/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 12:27:57,563 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 12:27:57,564 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 12:27:57,594 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 12:27:57,594 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 12:27:57,595 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 12:27:57,596 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 12:27:57,597 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 12:27:57,599 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 12:27:57,599 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 12:27:57,600 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 12:27:57,617 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 12:27:57,617 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 12:27:57,618 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 12:27:57,619 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 12:27:57,619 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 12:27:57,620 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 12:27:57,620 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 12:27:57,621 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 12:27:57,622 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 12:27:57,623 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 12:27:57,624 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 12:27:57,625 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 12:27:57,625 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 12:27:57,627 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 12:27:57,627 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 12:27:57,627 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 12:27:57,628 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 12:27:57,628 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 12:27:57,629 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 12:27:57,629 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 12:27:57,629 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 12:27:57,630 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 12:27:57,630 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 12:27:57,631 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 12:27:57,631 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 12:27:57,631 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 12:27:57,631 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 12:27:57,631 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 12:27:57,632 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 12:27:57,632 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 12:27:57,633 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf [2022-01-10 12:27:57,647 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 12:27:57,647 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 12:27:57,647 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 12:27:57,647 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 12:27:57,648 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 12:27:57,648 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 12:27:57,648 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 12:27:57,648 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 12:27:57,649 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 12:27:57,649 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 12:27:57,649 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 12:27:57,649 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 12:27:57,649 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 12:27:57,649 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 12:27:57,649 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 12:27:57,649 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 12:27:57,649 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 12:27:57,649 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 12:27:57,649 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 12:27:57,649 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 12:27:57,650 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 12:27:57,650 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:27:57,650 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 12:27:57,650 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 12:27:57,650 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 12:27:57,650 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 12:27:57,650 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 12:27:57,650 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 12:27:57,650 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 12:27:57,650 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 12:27:57,650 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 12:27:57,650 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 12:27:57,651 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 12:27:57,651 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_BITWISE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 12:27:57,833 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 12:27:57,854 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 12:27:57,856 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 12:27:57,857 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 12:27:57,857 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 12:27:57,858 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c [2022-01-10 12:27:57,904 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/238b3c083/d8cda98b06e34e4fb24df070ab99cd76/FLAG29de36c17 [2022-01-10 12:27:58,303 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 12:27:58,303 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c [2022-01-10 12:27:58,310 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/238b3c083/d8cda98b06e34e4fb24df070ab99cd76/FLAG29de36c17 [2022-01-10 12:27:58,326 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/238b3c083/d8cda98b06e34e4fb24df070ab99cd76 [2022-01-10 12:27:58,328 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 12:27:58,328 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 12:27:58,330 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 12:27:58,330 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 12:27:58,345 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 12:27:58,345 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,346 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@29610665 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58, skipping insertion in model container [2022-01-10 12:27:58,346 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,351 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 12:27:58,404 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:27:58,531 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c[1605,1618] [2022-01-10 12:27:58,664 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:27:58,672 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 12:27:58,676 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:27:58,678 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c[1605,1618] [2022-01-10 12:27:58,720 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:27:58,723 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 12:27:58,731 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c[1605,1618] [2022-01-10 12:27:58,759 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:27:58,772 INFO L208 MainTranslator]: Completed translation [2022-01-10 12:27:58,772 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58 WrapperNode [2022-01-10 12:27:58,772 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 12:27:58,773 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 12:27:58,773 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 12:27:58,773 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 12:27:58,778 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,789 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,817 INFO L137 Inliner]: procedures = 60, calls = 158, calls flagged for inlining = 55, calls inlined = 85, statements flattened = 642 [2022-01-10 12:27:58,818 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 12:27:58,819 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 12:27:58,819 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 12:27:58,819 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 12:27:58,826 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,826 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,830 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,831 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,838 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,843 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,847 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,850 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 12:27:58,850 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 12:27:58,850 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 12:27:58,851 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 12:27:58,863 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58" (1/1) ... [2022-01-10 12:27:58,869 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:27:58,885 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:27:58,909 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 12:27:58,911 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 12:27:58,936 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 12:27:58,936 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 12:27:58,936 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 12:27:58,937 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 12:27:59,039 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 12:27:59,040 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 12:27:59,514 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 12:27:59,522 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 12:27:59,522 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 12:27:59,525 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:27:59 BoogieIcfgContainer [2022-01-10 12:27:59,525 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 12:27:59,526 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 12:27:59,526 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 12:27:59,527 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 12:27:59,529 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:27:59" (1/1) ... [2022-01-10 12:27:59,645 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:27:59 BasicIcfg [2022-01-10 12:27:59,645 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 12:27:59,646 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 12:27:59,646 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 12:27:59,654 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 12:27:59,654 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 12:27:58" (1/4) ... [2022-01-10 12:27:59,655 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@297a25df and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:27:59, skipping insertion in model container [2022-01-10 12:27:59,655 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:27:58" (2/4) ... [2022-01-10 12:27:59,655 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@297a25df and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:27:59, skipping insertion in model container [2022-01-10 12:27:59,655 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:27:59" (3/4) ... [2022-01-10 12:27:59,655 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@297a25df and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:27:59, skipping insertion in model container [2022-01-10 12:27:59,655 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:27:59" (4/4) ... [2022-01-10 12:27:59,656 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product50.cil.cTransformedIcfg [2022-01-10 12:27:59,660 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 12:27:59,660 