/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec5_product52.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 12:27:58,769 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 12:27:58,771 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 12:27:58,829 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 12:27:58,830 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 12:27:58,831 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 12:27:58,832 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 12:27:58,834 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 12:27:58,848 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 12:27:58,849 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 12:27:58,850 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 12:27:58,851 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 12:27:58,851 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 12:27:58,852 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 12:27:58,854 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 12:27:58,854 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 12:27:58,855 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 12:27:58,858 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 12:27:58,861 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 12:27:58,863 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 12:27:58,864 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 12:27:58,866 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 12:27:58,866 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 12:27:58,867 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 12:27:58,869 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 12:27:58,871 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 12:27:58,871 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 12:27:58,872 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 12:27:58,872 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 12:27:58,873 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 12:27:58,873 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 12:27:58,874 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 12:27:58,874 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 12:27:58,874 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 12:27:58,875 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 12:27:58,876 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 12:27:58,880 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 12:27:58,880 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 12:27:58,880 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 12:27:58,881 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 12:27:58,881 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 12:27:58,888 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_BITWISE.epf [2022-01-10 12:27:58,918 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 12:27:58,919 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 12:27:58,920 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 12:27:58,920 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 12:27:58,921 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 12:27:58,921 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 12:27:58,921 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 12:27:58,921 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 12:27:58,922 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 12:27:58,922 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 12:27:58,922 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 12:27:58,923 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 12:27:58,923 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 12:27:58,923 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 12:27:58,923 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 12:27:58,923 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 12:27:58,923 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 12:27:58,923 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 12:27:58,923 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 12:27:58,923 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 12:27:58,924 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 12:27:58,925 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:27:58,925 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 12:27:58,925 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 12:27:58,925 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 12:27:58,925 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 12:27:58,925 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 12:27:58,925 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 12:27:58,926 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 12:27:58,926 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 12:27:58,926 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 12:27:58,926 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 12:27:58,927 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 12:27:58,927 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_BITWISE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 12:27:59,158 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 12:27:59,184 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 12:27:59,186 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 12:27:59,187 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 12:27:59,189 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 12:27:59,190 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec5_product52.cil.c [2022-01-10 12:27:59,260 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/19059c5d9/04cc99f162e04838a689fa1103642392/FLAG9bcb14014 [2022-01-10 12:27:59,799 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 12:27:59,800 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product52.cil.c [2022-01-10 12:27:59,817 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/19059c5d9/04cc99f162e04838a689fa1103642392/FLAG9bcb14014 [2022-01-10 12:28:00,242 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/19059c5d9/04cc99f162e04838a689fa1103642392 [2022-01-10 12:28:00,245 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 12:28:00,246 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 12:28:00,247 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 12:28:00,247 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 12:28:00,257 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 12:28:00,258 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:00,259 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3002a2af and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00, skipping insertion in model container [2022-01-10 12:28:00,259 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:00,265 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 12:28:00,309 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:28:00,647 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product52.cil.c[12672,12685] [2022-01-10 12:28:00,705 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:28:00,719 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 12:28:00,733 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 12:28:00,779 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product52.cil.c[12672,12685] [2022-01-10 12:28:00,804 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:28:00,808 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 12:28:00,851 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product52.cil.c[12672,12685] [2022-01-10 12:28:00,875 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 12:28:00,892 INFO L208 MainTranslator]: Completed translation [2022-01-10 12:28:00,892 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00 WrapperNode [2022-01-10 12:28:00,893 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 12:28:00,894 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 12:28:00,894 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 12:28:00,894 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 12:28:00,901 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:00,924 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:00,971 INFO L137 Inliner]: procedures = 61, calls = 160, calls flagged for inlining = 57, calls inlined = 87, statements flattened = 649 [2022-01-10 12:28:00,972 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 12:28:00,973 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 12:28:00,973 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 12:28:00,973 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 12:28:00,987 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:00,987 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:00,999 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:00,999 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:01,016 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:01,022 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:01,024 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:01,044 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 12:28:01,044 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 12:28:01,045 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 12:28:01,045 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 12:28:01,046 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00" (1/1) ... [2022-01-10 12:28:01,053 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 12:28:01,064 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:28:01,076 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 12:28:01,085 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 12:28:01,117 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 12:28:01,117 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 12:28:01,117 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 12:28:01,118 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 12:28:01,210 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 12:28:01,211 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 12:28:01,621 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 12:28:01,628 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 12:28:01,629 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 12:28:01,631 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:28:01 BoogieIcfgContainer [2022-01-10 12:28:01,631 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 12:28:01,632 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 12:28:01,632 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 12:28:01,633 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 12:28:01,635 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:28:01" (1/1) ... [2022-01-10 12:28:01,748 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:28:01 BasicIcfg [2022-01-10 12:28:01,748 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 12:28:01,749 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 12:28:01,750 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 12:28:01,752 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 12:28:01,753 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 12:28:00" (1/4) ... [2022-01-10 12:28:01,753 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4cc414a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:28:01, skipping insertion in model container [2022-01-10 12:28:01,753 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 12:28:00" (2/4) ... [2022-01-10 12:28:01,754 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4cc414a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 12:28:01, skipping insertion in model container [2022-01-10 12:28:01,754 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 12:28:01" (3/4) ... [2022-01-10 12:28:01,754 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4cc414a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:28:01, skipping insertion in model container [2022-01-10 12:28:01,754 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 12:28:01" (4/4) ... [2022-01-10 12:28:01,755 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product52.cil.cTransformedIcfg [2022-01-10 12:28:01,759 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 12:28:01,760 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 12:28:01,798 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 12:28:01,807 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 12:28:01,807 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 12:28:01,827 INFO L276 IsEmpty]: Start isEmpty. Operand has 180 states, 176 states have (on average 1.3863636363636365) internal successors, (244), 179 states have internal predecessors, (244), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:01,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-01-10 12:28:01,834 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:01,834 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:01,835 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:01,840 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:01,840 INFO L85 PathProgramCache]: Analyzing trace with hash -201710145, now seen corresponding path program 1 times [2022-01-10 12:28:01,848 