/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec1_product59.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 18:13:47,189 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 18:13:47,190 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 18:13:47,230 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 18:13:47,231 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 18:13:47,232 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 18:13:47,233 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 18:13:47,235 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 18:13:47,255 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 18:13:47,258 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 18:13:47,259 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 18:13:47,260 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 18:13:47,260 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 18:13:47,261 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 18:13:47,262 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 18:13:47,262 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 18:13:47,263 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 18:13:47,264 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 18:13:47,265 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 18:13:47,266 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 18:13:47,267 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 18:13:47,278 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 18:13:47,280 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 18:13:47,281 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 18:13:47,290 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 18:13:47,291 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 18:13:47,291 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 18:13:47,292 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 18:13:47,292 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 18:13:47,293 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 18:13:47,293 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 18:13:47,293 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 18:13:47,294 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 18:13:47,295 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 18:13:47,295 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 18:13:47,296 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 18:13:47,296 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 18:13:47,296 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 18:13:47,296 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 18:13:47,297 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 18:13:47,298 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 18:13:47,307 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf [2022-01-10 18:13:47,329 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 18:13:47,329 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 18:13:47,329 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 18:13:47,330 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 18:13:47,331 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 18:13:47,331 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 18:13:47,331 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 18:13:47,331 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 18:13:47,331 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 18:13:47,331 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 18:13:47,331 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 18:13:47,331 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 18:13:47,332 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 18:13:47,332 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 18:13:47,332 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 18:13:47,332 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 18:13:47,332 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 18:13:47,332 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 18:13:47,332 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 18:13:47,332 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 18:13:47,333 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 18:13:47,333 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:13:47,333 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 18:13:47,333 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 18:13:47,333 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 18:13:47,333 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 18:13:47,333 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 18:13:47,333 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 18:13:47,334 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 18:13:47,334 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 18:13:47,334 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 18:13:47,334 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 18:13:47,335 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 18:13:47,336 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_LAZY WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 18:13:47,594 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 18:13:47,617 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 18:13:47,620 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 18:13:47,621 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 18:13:47,621 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 18:13:47,622 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec1_product59.cil.c [2022-01-10 18:13:47,679 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/513901c97/74f27ba2d9ee4c8d96ee7fbf5d3220ec/FLAG009b9579b [2022-01-10 18:13:48,155 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 18:13:48,156 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec1_product59.cil.c [2022-01-10 18:13:48,179 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/513901c97/74f27ba2d9ee4c8d96ee7fbf5d3220ec/FLAG009b9579b [2022-01-10 18:13:48,194 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/513901c97/74f27ba2d9ee4c8d96ee7fbf5d3220ec [2022-01-10 18:13:48,197 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 18:13:48,198 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 18:13:48,200 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 18:13:48,201 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 18:13:48,206 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 18:13:48,207 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,209 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@d7772f1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48, skipping insertion in model container [2022-01-10 18:13:48,209 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,215 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 18:13:48,262 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:13:48,516 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec1_product59.cil.c[3645,3658] [2022-01-10 18:13:48,654 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:13:48,667 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 18:13:48,676 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:13:48,706 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec1_product59.cil.c[3645,3658] [2022-01-10 18:13:48,738 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:13:48,745 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 18:13:48,774 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec1_product59.cil.c[3645,3658] [2022-01-10 18:13:48,813 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:13:48,828 INFO L208 MainTranslator]: Completed translation [2022-01-10 18:13:48,829 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48 WrapperNode [2022-01-10 18:13:48,829 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 18:13:48,830 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 18:13:48,830 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 18:13:48,830 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 18:13:48,836 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,860 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,916 INFO L137 Inliner]: procedures = 59, calls = 158, calls flagged for inlining = 55, calls inlined = 97, statements flattened = 732 [2022-01-10 18:13:48,917 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 18:13:48,917 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 18:13:48,917 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 18:13:48,917 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 18:13:48,927 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,927 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,943 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,943 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,957 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,963 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,970 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,974 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 18:13:48,975 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 18:13:48,975 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 18:13:48,975 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 18:13:48,976 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48" (1/1) ... [2022-01-10 18:13:48,984 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:13:48,993 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:13:49,004 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 18:13:49,010 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 18:13:49,036 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 18:13:49,036 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 18:13:49,036 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 18:13:49,037 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 18:13:49,131 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 18:13:49,132 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 18:13:49,623 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 18:13:49,633 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 18:13:49,633 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 18:13:49,636 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:13:49 BoogieIcfgContainer [2022-01-10 18:13:49,636 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 18:13:49,637 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 18:13:49,637 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 18:13:49,640 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 18:13:49,642 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:13:49" (1/1) ... [2022-01-10 18:13:49,792 