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 12:27:59,705 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 12:27:59,713 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 12:27:59,714 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 12:27:59,727 INFO L276 IsEmpty]: Start isEmpty. Operand has 176 states, 172 states have (on average 1.3895348837209303) internal successors, (239), 175 states have internal predecessors, (239), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:27:59,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-01-10 12:27:59,732 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:27:59,733 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:27:59,733 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:27:59,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:27:59,740 INFO L85 PathProgramCache]: Analyzing trace with hash -1179483662, now seen corresponding path program 1 times [2022-01-10 12:27:59,748 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:27:59,748 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1524693333] [2022-01-10 12:27:59,748 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:27:59,749 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:27:59,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:27:59,937 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:27:59,937 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:27:59,937 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1524693333] [2022-01-10 12:27:59,938 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1524693333] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:27:59,938 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:27:59,938 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:27:59,939 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1444151268] [2022-01-10 12:27:59,940 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:27:59,944 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 12:27:59,945 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:27:59,969 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 12:27:59,970 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:27:59,971 INFO L87 Difference]: Start difference. First operand has 176 states, 172 states have (on average 1.3895348837209303) internal successors, (239), 175 states have internal predecessors, (239), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,005 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:00,005 INFO L93 Difference]: Finished difference Result 341 states and 466 transitions. [2022-01-10 12:28:00,009 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 12:28:00,009 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-01-10 12:28:00,010 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:00,016 INFO L225 Difference]: With dead ends: 341 [2022-01-10 12:28:00,016 INFO L226 Difference]: Without dead ends: 166 [2022-01-10 12:28:00,019 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:28:00,021 INFO L933 BasicCegarLoop]: 229 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:00,022 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 229 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:00,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2022-01-10 12:28:00,050 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2022-01-10 12:28:00,052 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 163 states have (on average 1.3558282208588956) internal successors, (221), 165 states have internal predecessors, (221), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 221 transitions. [2022-01-10 12:28:00,054 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 221 transitions. Word has length 21 [2022-01-10 12:28:00,055 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:00,055 INFO L470 AbstractCegarLoop]: Abstraction has 166 states and 221 transitions. [2022-01-10 12:28:00,055 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,055 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 221 transitions. [2022-01-10 12:28:00,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-01-10 12:28:00,056 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:00,056 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:00,056 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 12:28:00,057 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:00,057 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:00,057 INFO L85 PathProgramCache]: Analyzing trace with hash -1034226222, now seen corresponding path program 1 times [2022-01-10 12:28:00,057 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:00,058 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [451025229] [2022-01-10 12:28:00,058 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:00,058 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:00,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:00,155 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:00,155 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:00,155 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [451025229] [2022-01-10 12:28:00,156 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [451025229] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:00,156 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:00,156 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:28:00,156 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1774677249] [2022-01-10 12:28:00,156 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:00,157 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:28:00,157 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:00,157 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:28:00,158 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:00,158 INFO L87 Difference]: Start difference. First operand 166 states and 221 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:00,199 INFO L93 Difference]: Finished difference Result 324 states and 434 transitions. [2022-01-10 12:28:00,199 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:28:00,199 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-01-10 12:28:00,199 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:00,200 INFO L225 Difference]: With dead ends: 324 [2022-01-10 12:28:00,200 INFO L226 Difference]: Without dead ends: 166 [2022-01-10 12:28:00,201 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:00,202 INFO L933 BasicCegarLoop]: 215 mSDtfsCounter, 203 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 203 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:00,202 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [203 Valid, 215 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:00,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2022-01-10 12:28:00,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2022-01-10 12:28:00,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 163 states have (on average 1.3374233128834356) internal successors, (218), 165 states have internal predecessors, (218), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,215 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 218 transitions. [2022-01-10 12:28:00,215 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 218 transitions. Word has length 22 [2022-01-10 12:28:00,215 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:00,216 INFO L470 AbstractCegarLoop]: Abstraction has 166 states and 218 transitions. [2022-01-10 12:28:00,218 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,218 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 218 transitions. [2022-01-10 12:28:00,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-01-10 12:28:00,219 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:00,219 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:00,220 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 12:28:00,220 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:00,220 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:00,220 INFO L85 PathProgramCache]: Analyzing trace with hash -1476929860, now seen corresponding path program 1 times [2022-01-10 12:28:00,220 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:00,221 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [126886492] [2022-01-10 12:28:00,221 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:00,221 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:00,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:00,294 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:00,294 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:00,294 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [126886492] [2022-01-10 12:28:00,294 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [126886492] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:00,294 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:00,294 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:28:00,295 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2022115668] [2022-01-10 12:28:00,295 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:00,295 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:28:00,295 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:00,295 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:28:00,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:00,296 INFO L87 Difference]: Start difference. First operand 166 states and 218 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:00,358 INFO L93 Difference]: Finished difference Result 395 states and 518 transitions. [2022-01-10 12:28:00,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:28:00,358 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-01-10 12:28:00,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:00,360 INFO L225 Difference]: With dead ends: 395 [2022-01-10 12:28:00,360 INFO L226 Difference]: Without dead ends: 237 [2022-01-10 12:28:00,361 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:00,362 INFO L933 BasicCegarLoop]: 236 mSDtfsCounter, 138 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 347 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:00,362 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [138 Valid, 347 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:00,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237 states. [2022-01-10 12:28:00,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237 to 231. [2022-01-10 12:28:00,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 228 states have (on average 1.2982456140350878) internal successors, (296), 230 states have internal predecessors, (296), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 296 transitions. [2022-01-10 12:28:00,384 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 296 transitions. Word has length 27 [2022-01-10 12:28:00,384 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:00,385 INFO L470 AbstractCegarLoop]: Abstraction has 231 states and 296 transitions. [2022-01-10 12:28:00,385 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,385 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 296 transitions. [2022-01-10 12:28:00,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 12:28:00,386 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:00,386 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:00,386 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 12:28:00,386 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:00,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:00,387 INFO L85 PathProgramCache]: Analyzing trace with hash -1469427615, now seen corresponding path program 1 times [2022-01-10 12:28:00,387 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:00,388 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [6784447] [2022-01-10 12:28:00,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:00,388 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:00,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:00,465 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:00,465 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:00,465 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [6784447] [2022-01-10 