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:01,848 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1764257069] [2022-01-10 12:28:01,848 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:01,849 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:02,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:02,117 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:02,118 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:02,118 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1764257069] [2022-01-10 12:28:02,119 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1764257069] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:02,119 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:02,119 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:28:02,121 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2131545799] [2022-01-10 12:28:02,122 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:02,125 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 12:28:02,126 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:02,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 12:28:02,153 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:28:02,157 INFO L87 Difference]: Start difference. First operand has 180 states, 176 states have (on average 1.3863636363636365) internal successors, (244), 179 states have internal predecessors, (244), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,213 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:02,213 INFO L93 Difference]: Finished difference Result 349 states and 476 transitions. [2022-01-10 12:28:02,214 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 12:28:02,215 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-01-10 12:28:02,216 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:02,225 INFO L225 Difference]: With dead ends: 349 [2022-01-10 12:28:02,225 INFO L226 Difference]: Without dead ends: 170 [2022-01-10 12:28:02,228 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 12:28:02,231 INFO L933 BasicCegarLoop]: 234 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:02,232 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 234 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:02,248 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2022-01-10 12:28:02,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 170. [2022-01-10 12:28:02,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 170 states, 167 states have (on average 1.3532934131736527) internal successors, (226), 169 states have internal predecessors, (226), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,271 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 170 states to 170 states and 226 transitions. [2022-01-10 12:28:02,272 INFO L78 Accepts]: Start accepts. Automaton has 170 states and 226 transitions. Word has length 21 [2022-01-10 12:28:02,272 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:02,272 INFO L470 AbstractCegarLoop]: Abstraction has 170 states and 226 transitions. [2022-01-10 12:28:02,272 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,273 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 226 transitions. [2022-01-10 12:28:02,273 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-01-10 12:28:02,273 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:02,275 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:02,275 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 12:28:02,275 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:02,276 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:02,276 INFO L85 PathProgramCache]: Analyzing trace with hash -1293638411, now seen corresponding path program 1 times [2022-01-10 12:28:02,276 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:02,277 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2104966676] [2022-01-10 12:28:02,277 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:02,277 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:02,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:02,399 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:02,399 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:02,399 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2104966676] [2022-01-10 12:28:02,400 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2104966676] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:02,400 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:02,400 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:28:02,400 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2004950988] [2022-01-10 12:28:02,400 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:02,402 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:28:02,402 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:02,403 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:28:02,406 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:02,407 INFO L87 Difference]: Start difference. First operand 170 states and 226 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:02,464 INFO L93 Difference]: Finished difference Result 402 states and 537 transitions. [2022-01-10 12:28:02,465 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:28:02,465 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-01-10 12:28:02,465 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:02,466 INFO L225 Difference]: With dead ends: 402 [2022-01-10 12:28:02,467 INFO L226 Difference]: Without dead ends: 240 [2022-01-10 12:28:02,467 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:02,468 INFO L933 BasicCegarLoop]: 235 mSDtfsCounter, 206 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 206 SdHoareTripleChecker+Valid, 321 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:02,469 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [206 Valid, 321 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:02,472 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2022-01-10 12:28:02,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 231. [2022-01-10 12:28:02,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 228 states have (on average 1.355263157894737) internal successors, (309), 230 states have internal predecessors, (309), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 309 transitions. [2022-01-10 12:28:02,491 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 309 transitions. Word has length 22 [2022-01-10 12:28:02,492 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:02,492 INFO L470 AbstractCegarLoop]: Abstraction has 231 states and 309 transitions. [2022-01-10 12:28:02,493 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,495 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 309 transitions. [2022-01-10 12:28:02,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-01-10 12:28:02,501 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:02,501 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:02,501 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 12:28:02,501 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:02,502 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:02,502 INFO L85 PathProgramCache]: Analyzing trace with hash -1520684376, now seen corresponding path program 1 times [2022-01-10 12:28:02,502 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:02,502 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [268761994] [2022-01-10 12:28:02,503 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:02,503 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:02,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:02,576 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:02,576 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:02,576 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [268761994] [2022-01-10 12:28:02,577 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [268761994] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:02,577 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:02,577 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:28:02,577 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [689751927] [2022-01-10 12:28:02,578 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:02,578 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:28:02,578 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:02,579 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:28:02,579 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:02,579 INFO L87 Difference]: Start difference. First operand 231 states and 309 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:02,673 INFO L93 Difference]: Finished difference Result 520 states and 693 transitions. [2022-01-10 12:28:02,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:28:02,674 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-01-10 12:28:02,674 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:02,677 INFO L225 Difference]: With dead ends: 520 [2022-01-10 12:28:02,677 INFO L226 Difference]: Without dead ends: 297 [2022-01-10 12:28:02,683 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:02,686 INFO L933 BasicCegarLoop]: 231 mSDtfsCounter, 145 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 37 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 342 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 37 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:02,688 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [145 Valid, 342 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 37 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:28:02,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2022-01-10 12:28:02,719 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 291. [2022-01-10 12:28:02,720 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 291 states, 288 states have (on average 1.3055555555555556) internal successors, (376), 290 states have internal predecessors, (376), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 291 states to 291 states and 376 transitions. [2022-01-10 12:28:02,721 INFO L78 Accepts]: Start accepts. Automaton has 291 states and 376 transitions. Word has length 27 [2022-01-10 12:28:02,721 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:02,721 INFO L470 AbstractCegarLoop]: Abstraction has 291 states and 376 transitions. [2022-01-10 12:28:02,721 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:02,722 INFO L276 IsEmpty]: Start isEmpty. Operand 291 states and 376 transitions. [2022-01-10 12:28:02,725 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-01-10 12:28:02,725 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:02,725 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:02,725 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 12:28:02,726 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:02,727 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:02,727 INFO L85 PathProgramCache]: Analyzing trace with hash 53807338, now seen corresponding path program 1 times [2022-01-10 12:28:02,727 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:02,727 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [847284033] [2022-01-10 12:28:02,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:02,727 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:02,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:02,845 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:02,846 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:02,846 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [847284033] [2022-01-10 12:28:02,846 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [847284033] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:02,846 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:02,846 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:28:02,846 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2022163617] [2022-01-10 12:28:02,846 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:02,847 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:28:02,847 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:02,847 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:28:02,848 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:28:02,848 INFO L87 Difference]: Start difference. First operand 291 states and 376 transitions. Second operand has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,106 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:03,106 INFO L93 Difference]: Finished difference Result 975 states and 1239 transitions. [2022-01-10 12:28:03,106 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-10 12:28:03,107 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-01-10 12:28:03,107 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:03,109 INFO L225 Difference]: With dead ends: 975 [2022-01-10 12:28:03,109 INFO L226 Difference]: Without dead ends: 692 [2022-01-10 12:28:03,110 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 12:28:03,115 INFO L933 BasicCegarLoop]: 472 mSDtfsCounter, 559 mSDsluCounter, 845 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 559 SdHoareTripleChecker+Valid, 1317 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:03,116 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [559 Valid, 1317 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 