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:13:49 BasicIcfg [2022-01-10 18:13:49,792 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 18:13:49,795 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 18:13:49,795 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 18:13:49,798 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 18:13:49,798 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 06:13:48" (1/4) ... [2022-01-10 18:13:49,799 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@144421c6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:13:49, skipping insertion in model container [2022-01-10 18:13:49,799 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:13:48" (2/4) ... [2022-01-10 18:13:49,799 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@144421c6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:13:49, skipping insertion in model container [2022-01-10 18:13:49,799 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:13:49" (3/4) ... [2022-01-10 18:13:49,800 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@144421c6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:13:49, skipping insertion in model container [2022-01-10 18:13:49,800 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:13:49" (4/4) ... [2022-01-10 18:13:49,800 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product59.cil.cTransformedIcfg [2022-01-10 18:13:49,805 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 18:13:49,805 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 18:13:49,852 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 18:13:49,860 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 18:13:49,860 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 18:13:49,878 INFO L276 IsEmpty]: Start isEmpty. Operand has 193 states, 189 states have (on average 1.3756613756613756) internal successors, (260), 192 states have internal predecessors, (260), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:49,884 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-01-10 18:13:49,884 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:13:49,885 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:13:49,885 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:13:49,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:13:49,891 INFO L85 PathProgramCache]: Analyzing trace with hash 1378478649, now seen corresponding path program 1 times [2022-01-10 18:13:49,900 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:13:49,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2139041528] [2022-01-10 18:13:49,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:49,901 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:13:50,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:50,119 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:13:50,119 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:13:50,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2139041528] [2022-01-10 18:13:50,120 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2139041528] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:13:50,120 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:13:50,120 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:13:50,121 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1624166760] [2022-01-10 18:13:50,122 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:13:50,125 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 18:13:50,125 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:13:50,147 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 18:13:50,148 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:13:50,150 INFO L87 Difference]: Start difference. First operand has 193 states, 189 states have (on average 1.3756613756613756) internal successors, (260), 192 states have internal predecessors, (260), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:50,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:13:50,198 INFO L93 Difference]: Finished difference Result 376 states and 509 transitions. [2022-01-10 18:13:50,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 18:13:50,202 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-01-10 18:13:50,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:13:50,210 INFO L225 Difference]: With dead ends: 376 [2022-01-10 18:13:50,211 INFO L226 Difference]: Without dead ends: 183 [2022-01-10 18:13:50,214 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:13:50,217 INFO L933 BasicCegarLoop]: 250 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 250 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:13:50,218 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 250 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:13:50,234 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2022-01-10 18:13:50,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 183. [2022-01-10 18:13:50,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 183 states, 180 states have (on average 1.3444444444444446) internal successors, (242), 182 states have internal predecessors, (242), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:50,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 183 states to 183 states and 242 transitions. [2022-01-10 18:13:50,267 INFO L78 Accepts]: Start accepts. Automaton has 183 states and 242 transitions. Word has length 17 [2022-01-10 18:13:50,267 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:13:50,268 INFO L470 AbstractCegarLoop]: Abstraction has 183 states and 242 transitions. [2022-01-10 18:13:50,268 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:50,268 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 242 transitions. [2022-01-10 18:13:50,269 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-01-10 18:13:50,269 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:13:50,269 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:13:50,269 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 18:13:50,269 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:13:50,270 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:13:50,270 INFO L85 PathProgramCache]: Analyzing trace with hash -824593725, now seen corresponding path program 1 times [2022-01-10 18:13:50,270 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:13:50,271 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2136031543] [2022-01-10 18:13:50,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:50,271 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:13:50,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:50,377 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:13:50,378 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:13:50,378 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2136031543] [2022-01-10 18:13:50,378 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2136031543] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:13:50,378 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:13:50,378 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:13:50,379 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [365225715] [2022-01-10 18:13:50,379 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:13:50,380 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:13:50,380 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:13:50,381 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:13:50,381 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:13:50,381 INFO L87 Difference]: Start difference. First operand 183 states and 242 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:50,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:13:50,441 INFO L93 Difference]: Finished difference Result 420 states and 558 transitions. [2022-01-10 18:13:50,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:13:50,442 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-01-10 18:13:50,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:13:50,444 INFO L225 Difference]: With dead ends: 420 [2022-01-10 18:13:50,444 INFO L226 Difference]: Without dead ends: 244 [2022-01-10 18:13:50,445 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:13:50,446 INFO L933 BasicCegarLoop]: 249 mSDtfsCounter, 226 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 324 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:13:50,447 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [226 Valid, 324 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:13:50,448 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 244 states. [2022-01-10 18:13:50,490 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 244 to 235. [2022-01-10 18:13:50,491 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 235 states, 232 states have (on average 1.3491379310344827) internal successors, (313), 234 states have internal predecessors, (313), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:50,493 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 235 states to 235 states and 313 transitions. [2022-01-10 18:13:50,493 INFO L78 Accepts]: Start accepts. Automaton has 235 states and 313 transitions. Word has length 18 [2022-01-10 18:13:50,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:13:50,493 INFO L470 AbstractCegarLoop]: Abstraction has 235 states and 313 transitions. [2022-01-10 18:13:50,493 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:50,494 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 313 transitions. [2022-01-10 18:13:50,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-01-10 18:13:50,495 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:13:50,495 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:13:50,495 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 18:13:50,495 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:13:50,496 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:13:50,496 INFO L85 PathProgramCache]: Analyzing trace with hash -1201198223, now seen corresponding path program 1 times [2022-01-10 18:13:50,496 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:13:50,496 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [959427984] [2022-01-10 18:13:50,496 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:50,497 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:13:50,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:50,567 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:13:50,568 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:13:50,568 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [959427984] [2022-01-10 18:13:50,568 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [959427984] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:13:50,568 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:13:50,569 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:13:50,569 