoopResultBuilder]: At program point L788(lines 723 790) the Hoare annotation is: true [2022-01-10 12:28:02,773 INFO L858 garLoopResultBuilder]: For program point L845(lines 845 849) no Hoare annotation was computed. [2022-01-10 12:28:02,773 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-01-10 12:28:02,774 INFO L858 garLoopResultBuilder]: For program point L536-2(lines 532 554) no Hoare annotation was computed. [2022-01-10 12:28:02,774 INFO L854 garLoopResultBuilder]: At program point L630-1(lines 623 633) the Hoare annotation is: false [2022-01-10 12:28:02,774 INFO L861 garLoopResultBuilder]: At program point L901(lines 893 903) the Hoare annotation is: true [2022-01-10 12:28:02,774 INFO L858 garLoopResultBuilder]: For program point L845-1(lines 845 849) no Hoare annotation was computed. [2022-01-10 12:28:02,774 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse4 .cse5))) [2022-01-10 12:28:02,774 INFO L858 garLoopResultBuilder]: For program point L568(lines 568 585) no Hoare annotation was computed. [2022-01-10 12:28:02,774 INFO L858 garLoopResultBuilder]: For program point L543-1(lines 543 549) no Hoare annotation was computed. [2022-01-10 12:28:02,774 INFO L858 garLoopResultBuilder]: For program point L605-3(lines 605 611) no Hoare annotation was computed. [2022-01-10 12:28:02,774 INFO L854 garLoopResultBuilder]: At program point L639-4(lines 634 642) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:02,774 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-01-10 12:28:02,774 INFO L854 garLoopResultBuilder]: At program point L560-1(lines 556 562) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse4 .cse5))) [2022-01-10 12:28:02,774 INFO L854 garLoopResultBuilder]: At program point L132(lines 127 135) the Hoare annotation is: (let ((.cse4 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse6 (<= 1 ~pumpRunning~0Int)) (.cse7 (= ~systemActive~0Int 0)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse5 .cse3) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) .cse0 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0Int) .cse6) (and .cse7 .cse8 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse5 .cse3 .cse6) (and .cse7 .cse8 .cse1 .cse5 (<= ~waterLevel~0Int 2) .cse3 (<= 2 ~waterLevel~0Int)))) [2022-01-10 12:28:02,774 INFO L854 garLoopResultBuilder]: At program point L605-5(lines 598 614) the Hoare annotation is: false [2022-01-10 12:28:02,774 INFO L854 garLoopResultBuilder]: At program point L594-1(lines 589 596) the Hoare annotation is: false [2022-01-10 12:28:02,774 INFO L854 garLoopResultBuilder]: At program point L953-2(lines 946 955) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:02,775 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|)) (.cse1 (<= ~waterLevel~0Int 1)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 (or .cse1 (<= 4294967297 ~waterLevel~0Int))) (and .cse2 .cse3 (<= ~waterLevel~0Int 2) .cse4 (<= 2 ~waterLevel~0Int)))) [2022-01-10 12:28:02,775 INFO L854 garLoopResultBuilder]: At program point L568-1(lines 564 588) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1))) (let ((.cse9 (or .cse0 (<= 4294967297 ~waterLevel~0Int))) (.cse8 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse10 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse7 (<= 1 ~pumpRunning~0Int)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse5 (<= ~waterLevel~0Int 2)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse4 .cse6 .cse7) (and .cse8 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 .cse9 .cse10 .cse7) (and .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 .cse9) (and .cse0 .cse8 .cse1 .cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse10 .cse7) (and .cse1 .cse2 .cse5 .cse4 .cse6)))) [2022-01-10 12:28:02,775 INFO L858 garLoopResultBuilder]: For program point L964(lines 964 981) no Hoare annotation was computed. [2022-01-10 12:28:02,775 INFO L858 garLoopResultBuilder]: For program point L536-6(lines 536 542) no Hoare annotation was computed. [2022-01-10 12:28:02,775 INFO L858 garLoopResultBuilder]: For program point L688(lines 688 692) no Hoare annotation was computed. [2022-01-10 12:28:02,775 INFO L854 garLoopResultBuilder]: At program point L639-1(lines 634 642) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse6 (<= 1 ~systemActive~0Int)) (.cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int)))) (or (and (= ~systemActive~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) .cse6 .cse2 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0Int) (<= 1 ~pumpRunning~0Int)))) [2022-01-10 12:28:02,775 INFO L854 garLoopResultBuilder]: At program point L964-1(lines 956 984) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse10 (<= 1 ~pumpRunning~0Int)) (.cse6 (= ~systemActive~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse8 .cse3 .cse4 .cse9 .cse10) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse10) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-01-10 12:28:02,775 INFO L858 garLoopResultBuilder]: For program point L63-6(lines 63 67) no Hoare annotation was computed. [2022-01-10 12:28:02,775 INFO L858 garLoopResultBuilder]: For program point L536-8(lines 532 554) no Hoare annotation was computed. [2022-01-10 12:28:02,775 INFO L858 garLoopResultBuilder]: For program point L688-2(lines 688 692) no Hoare annotation was computed. [2022-01-10 12:28:02,775 INFO L858 garLoopResultBuilder]: For program point L968(lines 968 978) no Hoare annotation was computed. [2022-01-10 12:28:02,775 INFO L854 garLoopResultBuilder]: At program point L553(lines 529 555) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse10 (<= 1 ~pumpRunning~0Int)) (.cse6 (= ~systemActive~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse8 .cse3 .cse4 .cse9 .cse10) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse10) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-01-10 12:28:02,775 INFO L854 garLoopResultBuilder]: At program point L63-8(lines 59 70) the Hoare annotation is: false [2022-01-10 12:28:02,775 INFO L858 garLoopResultBuilder]: For program point L568-4(lines 568 585) no Hoare annotation was computed. [2022-01-10 12:28:02,776 INFO L858 garLoopResultBuilder]: For program point L543-5(lines 543 549) no Hoare annotation was computed. [2022-01-10 12:28:02,776 INFO L854 garLoopResultBuilder]: At program point L694(lines 679 697) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|)) (.cse5 (<= ~waterLevel~0Int 1)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6) (and .cse2 .cse3 (<= ~waterLevel~0Int 2) .cse4 (<= 2 ~waterLevel~0Int)) (and .cse0 .cse5 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse4 .cse6))) [2022-01-10 12:28:02,776 INFO L858 garLoopResultBuilder]: For program point L969(lines 969 975) no Hoare annotation was computed. [2022-01-10 12:28:02,776 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 146) no Hoare annotation was computed. [2022-01-10 12:28:02,776 INFO L854 garLoopResultBuilder]: At program point L560-5(lines 556 562) the Hoare annotation is: false [2022-01-10 12:28:02,776 INFO L854 garLoopResultBuilder]: At program point L132-2(lines 127 135) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:02,776 INFO L858 garLoopResultBuilder]: For program point L572(lines 572 580) no Hoare annotation was computed. [2022-01-10 12:28:02,776 INFO L858 garLoopResultBuilder]: For program point L932(line 932) no Hoare annotation was computed. [2022-01-10 12:28:02,776 INFO L854 garLoopResultBuilder]: At program point L145-2(lines 136 149) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:02,776 INFO L854 garLoopResultBuilder]: At program point L568-5(lines 564 588) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:02,776 INFO L858 garLoopResultBuilder]: For program point L964-4(lines 964 981) no Hoare annotation was computed. [2022-01-10 12:28:02,776 INFO L854 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 2 ~waterLevel~0Int)) [2022-01-10 12:28:02,776 INFO L854 garLoopResultBuilder]: At program point L560(lines 556 562) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse2 .cse3 (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5) (and .cse0 .cse1 (<= ~waterLevel~0Int 2) .cse2 .cse3 (<= 2 ~waterLevel~0Int) .cse5) (and .cse4 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse2 .cse3 .cse5))) [2022-01-10 12:28:02,776 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-01-10 12:28:02,777 INFO L854 garLoopResultBuilder]: At program point L933(lines 928 935) the Hoare annotation is: false [2022-01-10 12:28:02,777 INFO L858 garLoopResultBuilder]: For program point L688-6(lines 688 692) no Hoare annotation was computed. [2022-01-10 12:28:02,777 INFO L854 garLoopResultBuilder]: At program point L639-5(lines 634 642) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:02,777 INFO L854 garLoopResultBuilder]: At program point L964-5(lines 956 984) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:02,777 INFO L854 garLoopResultBuilder]: At program point L630(lines 623 633) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 2 ~waterLevel~0Int)) [2022-01-10 12:28:02,777 INFO L858 garLoopResultBuilder]: For program point L688-8(lines 688 692) no Hoare annotation was computed. [2022-01-10 12:28:02,777 INFO L858 garLoopResultBuilder]: For program point L968-4(lines 968 978) no Hoare annotation was computed. [2022-01-10 12:28:02,777 INFO L854 garLoopResultBuilder]: At program