12:28:03,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 692 states. [2022-01-10 12:28:03,141 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 692 to 285. [2022-01-10 12:28:03,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 282 states have (on average 1.2695035460992907) internal successors, (358), 284 states have internal predecessors, (358), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 358 transitions. [2022-01-10 12:28:03,163 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 358 transitions. Word has length 32 [2022-01-10 12:28:03,164 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:03,164 INFO L470 AbstractCegarLoop]: Abstraction has 285 states and 358 transitions. [2022-01-10 12:28:03,164 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,166 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 358 transitions. [2022-01-10 12:28:03,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 12:28:03,167 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:03,167 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:03,168 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 12:28:03,168 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:03,169 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:03,169 INFO L85 PathProgramCache]: Analyzing trace with hash 1193490346, now seen corresponding path program 1 times [2022-01-10 12:28:03,169 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:03,169 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [758244878] [2022-01-10 12:28:03,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:03,169 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:03,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:03,258 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:03,258 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:03,258 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [758244878] [2022-01-10 12:28:03,259 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [758244878] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:03,260 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:03,260 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:28:03,260 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [629748324] [2022-01-10 12:28:03,260 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:03,260 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:28:03,261 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:03,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:28:03,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:28:03,261 INFO L87 Difference]: Start difference. First operand 285 states and 358 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:03,405 INFO L93 Difference]: Finished difference Result 823 states and 1021 transitions. [2022-01-10 12:28:03,405 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:28:03,405 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 12:28:03,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:03,407 INFO L225 Difference]: With dead ends: 823 [2022-01-10 12:28:03,407 INFO L226 Difference]: Without dead ends: 546 [2022-01-10 12:28:03,408 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:28:03,409 INFO L933 BasicCegarLoop]: 263 mSDtfsCounter, 378 mSDsluCounter, 746 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 378 SdHoareTripleChecker+Valid, 1009 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:03,409 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [378 Valid, 1009 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:28:03,410 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 546 states. [2022-01-10 12:28:03,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 546 to 303. [2022-01-10 12:28:03,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 300 states have (on average 1.2533333333333334) internal successors, (376), 302 states have internal predecessors, (376), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 376 transitions. [2022-01-10 12:28:03,442 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 376 transitions. Word has length 33 [2022-01-10 12:28:03,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:03,443 INFO L470 AbstractCegarLoop]: Abstraction has 303 states and 376 transitions. [2022-01-10 12:28:03,444 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,444 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 376 transitions. [2022-01-10 12:28:03,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 12:28:03,446 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:03,446 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:03,446 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 12:28:03,446 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:03,447 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:03,447 INFO L85 PathProgramCache]: Analyzing trace with hash 687931721, now seen corresponding path program 1 times [2022-01-10 12:28:03,447 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:03,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1989432493] [2022-01-10 12:28:03,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:03,447 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:03,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:03,501 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:03,501 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:03,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1989432493] [2022-01-10 12:28:03,501 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1989432493] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:03,502 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:03,502 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 12:28:03,502 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1776890259] [2022-01-10 12:28:03,502 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:03,502 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 12:28:03,502 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:03,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 12:28:03,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 12:28:03,503 INFO L87 Difference]: Start difference. First operand 303 states and 376 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:03,618 INFO L93 Difference]: Finished difference Result 886 states and 1084 transitions. [2022-01-10 12:28:03,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 12:28:03,619 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 12:28:03,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:03,621 INFO L225 Difference]: With dead ends: 886 [2022-01-10 12:28:03,621 INFO L226 Difference]: Without dead ends: 591 [2022-01-10 12:28:03,622 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:28:03,623 INFO L933 BasicCegarLoop]: 269 mSDtfsCounter, 333 mSDsluCounter, 451 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 333 SdHoareTripleChecker+Valid, 720 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:03,624 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [333 Valid, 720 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:28:03,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 591 states. [2022-01-10 12:28:03,653 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 591 to 315. [2022-01-10 12:28:03,654 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 315 states, 312 states have (on average 1.2435897435897436) internal successors, (388), 314 states have internal predecessors, (388), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 315 states to 315 states and 388 transitions. [2022-01-10 12:28:03,655 INFO L78 Accepts]: Start accepts. Automaton has 315 states and 388 transitions. Word has length 33 [2022-01-10 12:28:03,656 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:03,656 INFO L470 AbstractCegarLoop]: Abstraction has 315 states and 388 transitions. [2022-01-10 12:28:03,656 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,657 INFO L276 IsEmpty]: Start isEmpty. Operand 315 states and 388 transitions. [2022-01-10 12:28:03,657 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 12:28:03,657 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:03,657 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:03,657 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 12:28:03,657 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:03,658 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:03,658 INFO L85 PathProgramCache]: Analyzing trace with hash 177397544, now seen corresponding path program 1 times [2022-01-10 12:28:03,658 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:03,658 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [734625160] [2022-01-10 12:28:03,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:03,658 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:03,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:03,737 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:03,737 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:03,738 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [734625160] [2022-01-10 12:28:03,738 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [734625160] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:03,738 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:03,738 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 12:28:03,738 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [242197996] [2022-01-10 12:28:03,739 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:03,739 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:28:03,739 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:03,739 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:28:03,739 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:03,740 INFO L87 Difference]: Start difference. First operand 315 states and 388 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 2 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:03,838 INFO L93 Difference]: Finished difference Result 761 states and 933 transitions. [2022-01-10 12:28:03,838 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:28:03,838 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 2 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 12:28:03,839 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:03,840 INFO L225 Difference]: With dead ends: 761 [2022-01-10 12:28:03,840 INFO L226 Difference]: Without dead ends: 378 [2022-01-10 12:28:03,841 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:03,842 INFO L933 BasicCegarLoop]: 213 mSDtfsCounter, 90 mSDsluCounter, 186 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 399 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:03,842 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [90 Valid, 399 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:03,843 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 378 states. [2022-01-10 12:28:03,878 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 378 to 378. [2022-01-10 12:28:03,879 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 378 states, 375 states have (on average 1.2373333333333334) internal successors, (464), 377 states have internal predecessors, (464), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 378 states to 378 states and 464 transitions. [2022-01-10 12:28:03,880 INFO L78 Accepts]: Start accepts. Automaton has 378 states and 464 transitions. Word has length 33 [2022-01-10 12:28:03,880 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:03,881 INFO L470 AbstractCegarLoop]: Abstraction has 378 states and 464 transitions. [2022-01-10 12:28:03,881 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 2 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:03,881 INFO L276 IsEmpty]: Start isEmpty. Operand 378 states and 464 transitions. [2022-01-10 12:28:03,881 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-01-10 12:28:03,881 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:03,882 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:03,882 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 12:28:03,882 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:03,883 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:03,883 INFO L85 PathProgramCache]: Analyzing trace with hash -838305847, now seen corresponding path program 1 times [2022-01-10 12:28:03,883 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:03,883 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [299364057] [2022-01-10 12:28:03,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:03,883 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:03,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:03,991 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:03,992 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:03,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [299364057] [2022-01-10 12:28:03,992 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [299364057] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:03,992 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:03,992 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:28:03,992 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1593846997] [2022-01-10 12:28:03,993 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:03,993 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 