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1045529029] [2022-01-10 18:13:50,569 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:13:50,569 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:13:50,569 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:13:50,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:13:50,570 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:13:50,570 INFO L87 Difference]: Start difference. First operand 235 states and 313 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:50,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:13:50,672 INFO L93 Difference]: Finished difference Result 525 states and 695 transitions. [2022-01-10 18:13:50,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:13:50,673 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-01-10 18:13:50,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:13:50,676 INFO L225 Difference]: With dead ends: 525 [2022-01-10 18:13:50,676 INFO L226 Difference]: Without dead ends: 297 [2022-01-10 18:13:50,682 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:13:50,684 INFO L933 BasicCegarLoop]: 226 mSDtfsCounter, 165 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 333 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:13:50,684 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [165 Valid, 333 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:13:50,685 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2022-01-10 18:13:50,723 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 291. [2022-01-10 18:13:50,724 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 291 states, 288 states have (on average 1.2951388888888888) internal successors, (373), 290 states have internal predecessors, (373), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:50,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 291 states to 291 states and 373 transitions. [2022-01-10 18:13:50,726 INFO L78 Accepts]: Start accepts. Automaton has 291 states and 373 transitions. Word has length 23 [2022-01-10 18:13:50,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:13:50,726 INFO L470 AbstractCegarLoop]: Abstraction has 291 states and 373 transitions. [2022-01-10 18:13:50,726 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:50,727 INFO L276 IsEmpty]: Start isEmpty. Operand 291 states and 373 transitions. [2022-01-10 18:13:50,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-01-10 18:13:50,732 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:13:50,732 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:13:50,733 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 18:13:50,733 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:13:50,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:13:50,734 INFO L85 PathProgramCache]: Analyzing trace with hash -1514595716, now seen corresponding path program 1 times [2022-01-10 18:13:50,734 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:13:50,734 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [878379199] [2022-01-10 18:13:50,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:50,734 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:13:50,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:50,871 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:13:50,871 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:13:50,871 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [878379199] [2022-01-10 18:13:50,871 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [878379199] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:13:50,872 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:13:50,872 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:13:50,872 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [738438413] [2022-01-10 18:13:50,872 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:13:50,874 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:13:50,874 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:13:50,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:13:50,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:13:50,875 INFO L87 Difference]: Start difference. First operand 291 states and 373 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:51,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:13:51,156 INFO L93 Difference]: Finished difference Result 1313 states and 1691 transitions. [2022-01-10 18:13:51,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 18:13:51,156 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-01-10 18:13:51,156 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:13:51,178 INFO L225 Difference]: With dead ends: 1313 [2022-01-10 18:13:51,178 INFO L226 Difference]: Without dead ends: 855 [2022-01-10 18:13:51,180 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 18:13:51,181 INFO L933 BasicCegarLoop]: 283 mSDtfsCounter, 926 mSDsluCounter, 891 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 926 SdHoareTripleChecker+Valid, 1174 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 18:13:51,181 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [926 Valid, 1174 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 18:13:51,183 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 855 states. [2022-01-10 18:13:51,249 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 855 to 404. [2022-01-10 18:13:51,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 404 states, 401 states have (on average 1.2892768079800498) internal successors, (517), 403 states have internal predecessors, (517), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:51,251 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 404 states to 404 states and 517 transitions. [2022-01-10 18:13:51,251 INFO L78 Accepts]: Start accepts. Automaton has 404 states and 517 transitions. Word has length 28 [2022-01-10 18:13:51,252 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:13:51,252 INFO L470 AbstractCegarLoop]: Abstraction has 404 states and 517 transitions. [2022-01-10 18:13:51,252 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:51,252 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 517 transitions. [2022-01-10 18:13:51,253 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-01-10 18:13:51,253 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:13:51,253 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:13:51,253 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 18:13:51,254 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:13:51,254 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:13:51,254 INFO L85 PathProgramCache]: Analyzing trace with hash -1931156778, now seen corresponding path program 1 times [2022-01-10 18:13:51,255 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:13:51,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1143082077] [2022-01-10 18:13:51,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:51,255 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:13:51,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:51,369 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:13:51,369 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:13:51,370 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1143082077] [2022-01-10 18:13:51,370 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1143082077] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:13:51,371 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:13:51,371 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:13:51,371 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [145910464] [2022-01-10 18:13:51,372 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:13:51,372 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:13:51,372 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:13:51,373 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:13:51,374 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:13:51,374 INFO L87 Difference]: Start difference. First operand 404 states and 517 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:51,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:13:51,669 INFO L93 Difference]: Finished difference Result 1199 states and 1523 transitions. [2022-01-10 18:13:51,669 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-10 18:13:51,669 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-01-10 18:13:51,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:13:51,674 INFO L225 Difference]: With dead ends: 1199 [2022-01-10 18:13:51,674 INFO L226 Difference]: Without dead ends: 1193 [2022-01-10 18:13:51,675 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 18:13:51,682 INFO L933 BasicCegarLoop]: 560 mSDtfsCounter, 849 mSDsluCounter, 1126 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 849 SdHoareTripleChecker+Valid, 1686 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 18:13:51,683 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [849 Valid, 1686 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 18:13:51,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1193 states. [2022-01-10 18:13:51,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1193 to 404. [2022-01-10 18:13:51,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 404 states, 401 states have (on average 1.2743142144638404) internal successors, (511), 403 states have internal predecessors, (511), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:51,765 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 404 states to 404 states and 511 transitions. [2022-01-10 18:13:51,765 INFO L78 Accepts]: Start accepts. Automaton has 404 states and 511 transitions. Word has length 30 [2022-01-10 18:13:51,765 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:13:51,765 INFO L470 AbstractCegarLoop]: Abstraction has 404 states and 511 transitions. [2022-01-10 18:13:51,765 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:51,766 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 511 transitions. [2022-01-10 18:13:51,770 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-01-10 18:13:51,770 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:13:51,771 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:13:51,771 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 18:13:51,771 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:13:51,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:13:51,772 INFO L85 PathProgramCache]: Analyzing trace with hash -13806056, now seen corresponding path program 1 times [2022-01-10 18:13:51,772 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:13:51,772 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [96213498] [2022-01-10 18:13:51,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:51,772 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:13:51,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:51,863 