12:28:00,465 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [6784447] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:00,465 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:00,465 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:28:00,466 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2107005250] [2022-01-10 12:28:00,466 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:00,467 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:28:00,468 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:00,469 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:28:00,469 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:28:00,469 INFO L87 Difference]: Start difference. First operand 231 states and 296 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:00,607 INFO L93 Difference]: Finished difference Result 623 states and 785 transitions. [2022-01-10 12:28:00,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:28:00,608 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 12:28:00,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:00,609 INFO L225 Difference]: With dead ends: 623 [2022-01-10 12:28:00,609 INFO L226 Difference]: Without dead ends: 400 [2022-01-10 12:28:00,610 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:28:00,611 INFO L933 BasicCegarLoop]: 245 mSDtfsCounter, 402 mSDsluCounter, 734 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 402 SdHoareTripleChecker+Valid, 979 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:00,611 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [402 Valid, 979 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:28:00,612 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 400 states. [2022-01-10 12:28:00,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 400 to 249. [2022-01-10 12:28:00,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 249 states, 246 states have (on average 1.2764227642276422) internal successors, (314), 248 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 314 transitions. [2022-01-10 12:28:00,637 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 314 transitions. Word has length 33 [2022-01-10 12:28:00,637 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:00,637 INFO L470 AbstractCegarLoop]: Abstraction has 249 states and 314 transitions. [2022-01-10 12:28:00,637 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,637 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 314 transitions. [2022-01-10 12:28:00,638 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 12:28:00,638 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:00,638 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:00,638 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 12:28:00,639 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:00,649 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:00,649 INFO L85 PathProgramCache]: Analyzing trace with hash 832074817, now seen corresponding path program 1 times [2022-01-10 12:28:00,649 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:00,651 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1455166066] [2022-01-10 12:28:00,651 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:00,651 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:00,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:00,762 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:00,762 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:00,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1455166066] [2022-01-10 12:28:00,763 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1455166066] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:00,763 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:00,763 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:28:00,763 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [767977677] [2022-01-10 12:28:00,763 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:00,763 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:28:00,763 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:00,764 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:28:00,764 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:28:00,765 INFO L87 Difference]: Start difference. First operand 249 states and 314 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:00,952 INFO L93 Difference]: Finished difference Result 876 states and 1091 transitions. [2022-01-10 12:28:00,952 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-10 12:28:00,952 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 12:28:00,952 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:00,954 INFO L225 Difference]: With dead ends: 876 [2022-01-10 12:28:00,954 INFO L226 Difference]: Without dead ends: 635 [2022-01-10 12:28:00,955 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 12:28:00,956 INFO L933 BasicCegarLoop]: 389 mSDtfsCounter, 581 mSDsluCounter, 774 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 581 SdHoareTripleChecker+Valid, 1163 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:00,956 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [581 Valid, 1163 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:28:00,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 635 states. [2022-01-10 12:28:00,973 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 635 to 246. [2022-01-10 12:28:00,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 246 states, 243 states have (on average 1.2551440329218106) internal successors, (305), 245 states have internal predecessors, (305), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246 states to 246 states and 305 transitions. [2022-01-10 12:28:00,974 INFO L78 Accepts]: Start accepts. Automaton has 246 states and 305 transitions. Word has length 33 [2022-01-10 12:28:00,975 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:00,975 INFO L470 AbstractCegarLoop]: Abstraction has 246 states and 305 transitions. [2022-01-10 12:28:00,975 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:00,975 INFO L276 IsEmpty]: Start isEmpty. Operand 246 states and 305 transitions. [2022-01-10 12:28:00,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 12:28:00,976 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:00,976 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:00,976 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 12:28:00,976 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:00,976 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:00,977 INFO L85 PathProgramCache]: Analyzing trace with hash -1974986240, now seen corresponding path program 1 times [2022-01-10 12:28:00,977 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:00,977 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [211489048] [2022-01-10 12:28:00,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:00,977 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:00,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:01,010 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:01,010 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:01,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [211489048] [2022-01-10 12:28:01,010 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [211489048] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:01,011 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:01,011 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:28:01,011 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1918181828] [2022-01-10 12:28:01,011 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:01,011 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 12:28:01,011 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:01,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 12:28:01,011 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 12:28:01,012 INFO L87 Difference]: Start difference. First operand 246 states and 305 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:01,088 INFO L93 Difference]: Finished difference Result 662 states and 806 transitions. [2022-01-10 12:28:01,088 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:28:01,089 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 12:28:01,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:01,090 INFO L225 Difference]: With dead ends: 662 [2022-01-10 12:28:01,090 INFO L226 Difference]: Without dead ends: 424 [2022-01-10 12:28:01,091 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:28:01,116 INFO L933 BasicCegarLoop]: 247 mSDtfsCounter, 315 mSDsluCounter, 421 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 315 SdHoareTripleChecker+Valid, 668 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:01,117 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [315 Valid, 668 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:01,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 424 states. [2022-01-10 12:28:01,135 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 424 to 258. [2022-01-10 12:28:01,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 255 states have (on average 1.2431372549019608) internal successors, (317), 257 states have internal predecessors, (317), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,136 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 317 transitions. [2022-01-10 12:28:01,136 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 317 transitions. Word has length 33 [2022-01-10 12:28:01,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:01,137 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 317 transitions. [2022-01-10 12:28:01,137 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,137 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 317 transitions. [2022-01-10 12:28:01,137 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 12:28:01,138 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:01,138 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:01,138 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 12:28:01,138 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:01,138 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:01,138 INFO L85 PathProgramCache]: Analyzing trace with hash 1809446879, now seen corresponding path program 1 times [2022-01-10 12:28:01,138 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:01,139 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2060091374] [2022-01-10 12:28:01,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:01,139 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:01,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:01,197 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:01,197 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:01,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2060091374] [2022-01-10 12:28:01,198 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2060091374] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:01,198 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:01,198 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:28:01,198 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1420302364] [2022-01-10 12:28:01,198 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:01,198 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:28:01,198 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:01,199 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:28:01,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:01,199 INFO L87 Difference]: Start difference. First operand 258 states and 317 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 2 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:01,257 INFO L93 Difference]: Finished difference Result 593 states and 724 transitions. [2022-01-10 12:28:01,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:28:01,257 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 2 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 12:28:01,257 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:01,258 INFO L225 Difference]: With dead ends: 593 [2022-01-10 12:28:01,258 INFO L226 Difference]: Without dead ends: 294 [2022-01-10 12:28:01,259 