12:28:03,993 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:03,993 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 12:28:03,993 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:28:03,994 INFO L87 Difference]: Start difference. First operand 378 states and 464 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:04,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:04,371 INFO L93 Difference]: Finished difference Result 1826 states and 2252 transitions. [2022-01-10 12:28:04,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-01-10 12:28:04,371 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-01-10 12:28:04,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:04,376 INFO L225 Difference]: With dead ends: 1826 [2022-01-10 12:28:04,376 INFO L226 Difference]: Without dead ends: 1343 [2022-01-10 12:28:04,378 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2022-01-10 12:28:04,378 INFO L933 BasicCegarLoop]: 366 mSDtfsCounter, 1073 mSDsluCounter, 1039 mSDsCounter, 0 mSdLazyCounter, 156 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1073 SdHoareTripleChecker+Valid, 1405 SdHoareTripleChecker+Invalid, 221 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 156 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:04,378 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1073 Valid, 1405 Invalid, 221 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 156 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 12:28:04,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1343 states. [2022-01-10 12:28:04,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1343 to 676. [2022-01-10 12:28:04,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 676 states, 673 states have (on average 1.212481426448737) internal successors, (816), 675 states have internal predecessors, (816), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:04,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 676 states to 676 states and 816 transitions. [2022-01-10 12:28:04,448 INFO L78 Accepts]: Start accepts. Automaton has 676 states and 816 transitions. Word has length 42 [2022-01-10 12:28:04,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:04,448 INFO L470 AbstractCegarLoop]: Abstraction has 676 states and 816 transitions. [2022-01-10 12:28:04,448 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:04,449 INFO L276 IsEmpty]: Start isEmpty. Operand 676 states and 816 transitions. [2022-01-10 12:28:04,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-01-10 12:28:04,449 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:04,450 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:04,450 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 12:28:04,450 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:04,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:04,450 INFO L85 PathProgramCache]: Analyzing trace with hash -1530790405, now seen corresponding path program 1 times [2022-01-10 12:28:04,451 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:04,451 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1102786414] [2022-01-10 12:28:04,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:04,451 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:04,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:04,512 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:04,512 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:04,513 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1102786414] [2022-01-10 12:28:04,513 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1102786414] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:04,513 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:04,513 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 12:28:04,513 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [988812724] [2022-01-10 12:28:04,513 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:04,514 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 12:28:04,514 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:04,517 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 12:28:04,517 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:04,535 INFO L87 Difference]: Start difference. First operand 676 states and 816 transitions. Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:04,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:04,585 INFO L93 Difference]: Finished difference Result 676 states and 816 transitions. [2022-01-10 12:28:04,586 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 12:28:04,586 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2022-01-10 12:28:04,586 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:04,588 INFO L225 Difference]: With dead ends: 676 [2022-01-10 12:28:04,588 INFO L226 Difference]: Without dead ends: 343 [2022-01-10 12:28:04,588 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 12:28:04,589 INFO L933 BasicCegarLoop]: 93 mSDtfsCounter, 54 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 100 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:04,589 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [54 Valid, 100 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:04,590 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-01-10 12:28:04,628 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-01-10 12:28:04,629 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 342 states have (on average 1.2456140350877194) internal successors, (426), 342 states have internal predecessors, (426), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:04,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 426 transitions. [2022-01-10 12:28:04,630 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 426 transitions. Word has length 66 [2022-01-10 12:28:04,630 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:04,631 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 426 transitions. [2022-01-10 12:28:04,631 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:04,631 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 426 transitions. [2022-01-10 12:28:04,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-01-10 12:28:04,631 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:04,632 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:04,632 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 12:28:04,632 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:04,632 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:04,632 INFO L85 PathProgramCache]: Analyzing trace with hash 1368884187, now seen corresponding path program 1 times [2022-01-10 12:28:04,633 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:04,633 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1557674671] [2022-01-10 12:28:04,633 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:04,633 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:04,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:04,703 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 12:28:04,703 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:04,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1557674671] [2022-01-10 12:28:04,703 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1557674671] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:04,703 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:04,703 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 12:28:04,704 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1997709706] [2022-01-10 12:28:04,704 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:04,704 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 12:28:04,704 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:04,704 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 12:28:04,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-01-10 12:28:04,705 INFO L87 Difference]: Start difference. First operand 343 states and 426 transitions. Second operand has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 6 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:04,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:04,811 INFO L93 Difference]: Finished difference Result 787 states and 989 transitions. [2022-01-10 12:28:04,811 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:28:04,811 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 6 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 73 [2022-01-10 12:28:04,812 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:04,814 INFO L225 Difference]: With dead ends: 787 [2022-01-10 12:28:04,815 INFO L226 Difference]: Without dead ends: 452 [2022-01-10 12:28:04,815 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:28:04,816 INFO L933 BasicCegarLoop]: 167 mSDtfsCounter, 168 mSDsluCounter, 336 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 503 SdHoareTripleChecker+Invalid, 71 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:04,816 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [168 Valid, 503 Invalid, 71 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:04,817 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 452 states. [2022-01-10 12:28:04,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 452 to 328. [2022-01-10 12:28:04,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 328 states, 327 states have (on average 1.2201834862385321) internal successors, (399), 327 states have internal predecessors, (399), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:04,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 328 states to 328 states and 399 transitions. [2022-01-10 12:28:04,857 INFO L78 Accepts]: Start accepts. Automaton has 328 states and 399 transitions. Word has length 73 [2022-01-10 12:28:04,857 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:04,857 INFO L470 AbstractCegarLoop]: Abstraction has 328 states and 399 transitions. [2022-01-10 12:28:04,857 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 6 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:04,857 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 399 transitions. [2022-01-10 12:28:04,858 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2022-01-10 12:28:04,858 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:04,858 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:04,859 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-10 12:28:04,859 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:04,859 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:04,859 INFO L85 PathProgramCache]: Analyzing trace with hash 1533443571, now seen corresponding path program 1 times [2022-01-10 12:28:04,859 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:04,860 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2132857681] [2022-01-10 12:28:04,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:04,860 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:04,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:04,953 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 77 proven. 0 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-01-10 12:28:04,953 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:04,953 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2132857681] [2022-01-10 12:28:04,954 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2132857681] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 12:28:04,954 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 12:28:04,954 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 12:28:04,954 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288459076] [2022-01-10 12:28:04,954 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 12:28:04,955 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 12:28:04,955 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:04,956 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 12:28:04,956 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 12:28:04,956 INFO L87 Difference]: Start difference. First operand 328 states and 399 transitions. Second operand has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:05,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:05,112 INFO L93 Difference]: Finished difference Result 1246 states and 1521 transitions. [2022-01-10 12:28:05,113 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 12:28:05,113 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 132 [2022-01-10 12:28:05,113 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:05,116 INFO L225 Difference]: With dead ends: 1246 [2022-01-10 12:28:05,117 INFO L226 Difference]: Without dead ends: 926 [2022-01-10 12:28:05,117 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 12:28:05,118 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 324 mSDsluCounter, 379 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 324 SdHoareTripleChecker+Valid, 518 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:05,118 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [324 Valid, 518 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 12:28:05,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 926 states. [2022-01-10 12:28:05,164 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 926 to 334. [2022-01-10 12:28:05,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 334 states, 333 states have (on average 1.2162162162162162) internal successors, (405), 333 states have internal predecessors, (405), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:05,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 334 states to 334 states and 405 transitions. [2022-01-10 12:28:05,166 INFO L78 Accepts]: Start accepts. Automaton has 334 states and 405 transitions. Word has length 132 [2022-01-10 12:28:05,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:05,167 INFO L470 AbstractCegarLoop]: Abstraction has 334 states and 405 transitions. [2022-01-10 12:28:05,167 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:05,167 INFO L276 IsEmpty]: Start isEmpty. Operand 334 states and 405 transitions. [2022-01-10 12:28:05,168 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2022-01-10 12:28:05,168 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 12:28:05,168 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:05,168 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 12:28:05,168 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 12:28:05,169 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 12:28:05,169 INFO L85 PathProgramCache]: Analyzing trace with hash 1084746932, now seen corresponding path program 1 times [2022-01-10 12:28:05,169 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 12:28:05,169 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1694951641] [2022-01-10 12:28:05,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:05,169 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 12:28:05,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:05,343 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 113 proven. 