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:13:51,863 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:13:51,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [96213498] [2022-01-10 18:13:51,863 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [96213498] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:13:51,863 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:13:51,863 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:13:51,864 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1568080640] [2022-01-10 18:13:51,864 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:13:51,865 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:13:51,865 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:13:51,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:13:51,865 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:13:51,866 INFO L87 Difference]: Start difference. First operand 404 states and 511 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:52,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:13:52,050 INFO L93 Difference]: Finished difference Result 1149 states and 1439 transitions. [2022-01-10 18:13:52,050 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 18:13:52,051 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-01-10 18:13:52,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:13:52,054 INFO L225 Difference]: With dead ends: 1149 [2022-01-10 18:13:52,055 INFO L226 Difference]: Without dead ends: 752 [2022-01-10 18:13:52,056 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:13:52,062 INFO L933 BasicCegarLoop]: 289 mSDtfsCounter, 350 mSDsluCounter, 769 mSDsCounter, 0 mSdLazyCounter, 87 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 1058 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 87 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:13:52,064 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [350 Valid, 1058 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 87 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:13:52,066 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 752 states. [2022-01-10 18:13:52,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 752 to 428. [2022-01-10 18:13:52,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 428 states, 425 states have (on average 1.2588235294117647) internal successors, (535), 427 states have internal predecessors, (535), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:52,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 428 states to 428 states and 535 transitions. [2022-01-10 18:13:52,113 INFO L78 Accepts]: Start accepts. Automaton has 428 states and 535 transitions. Word has length 41 [2022-01-10 18:13:52,114 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:13:52,115 INFO L470 AbstractCegarLoop]: Abstraction has 428 states and 535 transitions. [2022-01-10 18:13:52,115 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:52,115 INFO L276 IsEmpty]: Start isEmpty. Operand 428 states and 535 transitions. [2022-01-10 18:13:52,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-01-10 18:13:52,116 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:13:52,116 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:13:52,116 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 18:13:52,116 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:13:52,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:13:52,117 INFO L85 PathProgramCache]: Analyzing trace with hash 1339503641, now seen corresponding path program 1 times [2022-01-10 18:13:52,117 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:13:52,117 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1758189242] [2022-01-10 18:13:52,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:52,117 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:13:52,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:52,173 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:13:52,173 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:13:52,173 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1758189242] [2022-01-10 18:13:52,173 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1758189242] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:13:52,174 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:13:52,174 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:13:52,174 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1949532879] [2022-01-10 18:13:52,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:13:52,174 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 18:13:52,175 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:13:52,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 18:13:52,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 18:13:52,175 INFO L87 Difference]: Start difference. First operand 428 states and 535 transitions. Second operand has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:52,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:13:52,315 INFO L93 Difference]: Finished difference Result 1225 states and 1515 transitions. [2022-01-10 18:13:52,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:13:52,315 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-01-10 18:13:52,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:13:52,319 INFO L225 Difference]: With dead ends: 1225 [2022-01-10 18:13:52,319 INFO L226 Difference]: Without dead ends: 804 [2022-01-10 18:13:52,320 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:13:52,323 INFO L933 BasicCegarLoop]: 319 mSDtfsCounter, 290 mSDsluCounter, 492 mSDsCounter, 0 mSdLazyCounter, 56 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 811 SdHoareTripleChecker+Invalid, 77 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 56 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:13:52,323 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [290 Valid, 811 Invalid, 77 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 56 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:13:52,325 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 804 states. [2022-01-10 18:13:52,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 804 to 444. [2022-01-10 18:13:52,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 444 states, 441 states have (on average 1.2494331065759636) internal successors, (551), 443 states have internal predecessors, (551), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:52,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 444 states to 444 states and 551 transitions. [2022-01-10 18:13:52,385 INFO L78 Accepts]: Start accepts. Automaton has 444 states and 551 transitions. Word has length 41 [2022-01-10 18:13:52,385 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:13:52,385 INFO L470 AbstractCegarLoop]: Abstraction has 444 states and 551 transitions. [2022-01-10 18:13:52,386 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.25) internal successors, (41), 4 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:52,386 INFO L276 IsEmpty]: Start isEmpty. Operand 444 states and 551 transitions. [2022-01-10 18:13:52,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-01-10 18:13:52,387 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:13:52,387 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:13:52,387 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 18:13:52,387 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:13:52,387 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:13:52,388 INFO L85 PathProgramCache]: Analyzing trace with hash 495031770, now seen corresponding path program 1 times [2022-01-10 18:13:52,388 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:13:52,388 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1003902930] [2022-01-10 18:13:52,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:52,388 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:13:52,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:52,439 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:13:52,440 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:13:52,440 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1003902930] [2022-01-10 18:13:52,440 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1003902930] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:13:52,440 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:13:52,440 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 18:13:52,440 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1340783659] [2022-01-10 18:13:52,441 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:13:52,441 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 18:13:52,441 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:13:52,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 18:13:52,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 18:13:52,442 INFO L87 Difference]: Start difference. First operand 444 states and 551 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 6 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:52,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:13:52,719 INFO L93 Difference]: Finished difference Result 1546 states and 1924 transitions. [2022-01-10 18:13:52,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-01-10 18:13:52,719 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 6 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-01-10 18:13:52,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:13:52,723 INFO L225 Difference]: With dead ends: 1546 [2022-01-10 18:13:52,723 INFO L226 Difference]: Without dead ends: 829 [2022-01-10 18:13:52,724 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-01-10 18:13:52,725 INFO L933 BasicCegarLoop]: 470 mSDtfsCounter, 812 mSDsluCounter, 1290 mSDsCounter, 0 mSdLazyCounter, 137 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 812 SdHoareTripleChecker+Valid, 1760 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:13:52,725 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [812 Valid, 1760 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:13:52,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 829 states. [2022-01-10 18:13:52,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 829 to 307. [2022-01-10 18:13:52,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 307 states, 304 states have (on average 1.2401315789473684) internal successors, (377), 306 states have internal predecessors, (377), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:52,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 377 transitions. [2022-01-10 18:13:52,760 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 377 transitions. Word has length 41 [2022-01-10 18:13:52,760 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:13:52,760 