point L553-2(lines 529 555) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:02,777 INFO L858 garLoopResultBuilder]: For program point L605(lines 605 611) no Hoare annotation was computed. [2022-01-10 12:28:02,777 INFO L854 garLoopResultBuilder]: At program point L694-2(lines 679 697) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0)) [2022-01-10 12:28:02,777 INFO L858 garLoopResultBuilder]: For program point L969-6(lines 969 975) no Hoare annotation was computed. [2022-01-10 12:28:02,777 INFO L854 garLoopResultBuilder]: At program point L605-2(lines 598 614) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~pumpRunning~0Int)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-10 12:28:02,777 INFO L854 garLoopResultBuilder]: At program point L594(lines 589 596) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 2 ~waterLevel~0Int) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:28:02,777 INFO L858 garLoopResultBuilder]: For program point L572-6(lines 572 580) no Hoare annotation was computed. [2022-01-10 12:28:02,777 INFO L858 garLoopResultBuilder]: For program point L932-2(line 932) no Hoare annotation was computed. [2022-01-10 12:28:02,777 INFO L854 garLoopResultBuilder]: At program point L100-2(lines 95 103) the Hoare annotation is: false [2022-01-10 12:28:02,778 INFO L854 garLoopResultBuilder]: At program point L560-4(lines 556 562) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 0)) [2022-01-10 12:28:02,778 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-01-10 12:28:02,778 INFO L854 garLoopResultBuilder]: At program point L933-2(lines 928 935) the Hoare annotation is: false [2022-01-10 12:28:02,778 INFO L854 garLoopResultBuilder]: At program point L630-2(lines 623 633) the Hoare annotation is: false [2022-01-10 12:28:02,778 INFO L858 garLoopResultBuilder]: For program point L605-6(lines 605 611) no Hoare annotation was computed. [2022-01-10 12:28:02,778 INFO L854 garLoopResultBuilder]: At program point L605-8(lines 598 614) the Hoare annotation is: false [2022-01-10 12:28:02,778 INFO L854 garLoopResultBuilder]: At program point L594-2(lines 589 596) the Hoare annotation is: false [2022-01-10 12:28:02,780 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:02,781 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 12:28:02,916 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:28:02 BasicIcfg [2022-01-10 12:28:02,916 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 12:28:02,917 INFO L158 Benchmark]: Toolchain (without parser) took 13256.32ms. Allocated memory was 209.7MB in the beginning and 729.8MB in the end (delta: 520.1MB). Free memory was 157.8MB in the beginning and 674.7MB in the end (delta: -516.9MB). Peak memory consumption was 336.5MB. Max. memory is 8.0GB. [2022-01-10 12:28:02,917 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 209.7MB. Free memory was 174.7MB in the beginning and 174.6MB in the end (delta: 93.9kB). There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 12:28:02,918 INFO L158 Benchmark]: CACSL2BoogieTranslator took 444.68ms. Allocated memory is still 209.7MB. Free memory was 157.5MB in the beginning and 169.7MB in the end (delta: -12.3MB). Peak memory consumption was 11.0MB. Max. memory is 8.0GB. [2022-01-10 12:28:02,919 INFO L158 Benchmark]: Boogie Procedure Inliner took 81.95ms. Allocated memory is still 209.7MB. Free memory was 169.7MB in the beginning and 166.6MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 12:28:02,919 INFO L158 Benchmark]: Boogie Preprocessor took 36.41ms. Allocated memory is still 209.7MB. Free memory was 166.6MB in the beginning and 164.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 12:28:02,919 INFO L158 Benchmark]: RCFGBuilder took 366.89ms. Allocated memory is still 209.7MB. Free memory was 164.5MB in the beginning and 143.5MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 8.0GB. [2022-01-10 12:28:02,919 INFO L158 Benchmark]: IcfgTransformer took 72.95ms. Allocated memory is still 209.7MB. Free memory was 143.5MB in the beginning and 135.7MB in the end (delta: 7.9MB). Peak memory consumption was 8.4MB. Max. memory is 8.0GB. [2022-01-10 12:28:02,920 INFO L158 Benchmark]: TraceAbstraction took 12244.92ms. Allocated memory was 209.7MB in the beginning and 729.8MB in the end (delta: 520.1MB). Free memory was 135.1MB in the beginning and 674.7MB in the end (delta: -539.6MB). Peak memory consumption was 314.0MB. Max. memory is 8.0GB. [2022-01-10 12:28:02,921 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 209.7MB. Free memory was 174.7MB in the beginning and 174.6MB in the end (delta: 93.9kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 444.68ms. Allocated memory is still 209.7MB. Free memory was 157.5MB in the beginning and 169.7MB in the end (delta: -12.3MB). Peak memory consumption was 11.0MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 81.95ms. Allocated memory is still 209.7MB. Free memory was 169.7MB in the beginning and 166.6MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 36.41ms. Allocated memory is still 209.7MB. Free memory was 166.6MB in the beginning and 164.