2 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-01-10 12:28:05,343 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 12:28:05,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1694951641] [2022-01-10 12:28:05,344 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1694951641] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 12:28:05,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1204044849] [2022-01-10 12:28:05,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 12:28:05,344 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 12:28:05,344 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 12:28:05,347 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 12:28:05,383 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-10 12:28:05,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 12:28:05,550 INFO L263 TraceCheckSpWp]: Trace formula consists of 904 conjuncts, 15 conjunts are in the unsatisfiable core [2022-01-10 12:28:05,560 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 12:28:05,882 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 72 proven. 2 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2022-01-10 12:28:05,882 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 12:28:06,083 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 72 proven. 2 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2022-01-10 12:28:06,083 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1204044849] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 12:28:06,083 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 12:28:06,084 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 15 [2022-01-10 12:28:06,084 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [187960933] [2022-01-10 12:28:06,084 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 12:28:06,084 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-01-10 12:28:06,084 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 12:28:06,085 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-01-10 12:28:06,085 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-01-10 12:28:06,085 INFO L87 Difference]: Start difference. First operand 334 states and 405 transitions. Second operand has 15 states, 15 states have (on average 11.4) internal successors, (171), 15 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:06,648 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 12:28:06,648 INFO L93 Difference]: Finished difference Result 1174 states and 1432 transitions. [2022-01-10 12:28:06,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-10 12:28:06,649 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 11.4) internal successors, (171), 15 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 132 [2022-01-10 12:28:06,649 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 12:28:06,649 INFO L225 Difference]: With dead ends: 1174 [2022-01-10 12:28:06,649 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 12:28:06,651 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 291 GetRequests, 264 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 117 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=176, Invalid=636, Unknown=0, NotChecked=0, Total=812 [2022-01-10 12:28:06,651 INFO L933 BasicCegarLoop]: 257 mSDtfsCounter, 1283 mSDsluCounter, 1549 mSDsCounter, 0 mSdLazyCounter, 178 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1283 SdHoareTripleChecker+Valid, 1806 SdHoareTripleChecker+Invalid, 230 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 178 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 12:28:06,652 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1283 Valid, 1806 Invalid, 230 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 178 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 12:28:06,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 12:28:06,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 12:28:06,652 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:06,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 12:28:06,653 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 132 [2022-01-10 12:28:06,653 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 12:28:06,653 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 12:28:06,653 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 11.4) internal successors, (171), 15 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 12:28:06,653 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 12:28:06,653 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 12:28:06,656 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 12:28:06,656 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 12:28:06,656 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 12:28:06,681 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-01-10 12:28:06,880 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-10 12:28:06,883 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 12:28:22,389 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 12:28:22,389 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 12:28:22,390 INFO L854 garLoopResultBuilder]: At program point L1008(lines 1004 1010) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 12:28:22,390 INFO L854 garLoopResultBuilder]: At program point L1001(lines 997 1003) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 12:28:22,390 INFO L854 garLoopResultBuilder]: At program point L1016(lines 1011 1019) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 12:28:22,390 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2022-01-10 12:28:22,390 INFO L854 garLoopResultBuilder]: At program point L479(lines 475 481) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 12:28:22,390 INFO L858 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2022-01-10 12:28:22,390 INFO L854 garLoopResultBuilder]: At program point L539(lines 534 541) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 12:28:22,390 INFO L861 garLoopResultBuilder]: At program point L517(lines 498 520) the Hoare annotation is: true [2022-01-10 12:28:22,391 INFO L854 garLoopResultBuilder]: At program point L702-2(lines 702 751) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse7 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse6 (= ~pumpRunning~0Int 1)) (.cse8 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse8 .cse5) (and .cse9 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse3) (and .cse10 .cse1 .cse7 .cse3 .cse8 .cse5) (and .cse0 .cse7 .cse3 .cse6 .cse8 .cse5) (and .cse10 .cse1 .cse2 .cse3 .cse4 .cse5)))) [2022-01-10 12:28:22,391 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 12:28:22,391 INFO L854 garLoopResultBuilder]: At program point L752(lines 701 753) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:22,391 INFO L858 garLoopResultBuilder]: For program point L703(lines 702 751) no Hoare annotation was computed. [2022-01-10 12:28:22,391 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 12:28:22,391 INFO L854 garLoopResultBuilder]: At program point L884-2(lines 879 887) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,391 INFO L858 garLoopResultBuilder]: For program point L704(lines 704 708) no Hoare annotation was computed. [2022-01-10 12:28:22,392 INFO L854 garLoopResultBuilder]: At program point L549-1(lines 542 551) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,392 INFO L858 garLoopResultBuilder]: For program point L712(lines 712 718) no Hoare annotation was computed. [2022-01-10 12:28:22,392 INFO L858 garLoopResultBuilder]: For program point L773-3(lines 773 779) no Hoare annotation was computed. [2022-01-10 12:28:22,392 INFO L858 garLoopResultBuilder]: For program point L605(lines 605 609) no Hoare annotation was computed. [2022-01-10 12:28:22,392 INFO L858 garLoopResultBuilder]: For program point L712-2(lines 712 718) no Hoare annotation was computed. [2022-01-10 12:28:22,392 INFO L858 garLoopResultBuilder]: For program point L593-3(lines 593 597) no Hoare annotation was computed. [2022-01-10 12:28:22,392 INFO L858 garLoopResultBuilder]: For program point L773-5(lines 769 791) no Hoare annotation was computed. [2022-01-10 12:28:22,392 INFO L854 garLoopResultBuilder]: At program point L605-2(lines 601 612) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0Int 1)) (.cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse6 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse7 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1))) (.cse8 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse9 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse2 (<= ~waterLevel~0Int 2)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse8 .cse9 .cse2 .cse3 .cse4) (and .cse10 .cse11 .cse1 .cse2 .cse3 .cse5 .cse6) (and .cse10 .cse11 .cse7 .cse8 .cse9 .cse2 .cse3) (and .cse0 .cse11 .cse7 .cse8 .cse9 .cse2 .cse3) (and .cse0 .cse11 .cse2 .cse3 .cse5))) [2022-01-10 12:28:22,392 INFO L858 garLoopResultBuilder]: For program point L722(lines 722 728) no Hoare annotation was computed. [2022-01-10 12:28:22,392 INFO L854 garLoopResultBuilder]: At program point L593-5(lines 589 600) the Hoare annotation is: false [2022-01-10 12:28:22,393 INFO L858 garLoopResultBuilder]: For program point L831-2(lines 831 848) no Hoare annotation was computed. [2022-01-10 12:28:22,393 INFO L858 garLoopResultBuilder]: For program point L780-3(lines 780 786) no Hoare annotation was computed. [2022-01-10 12:28:22,393 INFO L858 garLoopResultBuilder]: For program point L617(lines 617 621) no Hoare annotation was computed. [2022-01-10 12:28:22,393 INFO L858 garLoopResultBuilder]: For program point L722-2(lines 722 728) no Hoare annotation was computed. [2022-01-10 12:28:22,393 INFO L854 garLoopResultBuilder]: At program point L685-1(lines 680 688) the Hoare annotation is: false [2022-01-10 12:28:22,393 INFO L858 garLoopResultBuilder]: For program point L805-6(lines 805 822) no Hoare annotation was computed. [2022-01-10 12:28:22,393 INFO L854 garLoopResultBuilder]: At program point L662-1(lines 657 665) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:22,393 INFO L854 garLoopResultBuilder]: At program point L617-2(lines 613 624) the Hoare annotation is: (let ((.cse14 (<= ~waterLevel~0Int 1))) (let ((.cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1))) (.cse9 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse8 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse2 (<= ~waterLevel~0Int 2)) (.cse5 (<= 2 ~waterLevel~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse12 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (= ~pumpRunning~0Int 1)) (.cse13 (or .cse14 (<= 4294967297 ~waterLevel~0Int))) (.cse6 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse8 .cse9 .cse2 .cse3 .cse4) (and .cse10 .cse11 .cse1 .cse2 .cse3 .cse5 .cse6) (and .cse10 .cse11 .cse7 .cse8 .cse9 .cse2 .cse3) (and .cse0 .cse11 .cse12 .cse3 .cse13 .cse6) (and .cse14 .cse0 .cse11 .cse8 .cse3) (and .cse10 .cse11 .cse12 .cse3 .cse13 .cse6) (and .cse0 .cse11 .cse2 .cse3 .cse5) (and .cse0 .cse12 .cse3 .cse4 .cse13 .cse6)))) [2022-01-10 12:28:22,393 INFO L858 garLoopResultBuilder]: For program point L732(lines 732 747) no Hoare annotation was computed. [2022-01-10 12:28:22,394 INFO L858 garLoopResultBuilder]: For program point L952-3(lines 952 956) no Hoare annotation was computed. [2022-01-10 12:28:22,394 INFO L858 garLoopResultBuilder]: For program point L670-3(lines 670 676) no Hoare annotation was computed. [2022-01-10 12:28:22,394 INFO L854 garLoopResultBuilder]: At program point L797-7(lines 793 799) the Hoare annotation is: false [2022-01-10 