INFO L470 AbstractCegarLoop]: Abstraction has 307 states and 377 transitions. [2022-01-10 18:13:52,760 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 6 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:52,761 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 377 transitions. [2022-01-10 18:13:52,762 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-01-10 18:13:52,762 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:13:52,762 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:13:52,763 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 18:13:52,763 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:13:52,763 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:13:52,763 INFO L85 PathProgramCache]: Analyzing trace with hash -1008421932, now seen corresponding path program 1 times [2022-01-10 18:13:52,764 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:13:52,764 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [535205966] [2022-01-10 18:13:52,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:52,764 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:13:52,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:52,894 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-01-10 18:13:52,894 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:13:52,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [535205966] [2022-01-10 18:13:52,894 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [535205966] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:13:52,894 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:13:52,894 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:13:52,894 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1720878659] [2022-01-10 18:13:52,895 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:13:52,896 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:13:52,896 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:13:52,899 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:13:52,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:13:52,901 INFO L87 Difference]: Start difference. First operand 307 states and 377 transitions. Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 2 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:52,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:13:52,962 INFO L93 Difference]: Finished difference Result 719 states and 885 transitions. [2022-01-10 18:13:52,963 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:13:52,963 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 2 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-01-10 18:13:52,965 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:13:52,966 INFO L225 Difference]: With dead ends: 719 [2022-01-10 18:13:52,966 INFO L226 Difference]: Without dead ends: 419 [2022-01-10 18:13:52,967 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:13:52,969 INFO L933 BasicCegarLoop]: 154 mSDtfsCounter, 29 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 288 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:13:52,969 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [29 Valid, 288 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:13:52,970 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 419 states. [2022-01-10 18:13:53,023 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 419 to 419. [2022-01-10 18:13:53,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 419 states, 416 states have (on average 1.2235576923076923) internal successors, (509), 418 states have internal predecessors, (509), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:53,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 419 states to 419 states and 509 transitions. [2022-01-10 18:13:53,026 INFO L78 Accepts]: Start accepts. Automaton has 419 states and 509 transitions. Word has length 69 [2022-01-10 18:13:53,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:13:53,026 INFO L470 AbstractCegarLoop]: Abstraction has 419 states and 509 transitions. [2022-01-10 18:13:53,026 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 2 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:53,026 INFO L276 IsEmpty]: Start isEmpty. Operand 419 states and 509 transitions. [2022-01-10 18:13:53,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-01-10 18:13:53,028 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:13:53,028 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:13:53,028 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 18:13:53,028 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:13:53,029 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:13:53,029 INFO L85 PathProgramCache]: Analyzing trace with hash 1424593594, now seen corresponding path program 1 times [2022-01-10 18:13:53,029 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:13:53,029 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [745420617] [2022-01-10 18:13:53,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:53,029 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:13:53,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:53,168 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 18:13:53,168 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:13:53,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [745420617] [2022-01-10 18:13:53,168 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [745420617] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 18:13:53,169 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1570657479] [2022-01-10 18:13:53,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:53,169 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 18:13:53,169 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:13:53,171 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 18:13:53,181 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-10 18:13:53,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:53,339 INFO L263 TraceCheckSpWp]: Trace formula consists of 603 conjuncts, 12 conjunts are in the unsatisfiable core [2022-01-10 18:13:53,345 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 18:13:54,128 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 18:13:54,128 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 18:13:54,346 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 18:13:54,346 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1570657479] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 18:13:54,347 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 18:13:54,347 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 6] total 9 [2022-01-10 18:13:54,347 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [534033896] [2022-01-10 18:13:54,347 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 18:13:54,348 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-01-10 18:13:54,348 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:13:54,348 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-01-10 18:13:54,348 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2022-01-10 18:13:54,349 INFO L87 Difference]: Start difference. First operand 419 states and 509 transitions. Second operand has 10 states, 10 states have (on average 12.4) internal successors, (124), 9 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:55,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:13:55,561 INFO L93 Difference]: Finished difference Result 3597 states and 4449 transitions. [2022-01-10 18:13:55,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-01-10 18:13:55,561 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 12.4) internal successors, (124), 9 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 71 [2022-01-10 18:13:55,562 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:13:55,572 INFO L225 Difference]: With dead ends: 3597 [2022-01-10 18:13:55,573 INFO L226 Difference]: Without dead ends: 3297 [2022-01-10 18:13:55,574 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 133 SyntacticMatches, 5 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 115 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=163, Invalid=389, Unknown=0, NotChecked=0, Total=552 [2022-01-10 18:13:55,575 INFO L933 BasicCegarLoop]: 509 mSDtfsCounter, 1985 mSDsluCounter, 1880 mSDsCounter, 0 mSdLazyCounter, 348 mSolverCounterSat, 88 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1985 SdHoareTripleChecker+Valid, 2389 SdHoareTripleChecker+Invalid, 436 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 88 IncrementalHoareTripleChecker+Valid, 348 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-01-10 18:13:55,575 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1985 Valid, 2389 Invalid, 436 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [88 Valid, 348 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-01-10 18:13:55,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3297 states. [2022-01-10 18:13:55,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3297 to 1019. [2022-01-10 18:13:55,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1019 states, 1016 states have (on average 1.233267716535433) internal successors, (1253), 1018 states have internal predecessors, (1253), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:55,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1019 states to 1019 states and 1253 transitions. [2022-01-10 18:13:55,735 INFO L78 Accepts]: Start accepts. Automaton has 1019 states and 1253 transitions. Word has length 71 [2022-01-10 18:13:55,735 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:13:55,735 INFO L470 AbstractCegarLoop]: Abstraction has 1019 states and 1253 transitions. [2022-01-10 18:13:55,735 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 12.4) internal successors, (124), 9 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:55,735 INFO L276 IsEmpty]: Start isEmpty. Operand 1019 states and 1253 transitions. [2022-01-10 18:13:55,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-01-10 18:13:55,736 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:13:55,736 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:13:55,769 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-01-10 18:13:55,955 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-01-10 18:13:55,956 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:13:55,956 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:13:55,956 INFO L85 PathProgramCache]: Analyzing trace with hash 919034969, now seen corresponding path program 1 times [2022-01-10 18:13:55,956 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:13:55,957 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1002268306] [2022-01-10 18:13:55,957 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:13:55,957 