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 366.89ms. Allocated memory is still 209.7MB. Free memory was 164.5MB in the beginning and 143.5MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 8.0GB. * IcfgTransformer took 72.95ms. Allocated memory is still 209.7MB. Free memory was 143.5MB in the beginning and 135.7MB in the end (delta: 7.9MB). Peak memory consumption was 8.4MB. Max. memory is 8.0GB. * TraceAbstraction took 12244.92ms. Allocated memory was 209.7MB in the beginning and 729.8MB in the end (delta: 520.1MB). Free memory was 135.1MB in the beginning and 674.7MB in the end (delta: -539.6MB). Peak memory consumption was 314.0MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 135 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 12.1s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3839 SdHoareTripleChecker+Valid, 0.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3839 mSDsluCounter, 6367 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4164 mSDsCounter, 191 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 566 IncrementalHoareTripleChecker+Invalid, 757 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 191 mSolverCounterUnsat, 2203 mSDtfsCounter, 566 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 513 GetRequests, 450 SyntacticMatches, 1 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 132 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=590occurred in iteration=8, InterpolantAutomatonStates: 72, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 1504 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 68 LocationsWithAnnotation, 68 PreInvPairs, 478 NumberOfFragments, 3574 HoareAnnotationTreeSize, 68 FomulaSimplifications, 35859 FormulaSimplificationTreeSizeReduction, 2.2s HoareSimplificationTime, 68 FomulaSimplificationsInter, 189709 FormulaSimplificationTreeSizeReductionInter, 5.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 867 NumberOfCodeBlocks, 867 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1066 ConstructedInterpolants, 0 QuantifiedInterpolants, 2602 SizeOfPredicates, 9 NumberOfNonLiveVariables, 1562 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 778/802 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 698]: Loop Invariant Derived loop invariant: (((((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 806]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 564]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 83]: Loop Invariant Derived loop invariant: (((((((((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) || ((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 529]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 885]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 732]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 529]: Loop Invariant Derived loop invariant: ((((((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 564]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 564]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32)) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) && waterLevel == tmp)) || (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 713]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 529]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: (((((((((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && ~bvule32(waterLevel, 2bv32))) || (((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 938]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: ((((((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: (((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 813]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result)) || ((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 831]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 723]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: (((((((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: (((((((((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || (((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && ~bvule32(waterLevel, 2bv32))) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp) - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2022-01-10 12:28:02,983 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request...