12:28:22,394 INFO L858 garLoopResultBuilder]: For program point L560-2(lines 560 577) no Hoare annotation was computed. [2022-01-10 12:28:22,394 INFO L854 garLoopResultBuilder]: At program point L982(lines 977 984) the Hoare annotation is: (let ((.cse10 (<= ~waterLevel~0Int 1))) (let ((.cse6 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse7 (= ~pumpRunning~0Int 0)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse4 (<= 2 ~waterLevel~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (= ~pumpRunning~0Int 1)) (.cse9 (or .cse10 (<= 4294967297 ~waterLevel~0Int))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse6 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse1 .cse2 .cse3) (and .cse0 .cse7 .cse8 .cse2 .cse9 .cse5) (and .cse10 .cse0 .cse7 .cse6 .cse2) (and .cse0 .cse7 .cse1 .cse2 .cse4) (and .cse0 .cse8 .cse2 .cse3 .cse9 .cse5)))) [2022-01-10 12:28:22,394 INFO L858 garLoopResultBuilder]: For program point L740(lines 740 746) no Hoare annotation was computed. [2022-01-10 12:28:22,394 INFO L858 garLoopResultBuilder]: For program point L952-5(lines 952 956) no Hoare annotation was computed. [2022-01-10 12:28:22,394 INFO L854 garLoopResultBuilder]: At program point L675-3(lines 666 679) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,394 INFO L854 garLoopResultBuilder]: At program point L805-7(lines 801 825) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,394 INFO L854 garLoopResultBuilder]: At program point L884-3(lines 879 887) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,395 INFO L854 garLoopResultBuilder]: At program point L560-3(lines 552 580) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:22,395 INFO L858 garLoopResultBuilder]: For program point L740-2(lines 732 747) no Hoare annotation was computed. [2022-01-10 12:28:22,395 INFO L858 garLoopResultBuilder]: For program point L966(lines 966 972) no Hoare annotation was computed. [2022-01-10 12:28:22,395 INFO L854 garLoopResultBuilder]: At program point L958-1(lines 943 961) the Hoare annotation is: false [2022-01-10 12:28:22,395 INFO L858 garLoopResultBuilder]: For program point L933-9(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,395 INFO L854 garLoopResultBuilder]: At program point L831-3(lines 827 851) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,395 INFO L858 garLoopResultBuilder]: For program point L564-2(lines 564 574) no Hoare annotation was computed. [2022-01-10 12:28:22,395 INFO L854 garLoopResultBuilder]: At program point L790-1(lines 766 792) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:22,395 INFO L854 garLoopResultBuilder]: At program point L884(lines 879 887) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse6 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse10 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse11 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse5 (<= 1 ~systemActive~0Int)) (.cse2 (<= ~waterLevel~0Int 2)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (= ~pumpRunning~0Int 1)) (.cse4 (<= 2 ~waterLevel~0Int)) (.cse8 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse12 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse6 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 .cse3 .cse7 .cse8) (and .cse9 .cse0 .cse1 .cse6 .cse3) (and .cse0 .cse1 .cse10 .cse3 .cse11 .cse12) (and .cse5 .cse10 .cse3 .cse7 .cse11 .cse8 .cse12) (and .cse5 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 .cse3 .cse7 .cse4 .cse8 .cse12)))) [2022-01-10 12:28:22,396 INFO L854 garLoopResultBuilder]: At program point L865(lines 860 867) the Hoare annotation is: (let ((.cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) .cse2) (and .cse0 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int)) .cse2) (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (<= ~waterLevel~0Int 2) .cse1))) [2022-01-10 12:28:22,396 INFO L858 garLoopResultBuilder]: For program point L966-2(lines 966 972) no Hoare annotation was computed. [2022-01-10 12:28:22,396 INFO L858 garLoopResultBuilder]: For program point L835-3(lines 835 843) no Hoare annotation was computed. [2022-01-10 12:28:22,396 INFO L858 garLoopResultBuilder]: For program point L933-11(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,396 INFO L858 garLoopResultBuilder]: For program point L565-3(lines 565 571) no Hoare annotation was computed. [2022-01-10 12:28:22,396 INFO L854 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:22,396 INFO L854 garLoopResultBuilder]: At program point L549(lines 542 551) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0Int 1))) (let ((.cse4 (<= 2 ~waterLevel~0Int)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse11 (or .cse5 (<= 4294967297 ~waterLevel~0Int))) (.cse13 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (.cse7 (<= 1 ~systemActive~0Int)) (.cse9 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse6 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse2 (<= ~waterLevel~0Int 2)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse10 (= ~pumpRunning~0Int 1)) (.cse12 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse6 .cse3) (and .cse7 .cse8 .cse9 .cse3 .cse10 .cse11 .cse12 .cse13) (and .cse7 .cse9 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 .cse3 .cse10 .cse4 .cse12 .cse13) (and .cse0 .cse1 .cse8 .cse3 .cse11 .cse13) (and .cse7 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse9 .cse6 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 .cse3 .cse10 .cse12)))) [2022-01-10 12:28:22,396 INFO L854 garLoopResultBuilder]: At program point L974(lines 962 976) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (or .cse0 (<= 4294967297 ~waterLevel~0Int)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (and .cse1 (<= ~waterLevel~0Int 2) .cse2 (<= 2 ~waterLevel~0Int)))) [2022-01-10 12:28:22,396 INFO L854 garLoopResultBuilder]: At program point L865-2(lines 860 867) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:22,396 INFO L858 garLoopResultBuilder]: For program point L805-4(lines 805 822) no Hoare annotation was computed. [2022-01-10 12:28:22,397 INFO L854 garLoopResultBuilder]: At program point L939-3(lines 924 942) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~8#1Int|)) [2022-01-10 12:28:22,397 INFO L858 garLoopResultBuilder]: For program point L526-1(line 526) no Hoare annotation was computed. [2022-01-10 12:28:22,397 INFO L861 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2022-01-10 12:28:22,397 INFO L858 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2022-01-10 12:28:22,397 INFO L858 garLoopResultBuilder]: For program point L773(lines 773 779) no Hoare annotation was computed. [2022-01-10 12:28:22,397 INFO L858 garLoopResultBuilder]: For program point L670-2(lines 670 676) no Hoare annotation was computed. [2022-01-10 12:28:22,397 INFO L854 garLoopResultBuilder]: At program point L797-5(lines 793 799) the Hoare annotation is: false [2022-01-10 12:28:22,397 INFO L858 garLoopResultBuilder]: For program point L809-9(lines 809 817) no Hoare annotation was computed. [2022-01-10 12:28:22,397 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-10 12:28:22,397 INFO L854 garLoopResultBuilder]: At program point L527-1(lines 522 529) the Hoare annotation is: false [2022-01-10 12:28:22,397 INFO L861 garLoopResultBuilder]: At program point L757(lines 692 759) the Hoare annotation is: true [2022-01-10 12:28:22,398 INFO L858 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2022-01-10 12:28:22,398 INFO L858 garLoopResultBuilder]: For program point L593(lines 593 597) no Hoare annotation was computed. [2022-01-10 12:28:22,398 INFO L858 garLoopResultBuilder]: For program point L773-2(lines 769 791) no Hoare annotation was computed. [2022-01-10 12:28:22,398 INFO L854 garLoopResultBuilder]: At program point L675-2(lines 666 679) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:22,398 INFO L854 garLoopResultBuilder]: At program point L805-5(lines 801 825) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:22,398 INFO L854 garLoopResultBuilder]: At program point L857-3(lines 852 859) the Hoare annotation is: false [2022-01-10 12:28:22,398 INFO L854 garLoopResultBuilder]: At program point L797-6(lines 793 799) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,398 INFO L861 garLoopResultBuilder]: At program point L492(lines 484 494) the Hoare annotation is: true [2022-01-10 12:28:22,398 INFO L858 garLoopResultBuilder]: For program point L432-1(lines 432 436) no Hoare annotation was computed. [2022-01-10 12:28:22,398 INFO L854 garLoopResultBuilder]: At program point L593-2(lines 589 600) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (= ~pumpRunning~0Int 1)) (.cse5 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 .cse3 (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5) (and .cse4 .cse0 .cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 .cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 1 ~waterLevel~0Int) .cse5))) [2022-01-10 12:28:22,399 INFO L858 garLoopResultBuilder]: For program point L831(lines 831 848) no Hoare annotation was computed. [2022-01-10 12:28:22,399 INFO L858 garLoopResultBuilder]: For program point L780-1(lines 780 786) no Hoare annotation was computed. [2022-01-10 12:28:22,399 INFO L858 garLoopResultBuilder]: For program point L933-6(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,399 INFO L854 garLoopResultBuilder]: At program point L884-4(lines 879 887) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,399 INFO L854 garLoopResultBuilder]: At program point L685(lines 680 688) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (= ~pumpRunning~0Int 1)) (.cse5 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 .cse3 (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5) (and .cse4 .cse0 .cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 .cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 1 ~waterLevel~0Int) .cse5))) [2022-01-10 12:28:22,399 INFO L858 garLoopResultBuilder]: For program point L805-2(lines 805 822) no Hoare annotation was computed. [2022-01-10 12:28:22,399 INFO L854 garLoopResultBuilder]: At program point L662(lines 657 665) the Hoare annotation is: (let ((.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 1)) (.cse6 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse5 (= ~pumpRunning~0Int 0)) (.cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (<= ~waterLevel~0Int 2)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse1 .cse3 .cse6) (and .cse0 .cse5 .cse2 .cse7 .cse3 (<= 2 ~waterLevel~0Int)) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 1)) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 0) (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int) .cse3 .cse4 .cse6 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (and .cse8 .cse5 .cse1 .cse3 .cse6) (and .cse8 .cse5 .cse1 .cse7 .cse3))) [2022-01-10 12:28:22,399 INFO L858 garLoopResultBuilder]: For program point L933-8(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,400 INFO L854 garLoopResultBuilder]: At program point L549-2(lines 542 551) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,400 INFO L858 garLoopResultBuilder]: For program point L952(lines 952 956) no Hoare annotation was computed. [2022-01-10 12:28:22,400 INFO L858 garLoopResultBuilder]: For program point L670-1(lines 670 676) no Hoare annotation was computed. [2022-01-10 12:28:22,400 INFO L854 garLoopResultBuilder]: At program point L797-3(lines 793 799) the Hoare annotation is: false [2022-01-10 12:28:22,400 INFO L858 garLoopResultBuilder]: For program point L560(lines 560 577) no Hoare annotation was computed. [2022-01-10 12:28:22,400 INFO L854 garLoopResultBuilder]: At program point L939-2(lines 924 942) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~8#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:22,400 INFO L858 garLoopResultBuilder]: For program point L773-6(lines 773 779) no Hoare annotation was computed. [2022-01-10 12:28:22,400 INFO L858 garLoopResultBuilder]: For program point L952-2(lines 952 956) no Hoare annotation was computed. [2022-01-10 12:28:22,400 INFO L854 garLoopResultBuilder]: At program point L675-1(lines 666 679) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|)) (.cse4 (<= ~waterLevel~0Int 1)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 (or .cse4 (<= 4294967297 ~waterLevel~0Int)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (and .cse0 .cse4 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0Int)) (and .cse1 .cse2 (<= ~waterLevel~0Int 2) .cse3 (<= 2 ~waterLevel~0Int)))) [2022-01-10 12:28:22,400 INFO L854 garLoopResultBuilder]: At program point L805-3(lines 801 825) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0Int 2)) (.cse3 (<= 2 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0)) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (<= ~waterLevel~0Int 1))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0Int 1) .cse3) (and .cse4 .cse5 .cse0 .cse6 .cse1 .cse2 .cse3) (and .cse4 .cse7 .cse5 .cse0 .cse6 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse4 .cse5 .cse0 .cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (or .cse7 (<= 4294967297 ~waterLevel~0Int)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)))) [2022-01-10 12:28:22,401 INFO L854 garLoopResultBuilder]: At program point L884-1(lines 879 