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:13:55,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:13:56,022 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-01-10 18:13:56,022 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:13:56,022 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1002268306] [2022-01-10 18:13:56,023 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1002268306] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:13:56,023 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:13:56,023 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:13:56,024 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1994934624] [2022-01-10 18:13:56,024 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:13:56,024 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:13:56,025 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:13:56,025 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:13:56,025 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:13:56,025 INFO L87 Difference]: Start difference. First operand 1019 states and 1253 transitions. Second operand has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:56,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:13:56,148 INFO L93 Difference]: Finished difference Result 1761 states and 2148 transitions. [2022-01-10 18:13:56,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:13:56,149 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 71 [2022-01-10 18:13:56,149 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:13:56,150 INFO L225 Difference]: With dead ends: 1761 [2022-01-10 18:13:56,150 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 18:13:56,152 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:13:56,152 INFO L933 BasicCegarLoop]: 130 mSDtfsCounter, 231 mSDsluCounter, 262 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 231 SdHoareTripleChecker+Valid, 392 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:13:56,152 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [231 Valid, 392 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:13:56,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 18:13:56,153 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 18:13:56,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:56,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 18:13:56,153 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 71 [2022-01-10 18:13:56,153 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:13:56,153 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 18:13:56,154 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:13:56,154 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 18:13:56,154 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 18:13:56,156 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 18:13:56,156 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 18:13:56,156 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 18:13:56,157 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 18:13:56,158 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 18:14:18,210 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 18:14:18,211 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 18:14:18,211 INFO L854 garLoopResultBuilder]: At program point L892(lines 888 894) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,211 INFO L854 garLoopResultBuilder]: At program point L885(lines 881 887) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,211 INFO L854 garLoopResultBuilder]: At program point L900(lines 895 903) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,211 INFO L858 garLoopResultBuilder]: For program point L987(lines 987 994) no Hoare annotation was computed. [2022-01-10 18:14:18,211 INFO L854 garLoopResultBuilder]: At program point L964(lines 960 966) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,211 INFO L858 garLoopResultBuilder]: For program point L987-2(lines 987 994) no Hoare annotation was computed. [2022-01-10 18:14:18,212 INFO L854 garLoopResultBuilder]: At program point L211-2(lines 211 258) the Hoare annotation is: (let ((.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1))) (.cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (<= 1 ~methaneLevelCritical~0Int)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse12 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse9 (<= 1 ~waterLevel~0Int)) (.cse11 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse2 .cse8 .cse9 .cse10 .cse11) (and .cse6 .cse0 .cse1 .cse2 .cse8 .cse4 .cse10 .cse11) (and .cse6 .cse0 .cse1 .cse12 .cse8 .cse4 .cse10 .cse11) (and .cse7 .cse2 .cse3 .cse9 .cse5) (and .cse0 .cse1 .cse12 .cse2 .cse4 .cse11) (and .cse7 .cse12 .cse2 .cse9 .cse11))) [2022-01-10 18:14:18,212 INFO L861 garLoopResultBuilder]: At program point L996(lines 977 999) the Hoare annotation is: true [2022-01-10 18:14:18,212 INFO L854 garLoopResultBuilder]: At program point L259(lines 210 260) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1))) (.cse2 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2) (and .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse3 .cse0 .cse4 .cse5 .cse2) (and .cse3 .cse1 .cse4 .cse5 .cse2))) [2022-01-10 18:14:18,212 INFO L858 garLoopResultBuilder]: For program point L212(lines 211 258) no Hoare annotation was computed. [2022-01-10 18:14:18,212 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 18:14:18,212 INFO L858 garLoopResultBuilder]: For program point L278-3(lines 278 284) no Hoare annotation was computed. [2022-01-10 18:14:18,212 INFO L858 garLoopResultBuilder]: For program point L213(lines 213 217) no Hoare annotation was computed. [2022-01-10 18:14:18,212 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 18:14:18,212 INFO L858 garLoopResultBuilder]: For program point L64-3(lines 64 68) no Hoare annotation was computed. [2022-01-10 18:14:18,212 INFO L858 garLoopResultBuilder]: For program point L278-5(lines 277 296) no Hoare annotation was computed. [2022-01-10 18:14:18,212 INFO L858 garLoopResultBuilder]: For program point L221(lines 221 227) no Hoare annotation was computed. [2022-01-10 18:14:18,212 INFO L854 garLoopResultBuilder]: At program point L64-5(lines 60 71) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,213 INFO L858 garLoopResultBuilder]: For program point L336-2(lines 336 353) no Hoare annotation was computed. [2022-01-10 18:14:18,213 INFO L858 garLoopResultBuilder]: For program point L285-3(lines 285 291) no Hoare annotation was computed. [2022-01-10 18:14:18,213 INFO L858 garLoopResultBuilder]: For program point L76(lines 76 80) no Hoare annotation was computed. [2022-01-10 18:14:18,213 INFO L858 garLoopResultBuilder]: For program point L221-2(lines 221 227) no Hoare annotation was computed. [2022-01-10 18:14:18,213 INFO L854 garLoopResultBuilder]: At program point L156-1(lines 151 159) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,213 INFO L858 garLoopResultBuilder]: For program point L310-6(lines 310 327) no Hoare annotation was computed. [2022-01-10 18:14:18,215 INFO L854 garLoopResultBuilder]: At program point L101-5(lines 96 104) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2) (and (<= 1 ~systemActive~0Int) .cse1 .cse2))) [2022-01-10 18:14:18,216 INFO L854 garLoopResultBuilder]: At program point L76-2(lines 72 83) the Hoare annotation is: (let ((.cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse6 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1))) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse8 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse7 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse4 .cse0 .cse1 .cse2 .cse5 .cse3 .cse6 .cse7) (and .cse4 .cse0 .cse1 .cse8 .cse5 .cse3 .cse6 .cse7) (and .cse0 .cse1 .cse8 .cse2 .cse3 .cse7))) [2022-01-10 18:14:18,216 INFO L858 garLoopResultBuilder]: For program point L231(lines 231 237) no Hoare annotation was computed. [2022-01-10 18:14:18,216 INFO L858 garLoopResultBuilder]: For program point L475-3(lines 475 479) no Hoare annotation was computed. [2022-01-10 18:14:18,216 INFO L858 garLoopResultBuilder]: For program point L141-3(lines 141 147) no Hoare annotation was computed. [2022-01-10 18:14:18,216 INFO L854 garLoopResultBuilder]: At program point L302-7(lines 298 304) the Hoare annotation is: false [2022-01-10 18:14:18,216 INFO L858 garLoopResultBuilder]: For program point L171-2(lines 171 184) no Hoare annotation was computed. [2022-01-10 18:14:18,216 INFO L858 garLoopResultBuilder]: For program point L88(lines 88 92) no Hoare annotation was computed. [2022-01-10 18:14:18,216 INFO L858 garLoopResultBuilder]: For program point L231-2(lines 231 237) no Hoare annotation was computed. [2022-01-10 18:14:18,216 INFO L858 garLoopResultBuilder]: For program point L475-5(lines 475 479) no Hoare annotation was computed. [2022-01-10 18:14:18,216 INFO L854 garLoopResultBuilder]: At program point L146-3(lines 137 150) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)))) [2022-01-10 18:14:18,216 INFO L854 garLoopResultBuilder]: At program point L310-7(lines 306 330) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)))) [2022-01-10 18:14:18,217 INFO L854 garLoopResultBuilder]: At program point L407-1(lines 402 410) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) [2022-01-10 18:14:18,217 INFO L854 garLoopResultBuilder]: At program point L171-3(lines 163 187) the Hoare annotation is: (let ((.cse1 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0)) (.cse0 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1))) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse1 (<= 1 ~systemActive~0Int) .cse2 .cse3 .cse4) (and .cse1 .cse0 .cse2 .cse3 .cse4))) [2022-01-10 18:14:18,217 INFO L854 garLoopResultBuilder]: At program point L88-2(lines 84 95) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse6 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse4 .cse6) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse4 .cse6) (and .cse7 .cse2 .cse3 .cse8 .cse5) (and .cse7 .cse2 .cse8 .cse6))) [2022-01-10 18:14:18,217 INFO L858 garLoopResultBuilder]: For program point L241(lines 241 254) no Hoare annotation was computed. [2022-01-10 18:14:18,217 INFO L854 garLoopResultBuilder]: At program point L481-1(lines 466 484) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,217 INFO L858 garLoopResultBuilder]: For program point L456-9(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,217 INFO L854 garLoopResultBuilder]: At program point L336-3(lines 332 356) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)))) [2022-01-10 18:14:18,217 INFO L858 garLoopResultBuilder]: For program point L175-3(lines 175 181) no Hoare annotation was computed. [2022-01-10 18:14:18,217 INFO L854 garLoopResultBuilder]: At program point L295-1(lines 274 297) the Hoare annotation is: (let ((.cse1 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0)) (.cse0 