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:01,259 INFO L933 BasicCegarLoop]: 205 mSDtfsCounter, 84 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 383 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:01,259 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [84 Valid, 383 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:01,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-01-10 12:28:01,278 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 294. [2022-01-10 12:28:01,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 291 states have (on average 1.2336769759450172) internal successors, (359), 293 states have internal predecessors, (359), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 359 transitions. [2022-01-10 12:28:01,279 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 359 transitions. Word has length 33 [2022-01-10 12:28:01,279 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:01,279 INFO L470 AbstractCegarLoop]: Abstraction has 294 states and 359 transitions. [2022-01-10 12:28:01,279 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 2 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,279 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 359 transitions. [2022-01-10 12:28:01,280 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-01-10 12:28:01,280 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:01,280 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:01,280 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 12:28:01,280 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:01,281 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:01,281 INFO L85 PathProgramCache]: Analyzing trace with hash 1090044263, now seen corresponding path program 1 times [2022-01-10 12:28:01,281 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:01,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1735417057] [2022-01-10 12:28:01,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:01,281 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:01,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:01,369 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:01,370 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:01,370 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1735417057] [2022-01-10 12:28:01,370 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1735417057] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:01,370 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:01,370 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:28:01,370 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1843328152] [2022-01-10 12:28:01,370 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:01,370 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 12:28:01,371 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:01,371 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 12:28:01,371 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:28:01,371 INFO L87 Difference]: Start difference. First operand 294 states and 359 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:01,666 INFO L93 Difference]: Finished difference Result 1428 states and 1751 transitions. [2022-01-10 12:28:01,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-01-10 12:28:01,667 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-01-10 12:28:01,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:01,670 INFO L225 Difference]: With dead ends: 1428 [2022-01-10 12:28:01,670 INFO L226 Difference]: Without dead ends: 1048 [2022-01-10 12:28:01,671 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2022-01-10 12:28:01,672 INFO L933 BasicCegarLoop]: 352 mSDtfsCounter, 989 mSDsluCounter, 989 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 989 SdHoareTripleChecker+Valid, 1341 SdHoareTripleChecker+Invalid, 222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:01,673 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [989 Valid, 1341 Invalid, 222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:28:01,676 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1048 states. [2022-01-10 12:28:01,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1048 to 539. [2022-01-10 12:28:01,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 539 states, 536 states have (on average 1.2070895522388059) internal successors, (647), 538 states have internal predecessors, (647), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 539 states to 539 states and 647 transitions. [2022-01-10 12:28:01,719 INFO L78 Accepts]: Start accepts. Automaton has 539 states and 647 transitions. Word has length 42 [2022-01-10 12:28:01,719 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:01,719 INFO L470 AbstractCegarLoop]: Abstraction has 539 states and 647 transitions. [2022-01-10 12:28:01,719 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,720 INFO L276 IsEmpty]: Start isEmpty. Operand 539 states and 647 transitions. [2022-01-10 12:28:01,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-01-10 12:28:01,721 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:01,721 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:01,722 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 12:28:01,722 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:01,722 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:01,722 INFO L85 PathProgramCache]: Analyzing trace with hash -299980011, now seen corresponding path program 1 times [2022-01-10 12:28:01,722 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:01,722 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1399595959] [2022-01-10 12:28:01,722 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:01,722 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:01,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:01,784 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:01,784 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:01,784 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1399595959] [2022-01-10 12:28:01,784 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1399595959] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:01,785 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:01,785 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:28:01,785 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [198945393] [2022-01-10 12:28:01,785 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:01,786 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:28:01,786 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:01,786 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:28:01,786 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:01,786 INFO L87 Difference]: Start difference. First operand 539 states and 647 transitions. Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:01,822 INFO L93 Difference]: Finished difference Result 539 states and 647 transitions. [2022-01-10 12:28:01,822 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:28:01,822 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2022-01-10 12:28:01,824 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:01,824 INFO L225 Difference]: With dead ends: 539 [2022-01-10 12:28:01,825 INFO L226 Difference]: Without dead ends: 256 [2022-01-10 12:28:01,825 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:01,826 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 48 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:01,827 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [48 Valid, 94 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:01,828 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2022-01-10 12:28:01,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 256. [2022-01-10 12:28:01,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 256 states, 255 states have (on average 1.2352941176470589) internal successors, (315), 255 states have internal predecessors, (315), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 315 transitions. [2022-01-10 12:28:01,855 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 315 transitions. Word has length 66 [2022-01-10 12:28:01,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:01,855 INFO L470 AbstractCegarLoop]: Abstraction has 256 states and 315 transitions. [2022-01-10 12:28:01,855 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,855 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 315 transitions. [2022-01-10 12:28:01,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-01-10 12:28:01,856 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:01,856 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:01,857 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 12:28:01,857 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:01,857 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:01,857 INFO L85 PathProgramCache]: Analyzing trace with hash 1153758127, now seen corresponding path program 1 times [2022-01-10 12:28:01,857 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:01,857 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [594311632] [2022-01-10 12:28:01,857 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:01,857 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:01,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:01,920 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:01,921 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:01,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [594311632] [2022-01-10 12:28:01,921 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [594311632] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 12:28:01,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [238888842] [2022-01-10 12:28:01,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:01,921 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 12:28:01,921 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:28:01,923 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 12:28:01,923 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-10 12:28:02,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:02,036 INFO L263 TraceCheckSpWp]: Trace formula consists of 618 conjuncts, 5 conjunts are in the unsatisfiable core [2022-01-10 12:28:02,041 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 12:28:02,225 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:02,225 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 12:28:02,323 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:02,323 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [238888842] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 12:28:02,323 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 12:28:02,324 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 5 [2022-01-10 12:28:02,324 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [595672152] [2022-01-10 12:28:02,324 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 12:28:02,324 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:28:02,324 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:02,325 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:28:02,325 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:28:02,325 INFO L87 Difference]: Start difference. First operand 256 states and 315 transitions. Second operand has 5 states, 5 states have (on average 14.6) internal successors, (73), 5 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:02,408 INFO L93 Difference]: Finished difference Result 636 states and 802 transitions. [2022-01-10 12:28:02,408 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-01-10 12:28:02,408 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.6) internal successors, (73), 5 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 73 [2022-01-10 12:28:02,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:02,411 INFO L225 Difference]: With dead ends: 636 [2022-01-10 12:28:02,411 INFO L226 Difference]: Without dead ends: 388 [2022-01-10 12:28:02,412 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 148 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-01-10 12:28:02,412 INFO L933 BasicCegarLoop]: 158 mSDtfsCounter, 