887) the Hoare annotation is: (let ((.cse0 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse2 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 1)) (<= 1 ~systemActive~0Int) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 0) (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int) .cse1 (= ~pumpRunning~0Int 1) .cse2 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) .cse3) (and (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3))) [2022-01-10 12:28:22,401 INFO L854 garLoopResultBuilder]: At program point L560-1(lines 552 580) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse7 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse6 (= ~pumpRunning~0Int 1)) (.cse8 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse8 .cse5) (and .cse9 .cse1 .cse7 .cse3 .cse8 .cse5) (and .cse0 .cse7 .cse3 .cse6 .cse8 .cse5) (and .cse9 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-01-10 12:28:22,401 INFO L858 garLoopResultBuilder]: For program point L809-6(lines 809 817) no Hoare annotation was computed. [2022-01-10 12:28:22,401 INFO L858 garLoopResultBuilder]: For program point L593-6(lines 593 597) no Hoare annotation was computed. [2022-01-10 12:28:22,401 INFO L858 garLoopResultBuilder]: For program point L773-8(lines 769 791) no Hoare annotation was computed. [2022-01-10 12:28:22,401 INFO L854 garLoopResultBuilder]: At program point L958(lines 943 961) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (= ~pumpRunning~0Int 1)) (.cse5 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 .cse3 (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5) (and .cse4 .cse0 .cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 .cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 1 ~waterLevel~0Int) .cse5))) [2022-01-10 12:28:22,401 INFO L858 garLoopResultBuilder]: For program point L933-3(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,401 INFO L854 garLoopResultBuilder]: At program point L831-1(lines 827 851) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0Int 1))) (let ((.cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1))) (.cse5 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse8 (or .cse11 (<= 4294967297 ~waterLevel~0Int))) (.cse10 (= ~pumpRunning~0Int 0)) (.cse12 (<= ~waterLevel~0Int 2)) (.cse13 (<= 2 ~waterLevel~0Int)) (.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 1))) (.cse1 (<= 1 ~systemActive~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 0)) (.cse4 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (= ~pumpRunning~0Int 1)) (.cse9 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse1 .cse10 .cse2 .cse5 .cse6 .cse8) (and .cse11 .cse1 .cse10 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse6) (and .cse1 .cse12 .cse6 .cse7 .cse13) (and .cse1 .cse10 .cse12 .cse6 .cse13) (and .cse11 .cse0 .cse1 .cse3 .cse4 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse6 .cse7 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 1 ~waterLevel~0Int) .cse9)))) [2022-01-10 12:28:22,401 INFO L858 garLoopResultBuilder]: For program point L564(lines 564 574) no Hoare annotation was computed. [2022-01-10 12:28:22,402 INFO L854 garLoopResultBuilder]: At program point L790(lines 766 792) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse7 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse6 (= ~pumpRunning~0Int 1)) (.cse8 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse6 .cse4 .cse5) (and .cse0 .cse1 .cse7 .cse3 .cse8 .cse5) (and .cse9 .cse1 .cse7 .cse3 .cse8 .cse5) (and .cse0 .cse7 .cse3 .cse6 .cse8 .cse5) (and .cse9 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-01-10 12:28:22,402 INFO L854 garLoopResultBuilder]: At program point L857-2(lines 852 859) the Hoare annotation is: false [2022-01-10 12:28:22,402 INFO L854 garLoopResultBuilder]: At program point L797-4(lines 793 799) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:22,402 INFO L854 garLoopResultBuilder]: At program point L593-8(lines 589 600) the Hoare annotation is: false [2022-01-10 12:28:22,402 INFO L858 garLoopResultBuilder]: For program point L831-4(lines 831 848) no Hoare annotation was computed. [2022-01-10 12:28:22,402 INFO L858 garLoopResultBuilder]: For program point L780-5(lines 780 786) no Hoare annotation was computed. [2022-01-10 12:28:22,402 INFO L858 garLoopResultBuilder]: For program point L835(lines 835 843) no Hoare annotation was computed. [2022-01-10 12:28:22,402 INFO L858 garLoopResultBuilder]: For program point L933-5(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,402 INFO L858 garLoopResultBuilder]: For program point L565(lines 565 571) no Hoare annotation was computed. [2022-01-10 12:28:22,402 INFO L854 garLoopResultBuilder]: At program point L685-2(lines 680 688) the Hoare annotation is: false [2022-01-10 12:28:22,403 INFO L858 garLoopResultBuilder]: For program point L805-10(lines 805 822) no Hoare annotation was computed. [2022-01-10 12:28:22,403 INFO L854 garLoopResultBuilder]: At program point L662-2(lines 657 665) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:22,403 INFO L854 garLoopResultBuilder]: At program point L865-1(lines 860 867) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int))) (or (and .cse0 .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) .cse4))) [2022-01-10 12:28:22,403 INFO L858 garLoopResultBuilder]: For program point L805(lines 805 822) no Hoare annotation was computed. [2022-01-10 12:28:22,403 INFO L854 garLoopResultBuilder]: At program point L939-1(lines 924 942) the Hoare annotation is: (let ((.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0)) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~8#1Int|)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (<= 1 ~waterLevel~0Int)) (and .cse1 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 .cse5 .cse6 (or .cse0 (<= 4294967297 ~waterLevel~0Int)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (and .cse2 .cse3 (<= ~waterLevel~0Int 2) .cse5 (<= 2 ~waterLevel~0Int)))) [2022-01-10 12:28:22,403 INFO L858 garLoopResultBuilder]: For program point L526(line 526) no Hoare annotation was computed. [2022-01-10 12:28:22,403 INFO L858 garLoopResultBuilder]: For program point L952-6(lines 952 956) no Hoare annotation was computed. [2022-01-10 12:28:22,403 INFO L858 garLoopResultBuilder]: For program point L670-5(lines 670 676) no Hoare annotation was computed. [2022-01-10 12:28:22,403 INFO L854 garLoopResultBuilder]: At program point L797-11(lines 793 799) the Hoare annotation is: false [2022-01-10 12:28:22,403 INFO L858 garLoopResultBuilder]: For program point L560-4(lines 560 577) no Hoare annotation was computed. [2022-01-10 12:28:22,404 INFO L858 garLoopResultBuilder]: For program point L670(lines 670 676) no Hoare annotation was computed. [2022-01-10 12:28:22,404 INFO L854 garLoopResultBuilder]: At program point L797-1(lines 793 799) the Hoare annotation is: (let ((.cse6 (<= ~waterLevel~0Int 1)) (.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 1))) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 0)) (.cse3 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= ~pumpRunning~0Int 1)) (.cse7 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|))) (or (and .cse0 .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse2 .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 .cse5 (or .cse6 (<= 4294967297 ~waterLevel~0Int)) .cse7) (and .cse6 .cse0 .cse1 .cse2 .cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 .cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 1 ~waterLevel~0Int) .cse7))) [2022-01-10 12:28:22,404 INFO L858 garLoopResultBuilder]: For program point L809-3(lines 809 817) no Hoare annotation was computed. [2022-01-10 12:28:22,404 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-10 12:28:22,404 INFO L854 garLoopResultBuilder]: At program point L527(lines 522 529) the Hoare annotation is: false [2022-01-10 12:28:22,404 INFO L858 garLoopResultBuilder]: For program point L952-8(lines 952 956) no Hoare annotation was computed. [2022-01-10 12:28:22,404 INFO L854 garLoopResultBuilder]: At program point L675-5(lines 666 679) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,404 INFO L854 garLoopResultBuilder]: At program point L805-11(lines 801 825) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,404 INFO L854 garLoopResultBuilder]: At program point L884-5(lines 879 887) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,404 INFO L854 garLoopResultBuilder]: At program point L560-5(lines 552 580) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:22,405 INFO L854 garLoopResultBuilder]: At program point L675(lines 666 679) the Hoare annotation is: false [2022-01-10 12:28:22,405 INFO L854 garLoopResultBuilder]: At program point L805-1(lines 801 825) the Hoare annotation is: (let ((.cse6 (<= ~waterLevel~0Int 1)) (.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 1))) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 0)) (.cse3 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= ~pumpRunning~0Int 1)) (.cse7 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|))) (or (and .cse0 .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse2 .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 .cse5 (or .cse6 (<= 4294967297 ~waterLevel~0Int)) .cse7) (and .cse6 .cse0 .cse1 .cse2 .cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 .cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 1 ~waterLevel~0Int) .cse7))) [2022-01-10 12:28:22,405 INFO L854 garLoopResultBuilder]: At program point L857-1(lines 852 859) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (= ~pumpRunning~0Int 1) (<= 2 ~waterLevel~0Int)) [2022-01-10 12:28:22,405 INFO L854 garLoopResultBuilder]: At program point L797-2(lines 793 799) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1))) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= ~waterLevel~0Int 1))) (or (and .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0Int 2) .cse4 (<= 2 ~waterLevel~0Int)) (and .cse0 .cse5 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)))) [2022-01-10 12:28:22,405 INFO L854 garLoopResultBuilder]: At program point L958-2(lines 943 961) the Hoare annotation is: false [2022-01-10 12:28:22,405 INFO L858 garLoopResultBuilder]: For program point L933-15(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,405 INFO L854 garLoopResultBuilder]: At program point L831-5(lines 827 851) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,405 INFO L858 garLoopResultBuilder]: For program point L564-4(lines 564 574) no Hoare annotation was computed. [2022-01-10 12:28:22,405 INFO L854 garLoopResultBuilder]: At program point L790-2(lines 766 792) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 12:28:22,405 INFO L858 garLoopResultBuilder]: For program point L933(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,406 INFO L858 garLoopResultBuilder]: For program point L835-6(lines 835 843) no Hoare annotation was computed. [2022-01-10 12:28:22,406 INFO L858 garLoopResultBuilder]: For program point L933-17(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,406 INFO L858 garLoopResultBuilder]: For program point L565-6(lines 565 571) no Hoare annotation was computed. [2022-01-10 12:28:22,406 INFO L858 garLoopResultBuilder]: For program point L933-2(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,406 INFO L854 garLoopResultBuilder]: At program point L865-3(lines 860 867) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:22,406 INFO L858 garLoopResultBuilder]: For program point L805-8(lines 805 822) no Hoare annotation was computed. [2022-01-10 12:28:22,406 INFO L854 garLoopResultBuilder]: At program point L939-5(lines 924 942) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~8#1Int|)) [2022-01-10 12:28:22,406 INFO L858 garLoopResultBuilder]: For program point L526-2(line 526) no Hoare annotation was computed. [2022-01-10 12:28:22,406 INFO L854 garLoopResultBuilder]: At program point L939(lines 924 942) the Hoare annotation is: false [2022-01-10 12:28:22,406 INFO L858 garLoopResultBuilder]: For program point L670-4(lines 670 676) no Hoare annotation was computed. [2022-01-10 12:28:22,406 INFO L854 garLoopResultBuilder]: At program point L797-9(lines 793 799) the Hoare annotation is: false [2022-01-10 12:28:22,406 INFO L858 garLoopResultBuilder]: For program point L809-15(lines 809 817) no Hoare annotation was computed. [2022-01-10 12:28:22,407 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-10 12:28:22,407 INFO L854 garLoopResultBuilder]: At program point L527-2(lines 522 529) the Hoare annotation is: false [2022-01-10 12:28:22,407 INFO L858 garLoopResultBuilder]: For program point L809(lines 809 817) no Hoare annotation was computed. [2022-01-10 12:28:22,407 INFO L854 garLoopResultBuilder]: At program point L675-4(lines 666 679) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:22,407 INFO L854 garLoopResultBuilder]: At program point L805-9(lines 801 825) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:22,407 INFO L854 garLoopResultBuilder]: At program point L857-5(lines 852 859) the Hoare annotation is: false [2022-01-10 12:28:22,407 INFO L854 garLoopResultBuilder]: At program point L797-10(lines 793 799) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 12:28:22,407 INFO L854 garLoopResultBuilder]: At program point