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1))) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse1 (<= 1 ~systemActive~0Int) .cse2 .cse3 .cse4) (and .cse1 .cse0 .cse2 .cse3 .cse4))) [2022-01-10 18:14:18,218 INFO L858 garLoopResultBuilder]: For program point L247-2(lines 241 254) no Hoare annotation was computed. [2022-01-10 18:14:18,218 INFO L858 garLoopResultBuilder]: For program point L247(lines 247 253) no Hoare annotation was computed. [2022-01-10 18:14:18,218 INFO L858 garLoopResultBuilder]: For program point L340-3(lines 340 348) no Hoare annotation was computed. [2022-01-10 18:14:18,218 INFO L858 garLoopResultBuilder]: For program point L456-11(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,219 INFO L858 garLoopResultBuilder]: For program point L193-1(line 193) no Hoare annotation was computed. [2022-01-10 18:14:18,219 INFO L854 garLoopResultBuilder]: At program point L916-2(lines 916 930) the Hoare annotation is: (let ((.cse1 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0)) (.cse0 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1))) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse1 (<= 1 ~systemActive~0Int) .cse2 .cse3 .cse4) (and .cse1 .cse0 .cse2 .cse3 .cse4))) [2022-01-10 18:14:18,219 INFO L858 garLoopResultBuilder]: For program point L278(lines 278 284) no Hoare annotation was computed. [2022-01-10 18:14:18,219 INFO L858 garLoopResultBuilder]: For program point L489(lines 489 495) no Hoare annotation was computed. [2022-01-10 18:14:18,220 INFO L854 garLoopResultBuilder]: At program point L388-2(lines 383 390) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,220 INFO L858 garLoopResultBuilder]: For program point L310-4(lines 310 327) no Hoare annotation was computed. [2022-01-10 18:14:18,220 INFO L854 garLoopResultBuilder]: At program point L462-3(lines 447 465) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)))) [2022-01-10 18:14:18,220 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 193) no Hoare annotation was computed. [2022-01-10 18:14:18,220 INFO L854 garLoopResultBuilder]: At program point L194-1(lines 189 196) the Hoare annotation is: false [2022-01-10 18:14:18,220 INFO L861 garLoopResultBuilder]: At program point L931(lines 906 935) the Hoare annotation is: true [2022-01-10 18:14:18,220 INFO L858 garLoopResultBuilder]: For program point L917(line 917) no Hoare annotation was computed. [2022-01-10 18:14:18,221 INFO L858 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-01-10 18:14:18,221 INFO L858 garLoopResultBuilder]: For program point L278-2(lines 277 296) no Hoare annotation was computed. [2022-01-10 18:14:18,221 INFO L854 garLoopResultBuilder]: At program point L388(lines 383 390) the Hoare annotation is: (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) (= ~pumpRunning~0Int 0) (<= 0 ~waterLevel~0Int)) [2022-01-10 18:14:18,221 INFO L858 garLoopResultBuilder]: For program point L489-2(lines 489 495) no Hoare annotation was computed. [2022-01-10 18:14:18,221 INFO L858 garLoopResultBuilder]: For program point L141-2(lines 141 147) no Hoare annotation was computed. [2022-01-10 18:14:18,222 INFO L854 garLoopResultBuilder]: At program point L302-5(lines 298 304) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,222 INFO L858 garLoopResultBuilder]: For program point L314-9(lines 314 322) no Hoare annotation was computed. [2022-01-10 18:14:18,222 INFO L861 garLoopResultBuilder]: At program point L264(lines 201 266) the Hoare annotation is: true [2022-01-10 18:14:18,222 INFO L858 garLoopResultBuilder]: For program point L920(lines 920 924) no Hoare annotation was computed. [2022-01-10 18:14:18,222 INFO L854 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:14:18,222 INFO L858 garLoopResultBuilder]: For program point L336(lines 336 353) no Hoare annotation was computed. [2022-01-10 18:14:18,222 INFO L858 garLoopResultBuilder]: For program point L285-1(lines 285 291) no Hoare annotation was computed. [2022-01-10 18:14:18,222 INFO L854 garLoopResultBuilder]: At program point L497(lines 485 499) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse7 (<= ~methaneLevelCritical~0Int 0)) (.cse5 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse6 (<= 1 ~waterLevel~0Int)) (.cse4 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse2 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse7) (and .cse5 .cse2 .cse6 .cse4))) [2022-01-10 18:14:18,222 INFO L854 garLoopResultBuilder]: At program point L146-2(lines 137 150) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,222 INFO L854 garLoopResultBuilder]: At program point L310-5(lines 306 330) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,223 INFO L854 garLoopResultBuilder]: At program point L101-4(lines 96 104) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,223 INFO L854 garLoopResultBuilder]: At program point L302-6(lines 298 304) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 0) .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)))) [2022-01-10 18:14:18,223 INFO L861 garLoopResultBuilder]: At program point L974(lines 967 976) the Hoare annotation is: true [2022-01-10 18:14:18,223 INFO L858 garLoopResultBuilder]: For program point L920-1(lines 920 924) no Hoare annotation was computed. [2022-01-10 18:14:18,223 INFO L854 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:14:18,223 INFO L858 garLoopResultBuilder]: For program point L310-2(lines 310 327) no Hoare annotation was computed. [2022-01-10 18:14:18,223 INFO L854 garLoopResultBuilder]: At program point L101-2(lines 96 104) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= ~methaneLevelCritical~0Int 0)) (.cse5 (<= ~waterLevel~0Int 1)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse8 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse7 (<= 1 ~waterLevel~0Int)) (.cse9 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse2 .cse7 .cse4) (and .cse0 .cse1 .cse6 .cse8 .cse3 .cse9) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse8 .cse7 .cse9))) [2022-01-10 18:14:18,223 INFO L858 garLoopResultBuilder]: For program point L456-6(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,223 INFO L854 garLoopResultBuilder]: At program point L398-3(lines 391 401) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,223 INFO L858 garLoopResultBuilder]: For program point L278-6(lines 278 284) no Hoare annotation was computed. [2022-01-10 18:14:18,223 INFO L858 garLoopResultBuilder]: For program point L475(lines 475 479) no Hoare annotation was computed. [2022-01-10 18:14:18,223 INFO L858 garLoopResultBuilder]: For program point L141-1(lines 141 147) no Hoare annotation was computed. [2022-01-10 18:14:18,224 INFO L854 garLoopResultBuilder]: At program point L302-3(lines 298 304) the Hoare annotation is: false [2022-01-10 18:14:18,224 INFO L858 garLoopResultBuilder]: For program point L171(lines 171 184) no Hoare annotation was computed. [2022-01-10 18:14:18,224 INFO L858 garLoopResultBuilder]: For program point L456-8(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,224 INFO L858 garLoopResultBuilder]: For program point L373-9(lines 373 379) no Hoare annotation was computed. [2022-01-10 18:14:18,224 INFO L858 garLoopResultBuilder]: For program point L64-6(lines 64 68) no Hoare annotation was computed. [2022-01-10 18:14:18,224 INFO L858 garLoopResultBuilder]: For program point L278-8(lines 277 296) no Hoare annotation was computed. [2022-01-10 18:14:18,224 INFO L858 garLoopResultBuilder]: For program point L475-2(lines 475 479) no Hoare annotation was computed. [2022-01-10 18:14:18,224 INFO L854 garLoopResultBuilder]: At program point L146-1(lines 137 150) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 (<= 0 ~waterLevel~0Int)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)))) [2022-01-10 18:14:18,224 INFO L854 garLoopResultBuilder]: At program point L310-3(lines 306 330) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse5 (= ~pumpRunning~0Int 0)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse6 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse5 .cse3 .cse6) (and .cse0 .cse1 .cse2 .cse5 .cse3 .cse4) (and .cse7 .cse2 .cse5 .cse8 .cse4) (and .cse7 .cse2 .cse5 .cse8 .cse6))) [2022-01-10 18:14:18,224 INFO L854 garLoopResultBuilder]: At program point L407(lines 402 410) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int) .cse3) (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 .cse2 (<= 0 ~waterLevel~0Int) .cse3))) [2022-01-10 18:14:18,224 INFO L854 garLoopResultBuilder]: At program point L171-1(lines 163 187) the Hoare annotation is: (let ((.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1))) (.cse11 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse9 (<= 1 ~waterLevel~0Int)) (.cse5 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse2 .cse8 .cse9 .cse10 .cse11) (and .cse6 .cse0 .cse1 .cse2 .cse8 .cse4 .cse10 .cse11) (and .cse6 .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse8 .cse4 .cse10 .cse11) (and .cse7 .cse2 .cse3 .cse9 .cse5))) [2022-01-10 18:14:18,225 INFO L854 garLoopResultBuilder]: At program point L462-2(lines 447 465) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,225 INFO L854 garLoopResultBuilder]: At program point L373-11(lines 366 382) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~4#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)))) [2022-01-10 18:14:18,225 INFO L854 garLoopResultBuilder]: At program point L362-3(lines 357 364) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,225 INFO L854 garLoopResultBuilder]: At program point L64-8(lines 60 71) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,225 INFO L858 garLoopResultBuilder]: For program point L336-4(lines 336 353) no Hoare annotation was computed. [2022-01-10 18:14:18,225 INFO L858 garLoopResultBuilder]: For program point L285-5(lines 285 291) no Hoare annotation was computed. [2022-01-10 18:14:18,226 INFO L854 garLoopResultBuilder]: At program point L481(lines 466 484) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~6#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (<= 1 ~waterLevel~0Int) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~3#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~6#1Int| 1))) [2022-01-10 18:14:18,226 INFO L858 garLoopResultBuilder]: For program point L456-3(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,226 INFO L854 garLoopResultBuilder]: At program point L336-1(lines 332 356) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse4 (<= ~methaneLevelCritical~0Int 0)) (and (<= ~waterLevel~0Int 1) .cse2 .cse3 (<= 1 ~waterLevel~0Int)))) [2022-01-10 18:14:18,226 INFO L858 garLoopResultBuilder]: For program point L175(lines 175 181) no Hoare annotation was computed. [2022-01-10 18:14:18,227 INFO L854 garLoopResultBuilder]: At program point L295(lines 274 297) the Hoare annotation is: (let ((.