171 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:02,413 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [171 Valid, 443 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:02,413 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 388 states. [2022-01-10 12:28:02,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 388 to 241. [2022-01-10 12:28:02,437 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 241 states, 240 states have (on average 1.2125) internal successors, (291), 240 states have internal predecessors, (291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 241 states to 241 states and 291 transitions. [2022-01-10 12:28:02,438 INFO L78 Accepts]: Start accepts. Automaton has 241 states and 291 transitions. Word has length 73 [2022-01-10 12:28:02,438 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:02,438 INFO L470 AbstractCegarLoop]: Abstraction has 241 states and 291 transitions. [2022-01-10 12:28:02,438 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 14.6) internal successors, (73), 5 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,439 INFO L276 IsEmpty]: Start isEmpty. Operand 241 states and 291 transitions. [2022-01-10 12:28:02,442 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2022-01-10 12:28:02,442 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:02,442 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:02,463 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-01-10 12:28:02,659 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-01-10 12:28:02,660 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:02,660 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:02,660 INFO L85 PathProgramCache]: Analyzing trace with hash -1187607473, now seen corresponding path program 1 times [2022-01-10 12:28:02,660 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:02,660 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2002228464] [2022-01-10 12:28:02,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:02,660 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:02,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:02,724 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 77 proven. 0 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-01-10 12:28:02,724 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:02,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2002228464] [2022-01-10 12:28:02,724 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2002228464] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:02,724 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:02,724 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:28:02,726 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1558497221] [2022-01-10 12:28:02,727 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:02,727 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:28:02,727 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:02,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:28:02,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:28:02,727 INFO L87 Difference]: Start difference. First operand 241 states and 291 transitions. Second operand has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:02,792 INFO L93 Difference]: Finished difference Result 600 states and 733 transitions. [2022-01-10 12:28:02,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:28:02,792 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 132 [2022-01-10 12:28:02,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:02,794 INFO L225 Difference]: With dead ends: 600 [2022-01-10 12:28:02,794 INFO L226 Difference]: Without dead ends: 367 [2022-01-10 12:28:02,794 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:28:02,795 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 172 mSDsluCounter, 286 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:02,795 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [172 Valid, 396 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:02,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 367 states. [2022-01-10 12:28:02,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 367 to 247. [2022-01-10 12:28:02,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 247 states, 246 states have (on average 1.2073170731707317) internal successors, (297), 246 states have internal predecessors, (297), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 247 states to 247 states and 297 transitions. [2022-01-10 12:28:02,825 INFO L78 Accepts]: Start accepts. Automaton has 247 states and 297 transitions. Word has length 132 [2022-01-10 12:28:02,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:02,825 INFO L470 AbstractCegarLoop]: Abstraction has 247 states and 297 transitions. [2022-01-10 12:28:02,825 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,825 INFO L276 IsEmpty]: Start isEmpty. Operand 247 states and 297 transitions. [2022-01-10 12:28:02,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2022-01-10 12:28:02,826 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:02,827 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:02,827 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 12:28:02,827 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:02,827 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:02,827 INFO L85 PathProgramCache]: Analyzing trace with hash -1636304112, now seen corresponding path program 1 times [2022-01-10 12:28:02,827 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:02,827 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1392533483] [2022-01-10 12:28:02,827 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:02,828 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:02,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:02,985 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 113 proven. 2 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-01-10 12:28:02,986 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:02,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1392533483] [2022-01-10 12:28:02,986 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1392533483] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 12:28:02,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1929679074] [2022-01-10 12:28:02,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:02,986 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 12:28:02,986 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:28:02,987 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 12:28:03,024 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-01-10 12:28:03,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:03,124 INFO L263 TraceCheckSpWp]: Trace formula consists of 904 conjuncts, 15 conjunts are in the unsatisfiable core [2022-01-10 12:28:03,129 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 12:28:03,324 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 72 proven. 2 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2022-01-10 12:28:03,324 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 12:28:03,474 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 72 proven. 2 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2022-01-10 12:28:03,474 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1929679074] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 12:28:03,474 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 12:28:03,475 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 15 [2022-01-10 12:28:03,475 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2106404977] [2022-01-10 12:28:03,475 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 12:28:03,475 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-01-10 12:28:03,475 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:03,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-01-10 12:28:03,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-01-10 12:28:03,476 INFO L87 Difference]: Start difference. First operand 247 states and 297 transitions. Second operand has 15 states, 15 states have (on average 11.4) internal successors, (171), 15 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:03,846 INFO L93 Difference]: Finished difference Result 867 states and 1049 transitions. [2022-01-10 12:28:03,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-01-10 12:28:03,846 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 11.4) internal successors, (171), 15 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 132 [2022-01-10 12:28:03,846 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:03,847 INFO L225 Difference]: With dead ends: 867 [2022-01-10 12:28:03,847 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 12:28:03,848 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 264 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 90 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=154, Invalid=548, Unknown=0, NotChecked=0, Total=702 [2022-01-10 12:28:03,848 INFO L933 BasicCegarLoop]: 231 mSDtfsCounter, 1431 mSDsluCounter, 1163 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1431 SdHoareTripleChecker+Valid, 1394 SdHoareTripleChecker+Invalid, 197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:03,848 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1431 Valid, 1394 Invalid, 197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:28:03,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 12:28:03,849 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 12:28:03,849 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,849 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 12:28:03,849 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 132 [2022-01-10 12:28:03,849 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:03,849 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 12:28:03,849 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 11.4) internal successors, (171), 15 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,849 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 12:28:03,849 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 12:28:03,851 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 12:28:03,851 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 12:28:03,852 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 12:28:03,871 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-01-10 12:28:04,069 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-10 12:28:04,071 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 12:28:12,775 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 12:28:12,775 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 12:28:12,776 INFO L854 garLoopResultBuilder]: At program point L894(lines 890 896) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (div (+ 4294967295 ~waterLevel~0Int) 4294967296))) [2022-01-10 12:28:12,776 INFO L854 garLoopResultBuilder]: At program point L887(lines 883 889) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (div (+ 4294967295 ~waterLevel~0Int) 4294967296))) [2022-01-10 12:28:12,776 INFO L854 garLoopResultBuilder]: At program point L902(lines 897 905) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (div (+ 4294967295 ~waterLevel~0Int) 4294967296))) [2022-01-10 12:28:12,776 INFO L858 garLoopResultBuilder]: For program point L990(lines 990 997) no Hoare annotation was computed. [2022-01-10 12:28:12,776 INFO L854 garLoopResultBuilder]: At program point L966(lines 962 968) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (div (+ 4294967295 ~waterLevel~0Int) 4294967296))) [2022-01-10 12:28:12,776 INFO L858 garLoopResultBuilder]: For program point L990-2(lines 990 997) no Hoare annotation was computed. [2022-01-10 12:28:12,776 INFO L854 garLoopResultBuilder]: At program point L826(lines 821 828) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (div (+ 4294967295 ~waterLevel~0Int) 4294967296))) [2022-01-10 12:28:12,776 INFO L861 garLoopResultBuilder]: At program point L999(lines 980 1002) the Hoare annotation is: true [2022-01-10 12:28:12,776 INFO L854 garLoopResultBuilder]: At program point L293-2(lines 293 340) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2)) (.cse8 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse4 .cse7) (and .cse0 .cse6 .cse3 .cse4 .cse7 .cse8) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse8) (and .cse9 .