L857(lines 852 859) the Hoare annotation is: false [2022-01-10 12:28:22,407 INFO L854 garLoopResultBuilder]: At program point L797(lines 793 799) the Hoare annotation is: false [2022-01-10 12:28:22,407 INFO L858 garLoopResultBuilder]: For program point L933-12(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,408 INFO L858 garLoopResultBuilder]: For program point L933-14(lines 933 937) no Hoare annotation was computed. [2022-01-10 12:28:22,408 INFO L854 garLoopResultBuilder]: At program point L939-4(lines 924 942) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~8#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:22,408 INFO L858 garLoopResultBuilder]: For program point L809-12(lines 809 817) no Hoare annotation was computed. [2022-01-10 12:28:22,408 INFO L854 garLoopResultBuilder]: At program point L857-4(lines 852 859) the Hoare annotation is: false [2022-01-10 12:28:22,408 INFO L854 garLoopResultBuilder]: At program point L797-8(lines 793 799) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 12:28:22,411 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 12:28:22,412 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 12:28:22,579 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 12:28:22 BasicIcfg [2022-01-10 12:28:22,579 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 12:28:22,580 INFO L158 Benchmark]: Toolchain (without parser) took 22334.12ms. Allocated memory was 183.5MB in the beginning and 593.5MB in the end (delta: 410.0MB). Free memory was 124.4MB in the beginning and 225.7MB in the end (delta: -101.3MB). Peak memory consumption was 338.4MB. Max. memory is 8.0GB. [2022-01-10 12:28:22,580 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 183.5MB. Free memory is still 141.7MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 12:28:22,580 INFO L158 Benchmark]: CACSL2BoogieTranslator took 645.64ms. Allocated memory was 183.5MB in the beginning and 280.0MB in the end (delta: 96.5MB). Free memory was 124.2MB in the beginning and 235.8MB in the end (delta: -111.6MB). Peak memory consumption was 9.5MB. Max. memory is 8.0GB. [2022-01-10 12:28:22,581 INFO L158 Benchmark]: Boogie Procedure Inliner took 78.48ms. Allocated memory is still 280.0MB. Free memory was 235.8MB in the beginning and 232.1MB in the end (delta: 3.7MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 12:28:22,581 INFO L158 Benchmark]: Boogie Preprocessor took 71.16ms. Allocated memory is still 280.0MB. Free memory was 232.1MB in the beginning and 230.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 12:28:22,582 INFO L158 Benchmark]: RCFGBuilder took 586.56ms. Allocated memory is still 280.0MB. Free memory was 230.0MB in the beginning and 204.9MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 8.0GB. [2022-01-10 12:28:22,582 INFO L158 Benchmark]: IcfgTransformer took 116.64ms. Allocated memory is still 280.0MB. Free memory was 204.9MB in the beginning and 194.4MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. [2022-01-10 12:28:22,583 INFO L158 Benchmark]: TraceAbstraction took 20829.91ms. Allocated memory was 280.0MB in the beginning and 593.5MB in the end (delta: 313.5MB). Free memory was 193.9MB in the beginning and 225.7MB in the end (delta: -31.8MB). Peak memory consumption was 310.6MB. Max. memory is 8.0GB. [2022-01-10 12:28:22,584 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 183.5MB. Free memory is still 141.7MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 645.64ms. Allocated memory was 183.5MB in the beginning and 280.0MB in the end (delta: 96.5MB). Free memory was 124.2MB in the beginning and 235.8MB in the end (delta: -111.6MB). Peak memory consumption was 9.5MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 78.48ms. Allocated memory is still 280.0MB. Free memory was 235.8MB in the beginning and 232.1MB in the end (delta: 3.7MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 71.16ms. Allocated memory is still 280.0MB. Free memory was 232.1MB in the beginning and 230.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 586.56ms. Allocated memory is still 280.0MB. Free memory was 230.0MB in the beginning and 204.9MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 8.0GB. * IcfgTransformer took 116.64ms. Allocated memory is still 280.0MB. Free memory was 204.9MB in the beginning and 194.4MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. * TraceAbstraction took 20829.91ms. Allocated memory was 280.0MB in the beginning and 593.5MB in the end (delta: 313.5MB). Free memory was 193.9MB in the beginning and 225.7MB in the end (delta: -31.8MB). Peak memory consumption was 310.6MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 180 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 20.6s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 15.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4613 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4613 mSDsluCounter, 8674 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5735 mSDsCounter, 248 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 788 IncrementalHoareTripleChecker+Invalid, 1036 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 248 mSolverCounterUnsat, 2939 mSDtfsCounter, 788 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 353 GetRequests, 288 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 132 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=676occurred in iteration=8, InterpolantAutomatonStates: 73, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 2324 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 89 LocationsWithAnnotation, 89 PreInvPairs, 546 NumberOfFragments, 4088 HoareAnnotationTreeSize, 89 FomulaSimplifications, 121892 FormulaSimplificationTreeSizeReduction, 7.5s HoareSimplificationTime, 89 FomulaSimplificationsInter, 744122 FormulaSimplificationTreeSizeReductionInter, 8.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 778 NumberOfCodeBlocks, 778 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 896 ConstructedInterpolants, 0 QuantifiedInterpolants, 2393 SizeOfPredicates, 6 NumberOfNonLiveVariables, 904 ConjunctsInSsa, 15 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 559/565 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((((((((tmp == 2bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && 0bv32 == pumpRunning) || (((((tmp == 2bv32 && 1bv32 == pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive))) || (((((tmp == 2bv32 && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((1bv32 == pumpRunning && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) - InvariantResult [Line: 701]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((1bv32 == pumpRunning && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || ((((((1bv32 == pumpRunning && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || (((((1bv32 == pumpRunning && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: ((((((((~bvule32(tmp, 0bv32) && ~bvule32(tmp, 2bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 2bv32) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1011]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 601]: Loop Invariant Derived loop invariant: ((((((((((2bv32 == \result && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((((~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp))) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((1bv32 == pumpRunning && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || (((((((~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((1bv32 == pumpRunning && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, switchedOnBeforeTS) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && 0bv32 == pumpRunning) || (((((((tmp == 2bv32 && ~bvule32(1bv32, switchedOnBeforeTS)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning) - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: ((((((((((tmp == 2bv32 && 1bv32 == pumpRunning) && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) || (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 680]: Loop Invariant Derived loop invariant: (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) || ((((((((tmp == 2bv32 && 1bv32 == pumpRunning) && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: ((((((~bvule32(tmp, 2bv32) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && waterLevel == \result) && 0bv32 == pumpRunning) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 801]: Loop Invariant Derived loop invariant: ((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 2bv32) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: ((((((((~bvule32(tmp, 0bv32) && ~bvule32(tmp, 2bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 943]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: (((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) || ((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, \result)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result)) || ((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning) - InvariantResult [Line: 801]: Loop Invariant Derived loop invariant: ((((((((((tmp == 2bv32 && 1bv32 == pumpRunning) && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) || (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: ((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 1004]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: ((((((~bvule32(tmp, 2bv32) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: ((((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) || ((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 801]: Loop Invariant Derived loop invariant: ((((((((~bvule32(tmp, 0bv32) && ~bvule32(tmp, 2bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 997]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: (((((tmp == 2bv32 && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && 0bv32 == pumpRunning) || ((((((~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: (((((((((~bvule32(tmp___0, 0bv32) && ~bvule32(tmp, 2bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (((((((((tmp == 2bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && 0bv32 == pumpRunning) || (((((tmp == 2bv32 && 1bv32 == pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive))) || (((((tmp == 2bv32 && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((1bv32 == pumpRunning && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: ((((((((((((((tmp == 2bv32 && 1bv32 == pumpRunning) && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) || (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32)))) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || ((((1bv32 == pumpRunning && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 801]: Loop Invariant Derived loop invariant: (((((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) || ((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((1bv32 == pumpRunning && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) || ((((((((tmp == 2bv32 && 1bv32 == pumpRunning) && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 702]: Loop Invariant Derived loop invariant: ((((((((((tmp == 2bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && 0bv32 == pumpRunning) || (((((tmp == 2bv32 && 1bv32 == pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive))) || (((((tmp == 2bv32 && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((1bv32 == pumpRunning && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 801]: Loop Invariant Derived loop invariant: ((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 801]: Loop Invariant Derived loop invariant: ((((((((~bvule32(tmp, 0bv32) && ~bvule32(tmp, 2bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 680]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: ((((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((1bv32 == pumpRunning && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == \result) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) || ((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result)) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning) - InvariantResult [Line: 943]: Loop Invariant Derived loop invariant: (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) || ((((((((tmp == 2bv32 && 1bv32 == pumpRunning) && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 613]: Loop Invariant Derived loop invariant: (((((((((((((2bv32 == \result && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((((~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp))) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((1bv32 == pumpRunning && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || ((((((1bv32 == pumpRunning && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((1bv32 == pumpRunning && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 943]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: (((((((((~bvule32(tmp___0, 0bv32) && ~bvule32(tmp, 2bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 680]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 793]: Loop Invariant Derived loop invariant: ((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32) - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning RESULT: Ultimate proved your program to be correct! [2022-01-10 12:28:22,682 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...