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0Int))))) [2022-01-10 12:28:12,776 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 12:28:12,776 INFO L854 garLoopResultBuilder]: At program point L341(lines 292 342) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,777 INFO L858 garLoopResultBuilder]: For program point L294(lines 293 340) no Hoare annotation was computed. [2022-01-10 12:28:12,777 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 12:28:12,777 INFO L854 garLoopResultBuilder]: At program point L193-2(lines 188 196) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,777 INFO L858 garLoopResultBuilder]: For program point L295(lines 295 299) no Hoare annotation was computed. [2022-01-10 12:28:12,777 INFO L854 garLoopResultBuilder]: At program point L836-1(lines 829 838) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,777 INFO L858 garLoopResultBuilder]: For program point L303(lines 303 309) no Hoare annotation was computed. [2022-01-10 12:28:12,777 INFO L858 garLoopResultBuilder]: For program point L82-3(lines 82 88) no Hoare annotation was computed. [2022-01-10 12:28:12,777 INFO L858 garLoopResultBuilder]: For program point L369(lines 369 373) no Hoare annotation was computed. [2022-01-10 12:28:12,777 INFO L858 garLoopResultBuilder]: For program point L303-2(lines 303 309) no Hoare annotation was computed. [2022-01-10 12:28:12,777 INFO L858 garLoopResultBuilder]: For program point L357-3(lines 357 361) no Hoare annotation was computed. [2022-01-10 12:28:12,777 INFO L858 garLoopResultBuilder]: For program point L82-5(lines 78 100) no Hoare annotation was computed. [2022-01-10 12:28:12,777 INFO L854 garLoopResultBuilder]: At program point L369-2(lines 365 376) the Hoare annotation is: (let ((.cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1))) (.cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse4 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse7 (<= 1 ~pumpRunning~0Int)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse5 (<= ~waterLevel~0Int 2)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse5 .cse6 .cse8 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse7) (and .cse1 .cse2 .cse5 .cse6 .cse8))) [2022-01-10 12:28:12,777 INFO L858 garLoopResultBuilder]: For program point L313(lines 313 319) no Hoare annotation was computed. [2022-01-10 12:28:12,777 INFO L854 garLoopResultBuilder]: At program point L357-5(lines 353 364) the Hoare annotation is: false [2022-01-10 12:28:12,777 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 157) no Hoare annotation was computed. [2022-01-10 12:28:12,778 INFO L858 garLoopResultBuilder]: For program point L89-3(lines 89 95) no Hoare annotation was computed. [2022-01-10 12:28:12,778 INFO L858 garLoopResultBuilder]: For program point L381(lines 381 385) no Hoare annotation was computed. [2022-01-10 12:28:12,778 INFO L858 garLoopResultBuilder]: For program point L313-2(lines 313 319) no Hoare annotation was computed. [2022-01-10 12:28:12,778 INFO L854 garLoopResultBuilder]: At program point L449-1(lines 444 452) the Hoare annotation is: false [2022-01-10 12:28:12,778 INFO L858 garLoopResultBuilder]: For program point L114-6(lines 114 131) no Hoare annotation was computed. [2022-01-10 12:28:12,778 INFO L854 garLoopResultBuilder]: At program point L426-1(lines 421 429) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,778 INFO L854 garLoopResultBuilder]: At program point L381-2(lines 377 388) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse8 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse3 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse5 (= ~pumpRunning~0Int 0)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 2 ~waterLevel~0Int))) (or (and (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse1 .cse2 .cse3) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2 .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse3) (and .cse0 .cse5 .cse6 .cse7 .cse2 .cse8) (and .cse0 .cse6 .cse7 .cse2 .cse8 .cse3) (and .cse9 .cse0 .cse5 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse5 .cse1 .cse2 .cse4)))) [2022-01-10 12:28:12,778 INFO L858 garLoopResultBuilder]: For program point L323(lines 323 336) no Hoare annotation was computed. [2022-01-10 12:28:12,778 INFO L858 garLoopResultBuilder]: For program point L261-3(lines 261 265) no Hoare annotation was computed. [2022-01-10 12:28:12,778 INFO L858 garLoopResultBuilder]: For program point L434-3(lines 434 440) no Hoare annotation was computed. [2022-01-10 12:28:12,778 INFO L854 garLoopResultBuilder]: At program point L106-7(lines 102 108) the Hoare annotation is: false [2022-01-10 12:28:12,778 INFO L858 garLoopResultBuilder]: For program point L847-2(lines 847 864) no Hoare annotation was computed. [2022-01-10 12:28:12,778 INFO L854 garLoopResultBuilder]: At program point L276(lines 271 278) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse8 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse3 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse5 (= ~pumpRunning~0Int 0)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 2 ~waterLevel~0Int))) (or (and (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse1 .cse2 .cse3) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2 .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse3) (and .cse0 .cse5 .cse6 .cse7 .cse2 .cse8) (and .cse0 .cse6 .cse7 .cse2 .cse8 .cse3) (and .cse9 .cse0 .cse5 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse5 .cse1 .cse2 .cse4)))) [2022-01-10 12:28:12,778 INFO L858 garLoopResultBuilder]: For program point L331(lines 331 335) no Hoare annotation was computed. [2022-01-10 12:28:12,778 INFO L858 garLoopResultBuilder]: For program point L261-5(lines 261 265) no Hoare annotation was computed. [2022-01-10 12:28:12,778 INFO L854 garLoopResultBuilder]: At program point L439-3(lines 430 443) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,778 INFO L854 garLoopResultBuilder]: At program point L114-7(lines 110 134) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) [2022-01-10 12:28:12,779 INFO L854 garLoopResultBuilder]: At program point L193-3(lines 188 196) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,779 INFO L854 garLoopResultBuilder]: At program point L847-3(lines 839 867) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,779 INFO L858 garLoopResultBuilder]: For program point L331-2(lines 323 336) no Hoare annotation was computed. [2022-01-10 12:28:12,779 INFO L854 garLoopResultBuilder]: At program point L267-1(lines 252 270) the Hoare annotation is: false [2022-01-10 12:28:12,779 INFO L858 garLoopResultBuilder]: For program point L242-9(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,779 INFO L854 garLoopResultBuilder]: At program point L140-3(lines 136 160) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,779 INFO L858 garLoopResultBuilder]: For program point L851-2(lines 851 861) no Hoare annotation was computed. [2022-01-10 12:28:12,779 INFO L854 garLoopResultBuilder]: At program point L99-1(lines 75 101) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,779 INFO L854 garLoopResultBuilder]: At program point L193(lines 188 196) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0Int 1))) (let ((.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse8 (or .cse11 (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int)) (.cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse10 (= ~pumpRunning~0Int 0)) (.cse3 (<= ~waterLevel~0Int 2)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse7 .cse4 .cse8 .cse5) (and .cse9 .cse1 .cse10 .cse6 .cse7 .cse4 .cse8) (and .cse0 .cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse7 .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse5) (and .cse11 .cse9 .cse1 .cse10 .cse2 .cse4) (and .cse9 .cse1 .cse10 .cse3 .cse4 (<= 2 ~waterLevel~0Int))))) [2022-01-10 12:28:12,779 INFO L858 garLoopResultBuilder]: For program point L144-3(lines 144 152) no Hoare annotation was computed. [2022-01-10 12:28:12,779 INFO L858 garLoopResultBuilder]: For program point L242-11(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,779 INFO L858 garLoopResultBuilder]: For program point L852-3(lines 852 858) no Hoare annotation was computed. [2022-01-10 12:28:12,779 INFO L854 garLoopResultBuilder]: At program point L918-2(lines 918 932) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,779 INFO L854 garLoopResultBuilder]: At program point L836(lines 829 838) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1))) (let ((.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse10 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse11 (or .cse0 (<= 4294967297 ~waterLevel~0Int))) (.cse7 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse8 (<= 1 ~pumpRunning~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (<= ~waterLevel~0Int 2)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse5 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse6 .cse4 .cse7 .cse8) (and .cse5 .cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse9 .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse7 .cse8) (and .cse1 .cse2 .cse3 .cse10 .cse9 .cse4 .cse11) (and .cse5 .cse2 .cse10 .cse9 .cse4 .cse11 .cse7 .cse8) (and .cse1 .cse2 .cse3 .cse6 .cse4 (<= 2 ~waterLevel~0Int))))) [2022-01-10 12:28:12,779 INFO L854 garLoopResultBuilder]: At program point L174-1(lines 169 176) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:12,779 INFO L858 garLoopResultBuilder]: For program point L114-4(lines 114 131) no Hoare annotation was computed. [2022-01-10 12:28:12,779 INFO L854 garLoopResultBuilder]: At program point L248-3(lines 233 251) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~2#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0)) [2022-01-10 12:28:12,780 INFO L858 garLoopResultBuilder]: For program point L54-1(line 54) no Hoare annotation was computed. [2022-01-10 12:28:12,780 INFO L861 garLoopResultBuilder]: At program point L933(lines 908 937) the Hoare annotation is: true [2022-01-10 12:28:12,780 INFO L858 garLoopResultBuilder]: For program point L919(line 919) no Hoare annotation was computed. [2022-01-10 12:28:12,780 INFO L858 garLoopResultBuilder]: For program point L82(lines 82 88) no Hoare annotation was computed. [2022-01-10 12:28:12,780 INFO L858 garLoopResultBuilder]: For program point L434-2(lines 434 440) no Hoare annotation was computed. [2022-01-10 12:28:12,780 INFO L854 garLoopResultBuilder]: At program point L106-5(lines 102 108) the Hoare annotation is: false [2022-01-10 12:28:12,781 INFO L858 garLoopResultBuilder]: For program point L118-9(lines 118 126) no Hoare annotation was computed. [2022-01-10 12:28:12,781 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-01-10 12:28:12,781 INFO L854 garLoopResultBuilder]: At program point L55-1(lines 50 57) the Hoare annotation is: false [2022-01-10 12:28:12,781 INFO L861 garLoopResultBuilder]: At program point L346(lines 283 348) the Hoare annotation is: true [2022-01-10 12:28:12,781 INFO L858 garLoopResultBuilder]: For program point L922(lines 922 926) no Hoare annotation was computed. [2022-01-10 12:28:12,781 INFO L858 garLoopResultBuilder]: For program point L357(lines 357 361) no Hoare annotation was computed. [2022-01-10 12:28:12,781 INFO L858 garLoopResultBuilder]: For program point L82-2(lines 78 100) no Hoare annotation was computed. [2022-01-10 12:28:12,781 INFO L854 garLoopResultBuilder]: At program point L439-2(lines 430 443) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:12,781 INFO L854 garLoopResultBuilder]: At program point L114-5(lines 110 134) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1)) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:12,782 INFO L854 garLoopResultBuilder]: At program point L166-3(lines 161 168) the Hoare annotation is: false [2022-01-10 12:28:12,782 INFO L854 garLoopResultBuilder]: At program point L106-6(lines 102 108) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) [2022-01-10 12:28:12,782 INFO L861 garLoopResultBuilder]: At program point L977(lines 969 979) the Hoare annotation is: true [2022-01-10 12:28:12,782 INFO L858 garLoopResultBuilder]: For program point L922-1(lines 922 926) no Hoare annotation was computed. [2022-01-10 12:28:12,782 INFO L854 garLoopResultBuilder]: At program point L357-2(lines 353 364) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse4 .cse5))) [2022-01-10 12:28:12,782 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 157) no Hoare annotation was computed. [2022-01-10 12:28:12,782 INFO L858 garLoopResultBuilder]: For program point L89-1(lines 89 95) no Hoare annotation was computed. [2022-01-10 12:28:12,782 INFO L858 garLoopResultBuilder]: For program point L242-6(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,783 INFO L854 garLoopResultBuilder]: At program point L193-4(lines 188 196) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,783 INFO L854 garLoopResultBuilder]: At program point L449(lines 444 452) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse4 .cse5))) [2022-01-10 12:28:12,784 INFO L858 garLoopResultBuilder]: For program point L114-2(lines 114 131) no Hoare annotation was computed. [2022-01-10 12:28:12,784 INFO L854 garLoopResultBuilder]: At program point L426(lines 421 429) the Hoare annotation is: (let ((.cse3 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse5 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse6 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~pumpRunning~0Int))) (or (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1)) (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0) .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0Int) .cse4) (and .cse0 .cse5 .cse1 .cse2 .cse3) (and .cse0 .cse5 .cse6 (<= ~waterLevel~0Int 2) .cse2 (<= 2 ~waterLevel~0Int)) (and .cse0 .cse1 .cse6 .cse2 .cse4))) [2022-01-10 12:28:12,784 INFO L858 garLoopResultBuilder]: For program point L242-8(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,784 INFO L854 garLoopResultBuilder]: At program point L836-2(lines 829 838) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,784 INFO L858 garLoopResultBuilder]: For program point L261(lines 261 265) no Hoare annotation was computed. [2022-01-10 12:28:12,784 INFO L858 garLoopResultBuilder]: For program point L434-1(lines 434 440) no Hoare annotation was computed. [2022-01-10 12:28:12,784 INFO L854 garLoopResultBuilder]: At program point L106-3(lines 102 108) the Hoare annotation is: false [2022-01-10 12:28:12,784 INFO L858 garLoopResultBuilder]: For program point L847(lines 847 864) no Hoare annotation was computed. [2022-01-10 12:28:12,784 INFO L854 garLoopResultBuilder]: At program point L248-2(lines 233 251) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~2#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:12,784 INFO L858 garLoopResultBuilder]: For program point L82-6(lines 82 88) no Hoare annotation was computed. [2022-01-10 12:28:12,785 INFO L858 garLoopResultBuilder]: For program point L261-2(lines 261 265) no Hoare annotation was computed. [2022-01-10 12:28:12,785 INFO L854 garLoopResultBuilder]: At program point L439-1(lines 430 443) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|)) (.cse1 (<= ~waterLevel~0Int 1)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 (or .cse1 (<= 4294967297 ~waterLevel~0Int))) (and .cse2 .cse3 (<= ~waterLevel~0Int 2) .cse4 (<= 2 ~waterLevel~0Int)))) [2022-01-10 12:28:12,785 INFO L854 garLoopResultBuilder]: At program point L114-3(lines 110 134) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (<= ~waterLevel~0Int 2)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) (.cse7 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= 1 ~waterLevel~0Int)) (and .cse2 .cse6 .cse4 .cse7 (<= 1 ~pumpRunning~0Int)) (and .cse0 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 .cse5 (or .cse1 (<= 4294967297 ~waterLevel~0Int))) (and .cse0 .cse2 .cse3 .cse6 .cse4 .cse5 .cse7))) [2022-01-10 12:28:12,785 INFO L854 garLoopResultBuilder]: At program point L193-1(lines 188 196) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int)))) (or (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1)) (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0Int) (<= 1 ~pumpRunning~0Int)) (and (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3 .cse4))) [2022-01-10 12:28:12,785 INFO L854 garLoopResultBuilder]: At program point L847-1(lines 839 867) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2)) (.cse8 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse4 .cse7) (and .cse0 .cse6 .cse3 .cse4 .cse7 .cse8) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse8))) [2022-01-10 12:28:12,785 INFO L858 garLoopResultBuilder]: For program point L118-6(lines 118 126) no Hoare annotation was computed. [2022-01-10 12:28:12,785 INFO L858 garLoopResultBuilder]: For program point L357-6(lines 357 361) no Hoare annotation was computed. [2022-01-10 12:28:12,785 INFO L858 garLoopResultBuilder]: For program point L82-8(lines 78 100) no Hoare annotation was computed. [2022-01-10 12:28:12,785 INFO L854 garLoopResultBuilder]: At program point L267(lines 252 270) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse4 .cse5))) [2022-01-10 12:28:12,785 INFO L858 garLoopResultBuilder]: For program point L242-3(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,785 INFO L854 garLoopResultBuilder]: At program point L140-1(lines 136 160) the Hoare annotation is: (let ((.cse13 (<= ~waterLevel~0Int 1))) (let ((.cse8 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1))) (.cse9 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse10 (or .cse13 (<= 4294967297 ~waterLevel~0Int))) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse12 (= ~pumpRunning~0Int 0)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse8 .cse0 .cse9 .cse2 .cse10 .cse11 .cse4) (and .cse8 .cse0 .cse12 .cse9 .cse2 .cse10) (and .cse5 .cse13 .cse6 .cse7 .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse11 .cse4) (and .cse13 .cse0 .cse12 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse12 .cse1 .cse2 .cse3)))) [2022-01-10 12:28:12,785 INFO L858 garLoopResultBuilder]: For program point L851(lines 851 861) no Hoare annotation was computed. [2022-01-10 12:28:12,785 INFO L854 garLoopResultBuilder]: At program point L99(lines 75 101) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2)) (.cse8 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse4 .cse7) (and .cse0 .cse6 .cse3 .cse4 .cse7 .cse8) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse8))) [2022-01-10 12:28:12,785 INFO L854 garLoopResultBuilder]: At program point L166-2(lines 161 168) the Hoare annotation is: false [2022-01-10 12:28:12,785 INFO L854 garLoopResultBuilder]: At program point L106-4(lines 102 108) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1)) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:12,785 INFO L854 garLoopResultBuilder]: At program point L357-8(lines 353 364) the Hoare annotation is: false [2022-01-10 12:28:12,785 INFO L858 garLoopResultBuilder]: For program point L140-4(lines 140 157) no Hoare annotation was computed. [2022-01-10 12:28:12,786 INFO L858 garLoopResultBuilder]: For program point L89-5(lines 89 95) no Hoare annotation was computed. [2022-01-10 12:28:12,786 INFO L858 garLoopResultBuilder]: For program point L144(lines 144 152) no Hoare annotation was computed. [2022-01-10 12:28:12,786 INFO L858 garLoopResultBuilder]: For program point L242-5(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,786 INFO L858 garLoopResultBuilder]: For program point L852(lines 852 858) no Hoare annotation was computed. [2022-01-10 12:28:12,786 INFO L854 garLoopResultBuilder]: At program point L449-2(lines 444 452) the Hoare annotation is: false [2022-01-10 12:28:12,786 INFO L858 garLoopResultBuilder]: For program point L114-10(lines 114 131) no Hoare annotation was computed. [2022-01-10 12:28:12,786 INFO L854 garLoopResultBuilder]: At program point L426-2(lines 421 429) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,786 INFO L854 garLoopResultBuilder]: At program point L174(lines 169 176) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse0 (<= ~waterLevel~0Int 1)) (.cse5 (<= 1 ~switchedOnBeforeTS~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse5) (and .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse2 .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse0 (<= 4294967297 ~waterLevel~0Int)) .cse5))) [2022-01-10 12:28:12,786 INFO L858 garLoopResultBuilder]: For program point L114(lines 114 131) no Hoare annotation was computed. [2022-01-10 12:28:12,786 INFO L854 garLoopResultBuilder]: At program point L248-1(lines 233 251) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~2#1Int|)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse3 (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5 .cse6) (and .cse4 .cse0 .cse1 .cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse3 .cse5 .cse6) (and .cse1 .cse2 (<= ~waterLevel~0Int 2) .cse3 (<= 2 ~waterLevel~0Int)))) [2022-01-10 12:28:12,786 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-01-10 12:28:12,786 INFO L858 garLoopResultBuilder]: For program point L261-6(lines 261 265) no Hoare annotation was computed. [2022-01-10 12:28:12,786 INFO L858 garLoopResultBuilder]: For program point L434-5(lines 434 440) no Hoare annotation was computed. [2022-01-10 12:28:12,787 INFO L854 garLoopResultBuilder]: At program point L106-11(lines 102 108) the Hoare annotation is: false [2022-01-10 12:28:12,787 INFO L858 garLoopResultBuilder]: For program point L847-4(lines 847 864) no Hoare annotation was computed. [2022-01-10 12:28:12,787 INFO L858 garLoopResultBuilder]: For program point L434(lines 434 440) no Hoare annotation was computed. [2022-01-10 12:28:12,787 INFO L854 garLoopResultBuilder]: At program point L106-1(lines 102 108) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse5 (<= ~waterLevel~0Int 1)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse3 (<= 1 ~systemActive~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse7 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6 .cse7) (and .cse0 .cse5 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse6 .cse7))) [2022-01-10 12:28:12,787 INFO L858 garLoopResultBuilder]: For program point L118-3(lines 118 126) no Hoare annotation was computed. [2022-01-10 12:28:12,787 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-01-10 12:28:12,787 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: false [2022-01-10 12:28:12,787 INFO L858 garLoopResultBuilder]: For program point L261-8(lines 261 265) no Hoare annotation was computed. [2022-01-10 12:28:12,787 INFO L854 garLoopResultBuilder]: At program point L439-5(lines 430 443) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,787 INFO L854 garLoopResultBuilder]: At program point L114-11(lines 110 134) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) [2022-01-10 12:28:12,787 INFO L854 garLoopResultBuilder]: At program point L193-5(lines 188 196) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,788 INFO L854 garLoopResultBuilder]: At program point L847-5(lines 839 867) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,788 INFO L854 garLoopResultBuilder]: At program point L439(lines 430 443) the Hoare annotation is: false [2022-01-10 12:28:12,788 INFO L854 garLoopResultBuilder]: At program point L114-1(lines 110 134) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse5 (<= ~waterLevel~0Int 1)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse3 (<= 1 ~systemActive~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse7 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6 .cse7) (and .cse0 .cse5 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse6 .cse7))) [2022-01-10 12:28:12,788 INFO L854 garLoopResultBuilder]: At program point L166-1(lines 161 168) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 2 ~waterLevel~0Int) (<= 1 ~pumpRunning~0Int)) [2022-01-10 12:28:12,788 INFO L854 garLoopResultBuilder]: At program point L106-2(lines 102 108) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 .cse5 (or .cse1 (<= 4294967297 ~waterLevel~0Int))) (and .cse0 .cse2 .cse3 (<= ~waterLevel~0Int 2) .cse4 .cse5 (<= 2 ~waterLevel~0Int)))) [2022-01-10 12:28:12,788 INFO L854 garLoopResultBuilder]: At program point L267-2(lines 252 270) the Hoare annotation is: false [2022-01-10 12:28:12,788 INFO L858 garLoopResultBuilder]: For program point L242-15(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,788 INFO L854 garLoopResultBuilder]: At program point L140-5(lines 136 160) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,788 INFO L858 garLoopResultBuilder]: For program point L851-4(lines 851 861) no Hoare annotation was computed. [2022-01-10 12:28:12,788 INFO L854 garLoopResultBuilder]: At program point L99-2(lines 75 101) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:12,788 INFO L858 garLoopResultBuilder]: For program point L242(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,788 INFO L858 garLoopResultBuilder]: For program point L144-6(lines 144 152) no Hoare annotation was computed. [2022-01-10 12:28:12,788 INFO L858 garLoopResultBuilder]: For program point L242-17(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,788 INFO L858 garLoopResultBuilder]: For program point L852-6(lines 852 858) no Hoare annotation was computed. [2022-01-10 12:28:12,788 INFO L858 garLoopResultBuilder]: For program point L242-2(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,788 INFO L854 garLoopResultBuilder]: At program point L174-2(lines 169 176) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:12,788 INFO L858 garLoopResultBuilder]: For program point L114-8(lines 114 131) no Hoare annotation was computed. [2022-01-10 12:28:12,788 INFO L854 garLoopResultBuilder]: At program point L248-5(lines 233 251) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~2#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0)) [2022-01-10 12:28:12,788 INFO L858 garLoopResultBuilder]: For program point L54-2(line 54) no Hoare annotation was computed. [2022-01-10 12:28:12,788 INFO L854 garLoopResultBuilder]: At program point L248(lines 233 251) the Hoare annotation is: false [2022-01-10 12:28:12,789 INFO L858 garLoopResultBuilder]: For program point L434-4(lines 434 440) no Hoare annotation was computed. [2022-01-10 12:28:12,789 INFO L854 garLoopResultBuilder]: At program point L106-9(lines 102 108) the Hoare annotation is: false [2022-01-10 12:28:12,789 INFO L858 garLoopResultBuilder]: For program point L118-15(lines 118 126) no Hoare annotation was computed. [2022-01-10 12:28:12,789 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-01-10 12:28:12,789 INFO L854 garLoopResultBuilder]: At program point L55-2(lines 50 57) the Hoare annotation is: false [2022-01-10 12:28:12,789 INFO L858 garLoopResultBuilder]: For program point L118(lines 118 126) no Hoare annotation was computed. [2022-01-10 12:28:12,789 INFO L854 garLoopResultBuilder]: At program point L439-4(lines 430 443) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:12,789 INFO L854 garLoopResultBuilder]: At program point L114-9(lines 110 134) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1)) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:12,789 INFO L854 garLoopResultBuilder]: At program point L166-5(lines 161 168) the Hoare annotation is: false [2022-01-10 12:28:12,789 INFO L854 garLoopResultBuilder]: At program point L106-10(lines 102 108) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) [2022-01-10 12:28:12,789 INFO L854 garLoopResultBuilder]: At program point L166(lines 161 168) the Hoare annotation is: false [2022-01-10 12:28:12,789 INFO L854 garLoopResultBuilder]: At program point L106(lines 102 108) the Hoare annotation is: false [2022-01-10 12:28:12,790 INFO L858 garLoopResultBuilder]: For program point L242-12(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,790 INFO L858 garLoopResultBuilder]: For program point L242-14(lines 242 246) no Hoare annotation was computed. [2022-01-10 12:28:12,790 INFO L854 garLoopResultBuilder]: At program point L248-4(lines 233 251) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~2#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:12,790 INFO L858 garLoopResultBuilder]: For program point L118-12(lines 118 126) no Hoare annotation was computed. [2022-01-10 12:28:12,790 INFO L854 garLoopResultBuilder]: At program point L166-4(lines 161 168) the Hoare annotation is: false [2022-01-10 12:28:12,790 INFO L854 garLoopResultBuilder]: At program point L106-8(lines 102 108) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1)) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:12,792 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:12,793 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 12:28:12,885 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:28:12 BasicIcfg [2022-01-10 12:28:12,885 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 12:28:12,885 INFO L158 Benchmark]: Toolchain (without parser) took 14556.84ms. Allocated memory was 177.2MB in the beginning and 714.1MB in the end (delta: 536.9MB). Free memory was 125.9MB in the beginning and 621.6MB in the end (delta: -495.7MB). Peak memory consumption was 410.6MB. Max. memory is 8.0GB. [2022-01-10 12:28:12,886 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 177.2MB. Free memory was 143.1MB in the beginning and 143.0MB in the end (delta: 143.4kB). There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 12:28:12,886 INFO L158 Benchmark]: CACSL2BoogieTranslator took 442.95ms. Allocated memory is still 177.2MB. Free memory was 125.8MB in the beginning and 137.8MB in the end (delta: -12.1MB). Peak memory consumption was 12.6MB. Max. memory is 8.0GB. [2022-01-10 12:28:12,886 INFO L158 Benchmark]: Boogie Procedure Inliner took 44.95ms. Allocated memory is still 177.2MB. Free memory was 137.8MB in the beginning and 134.1MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2022-01-10 12:28:12,886 INFO L158 Benchmark]: Boogie Preprocessor took 31.15ms. Allocated memory is still 177.2MB. Free memory was 134.1MB in the beginning and 132.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 12:28:12,886 INFO L158 Benchmark]: RCFGBuilder took 674.74ms. Allocated memory is still 177.2MB. Free memory was 131.5MB in the beginning and 107.4MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. [2022-01-10 12:28:12,887 INFO L158 Benchmark]: IcfgTransformer took 119.20ms. Allocated memory is still 177.2MB. Free memory was 107.4MB in the beginning and 98.0MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. [2022-01-10 12:28:12,887 INFO L158 Benchmark]: TraceAbstraction took 13238.85ms. Allocated memory was 177.2MB in the beginning and 714.1MB in the end (delta: 536.9MB). Free memory was 97.4MB in the beginning and 621.6MB in the end (delta: -524.2MB). Peak memory consumption was 381.8MB. Max. memory is 8.0GB. [2022-01-10 12:28:12,888 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 177.2MB. Free memory was 143.1MB in the beginning and 143.0MB in the end (delta: 143.4kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 442.95ms. Allocated memory is still 177.2MB. Free memory was 125.8MB in the beginning and 137.8MB in the end (delta: -12.1MB). Peak memory consumption was 12.6MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 44.95ms. Allocated memory is still 177.2MB. Free memory was 137.8MB in the beginning and 134.1MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 31.15ms. Allocated memory is still 177.2MB. Free memory was 134.1MB in the beginning and 132.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 674.74ms. Allocated memory is still 177.2MB. Free memory was 131.5MB in the beginning and 107.4MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. * IcfgTransformer took 119.20ms. Allocated memory is still 177.2MB. Free memory was 107.4MB in the beginning and 98.0MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. * TraceAbstraction took 13238.85ms. Allocated memory was 177.2MB in the beginning and 714.1MB in the end (delta: 536.9MB). Free memory was 97.4MB in the beginning and 621.6MB in the end (delta: -524.2MB). Peak memory consumption was 381.8MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 176 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 13.1s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4534 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4534 mSDsluCounter, 7652 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4948 mSDsCounter, 218 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 724 IncrementalHoareTripleChecker+Invalid, 942 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 218 mSolverCounterUnsat, 2704 mSDtfsCounter, 724 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 497 GetRequests, 432 SyntacticMatches, 1 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 105 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=539occurred in iteration=8, InterpolantAutomatonStates: 72, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 1488 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 87 LocationsWithAnnotation, 87 PreInvPairs, 431 NumberOfFragments, 3476 HoareAnnotationTreeSize, 87 FomulaSimplifications, 21444 FormulaSimplificationTreeSizeReduction, 3.4s HoareSimplificationTime, 87 FomulaSimplificationsInter, 333536 FormulaSimplificationTreeSizeReductionInter, 5.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 852 NumberOfCodeBlocks, 852 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1041 ConstructedInterpolants, 0 QuantifiedInterpolants, 2550 SizeOfPredicates, 9 NumberOfNonLiveVariables, 1522 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 585/603 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((((((((~bvult64(1bv32, tmp) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv1, ~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32])) && 0bv32 == pumpRunning - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((((((~bvult64(1bv32, tmp) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 365]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && waterLevel == tmp) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((((((((~bvult64(1bv32, tmp) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp) - InvariantResult [Line: 377]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: ((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv1, ~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32])) && 0bv32 == pumpRunning - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv1, ~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32])) && 0bv32 == pumpRunning - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: ((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && waterLevel == \result) && waterLevel == tmp) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (((((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 75]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: ((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 75]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 283]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32)) || ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && 0bv32 == pumpRunning)) || (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (((((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 75]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && waterLevel == \result)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((((((~bvult64(1bv32, tmp) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 821]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv1, ~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32])) && 0bv32 == pumpRunning - InvariantResult [Line: 980]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv1, ~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32])) && 0bv32 == pumpRunning - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || ((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && 0bv32 == pumpRunning) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning RESULT: Ultimate proved your program to be correct! [2022-01-10 12:28:12,966 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...