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1))) (.cse11 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse9 (<= 1 ~waterLevel~0Int)) (.cse5 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse2 .cse8 .cse9 .cse10 .cse11) (and .cse6 .cse0 .cse1 .cse2 .cse8 .cse4 .cse10 .cse11) (and .cse6 .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse8 .cse4 .cse10 .cse11) (and .cse7 .cse2 .cse3 .cse9 .cse5))) [2022-01-10 18:14:18,227 INFO L858 garLoopResultBuilder]: For program point L314-6(lines 314 322) no Hoare annotation was computed. [2022-01-10 18:14:18,227 INFO L854 garLoopResultBuilder]: At program point L156-2(lines 151 159) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,227 INFO L858 garLoopResultBuilder]: For program point L310-10(lines 310 327) no Hoare annotation was computed. [2022-01-10 18:14:18,227 INFO L854 garLoopResultBuilder]: At program point L101-8(lines 96 104) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2) (and (<= 1 ~systemActive~0Int) .cse1 .cse2))) [2022-01-10 18:14:18,227 INFO L858 garLoopResultBuilder]: For program point L340(lines 340 348) no Hoare annotation was computed. [2022-01-10 18:14:18,227 INFO L858 garLoopResultBuilder]: For program point L456-5(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,227 INFO L858 garLoopResultBuilder]: For program point L193(line 193) no Hoare annotation was computed. [2022-01-10 18:14:18,227 INFO L854 garLoopResultBuilder]: At program point L101-3(lines 96 104) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,227 INFO L854 garLoopResultBuilder]: At program point L302-4(lines 298 304) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 0) .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,227 INFO L858 garLoopResultBuilder]: For program point L475-6(lines 475 479) no Hoare annotation was computed. [2022-01-10 18:14:18,227 INFO L858 garLoopResultBuilder]: For program point L141-5(lines 141 147) no Hoare annotation was computed. [2022-01-10 18:14:18,228 INFO L854 garLoopResultBuilder]: At program point L302-11(lines 298 304) the Hoare annotation is: false [2022-01-10 18:14:18,228 INFO L858 garLoopResultBuilder]: For program point L171-4(lines 171 184) no Hoare annotation was computed. [2022-01-10 18:14:18,228 INFO L854 garLoopResultBuilder]: At program point L388-1(lines 383 390) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~6#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int|) (<= 1 ~waterLevel~0Int) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~3#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~6#1Int| 1))) [2022-01-10 18:14:18,228 INFO L858 garLoopResultBuilder]: For program point L310(lines 310 327) no Hoare annotation was computed. [2022-01-10 18:14:18,228 INFO L854 garLoopResultBuilder]: At program point L462-1(lines 447 465) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 (<= 0 ~waterLevel~0Int)) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) (<= 1 ~waterLevel~0Int)))) [2022-01-10 18:14:18,228 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 193) no Hoare annotation was computed. [2022-01-10 18:14:18,228 INFO L854 garLoopResultBuilder]: At program point L194(lines 189 196) the Hoare annotation is: false [2022-01-10 18:14:18,228 INFO L854 garLoopResultBuilder]: At program point L398-2(lines 391 401) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,228 INFO L858 garLoopResultBuilder]: For program point L475-8(lines 475 479) no Hoare annotation was computed. [2022-01-10 18:14:18,228 INFO L854 garLoopResultBuilder]: At program point L146-5(lines 137 150) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,229 INFO L854 garLoopResultBuilder]: At program point L310-11(lines 306 330) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,229 INFO L854 garLoopResultBuilder]: At program point L407-2(lines 402 410) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) [2022-01-10 18:14:18,229 INFO L854 garLoopResultBuilder]: At program point L171-5(lines 163 187) the Hoare annotation is: (let ((.cse1 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0)) (.cse0 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1))) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse1 (<= 1 ~systemActive~0Int) .cse2 .cse3 .cse4) (and .cse1 .cse0 .cse2 .cse3 .cse4))) [2022-01-10 18:14:18,229 INFO L858 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-01-10 18:14:18,229 INFO L854 garLoopResultBuilder]: At program point L302-1(lines 298 304) the Hoare annotation is: false [2022-01-10 18:14:18,229 INFO L858 garLoopResultBuilder]: For program point L314-3(lines 314 322) no Hoare annotation was computed. [2022-01-10 18:14:18,229 INFO L858 garLoopResultBuilder]: For program point L373-6(lines 373 379) no Hoare annotation was computed. [2022-01-10 18:14:18,229 INFO L854 garLoopResultBuilder]: At program point L481-2(lines 466 484) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,229 INFO L858 garLoopResultBuilder]: For program point L456-15(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,229 INFO L854 garLoopResultBuilder]: At program point L336-5(lines 332 356) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,229 INFO L858 garLoopResultBuilder]: For program point L175-6(lines 175 181) no Hoare annotation was computed. [2022-01-10 18:14:18,229 INFO L854 garLoopResultBuilder]: At program point L295-2(lines 274 297) the Hoare annotation is: (let ((.cse1 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0)) (.cse0 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1))) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse1 (<= 1 ~systemActive~0Int) .cse2 .cse3 .cse4) (and .cse1 .cse0 .cse2 .cse3 .cse4))) [2022-01-10 18:14:18,229 INFO L854 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: false [2022-01-10 18:14:18,230 INFO L854 garLoopResultBuilder]: At program point L310-1(lines 306 330) the Hoare annotation is: false [2022-01-10 18:14:18,230 INFO L854 garLoopResultBuilder]: At program point L101-1(lines 96 104) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= 0 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse4 (<= ~methaneLevelCritical~0Int 0)))) [2022-01-10 18:14:18,230 INFO L854 garLoopResultBuilder]: At program point L302-2(lines 298 304) the Hoare annotation is: (let ((.cse6 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse8 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 0 ~waterLevel~0Int)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 0)) (.cse3 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse5 (<= 1 ~waterLevel~0Int)) (.cse10 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse1 .cse2 .cse3 .cse4 .cse9 .cse6) (and .cse7 .cse8 .cse1 .cse2 .cse3 .cse4 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse10))) [2022-01-10 18:14:18,230 INFO L854 garLoopResultBuilder]: At program point L373-8(lines 366 382) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~4#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)))) [2022-01-10 18:14:18,230 INFO L854 garLoopResultBuilder]: At program point L362-2(lines 357 364) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,230 INFO L858 garLoopResultBuilder]: For program point L340-6(lines 340 348) no Hoare annotation was computed. [2022-01-10 18:14:18,230 INFO L858 garLoopResultBuilder]: For program point L456-17(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,230 INFO L858 garLoopResultBuilder]: For program point L193-2(line 193) no Hoare annotation was computed. [2022-01-10 18:14:18,230 INFO L858 garLoopResultBuilder]: For program point L456(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,230 INFO L854 garLoopResultBuilder]: At program point L398-1(lines 391 401) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= 0 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse4 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,230 INFO L854 garLoopResultBuilder]: At program point L388-3(lines 383 390) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,231 INFO L858 garLoopResultBuilder]: For program point L310-8(lines 310 327) no Hoare annotation was computed. [2022-01-10 18:14:18,231 INFO L854 garLoopResultBuilder]: At program point L462-5(lines 447 465) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,232 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 193) no Hoare annotation was computed. [2022-01-10 18:14:18,232 INFO L854 garLoopResultBuilder]: At program point L194-2(lines 189 196) the Hoare annotation is: false [2022-01-10 18:14:18,232 INFO L858 garLoopResultBuilder]: For program point L456-2(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,232 INFO L858 garLoopResultBuilder]: For program point L373-3(lines 373 379) no Hoare annotation was computed. [2022-01-10 18:14:18,234 INFO L858 garLoopResultBuilder]: For program point L141-4(lines 141 147) no Hoare annotation was computed. [2022-01-10 18:14:18,234 INFO L854 garLoopResultBuilder]: At program point L302-9(lines 298 304) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,234 INFO L858 garLoopResultBuilder]: For program point L314-15(lines 314 322) no Hoare annotation was computed. [2022-01-10 18:14:18,234 INFO L854 garLoopResultBuilder]: At program point L462(lines 447 465) the Hoare annotation is: false [2022-01-10 18:14:18,234 INFO L854 garLoopResultBuilder]: At program point L373-5(lines 366 382) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= 0 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~4#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,234 INFO L854 garLoopResultBuilder]: At program point L362-1(lines 357 364) the Hoare annotation is: (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= 0 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,234 INFO L854 garLoopResultBuilder]: At program point L146-4(lines 137 150) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,235 INFO L854 garLoopResultBuilder]: At program point L310-9(lines 306 330) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,235 INFO L854 garLoopResultBuilder]: At program point L101-7(lines 96 104) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,235 INFO L854 garLoopResultBuilder]: At program point L302-10(lines 298 304) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 0) .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,235 INFO L858 garLoopResultBuilder]: For program point L314(lines 314 322) no Hoare annotation was computed. [2022-01-10 18:14:18,235 INFO L858 garLoopResultBuilder]: For program point L456-12(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,235 INFO L854 garLoopResultBuilder]: At program point L398-5(lines 391 401) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,235 INFO L854 garLoopResultBuilder]: At program point L101(lines 96 104) the Hoare annotation is: false [2022-01-10 18:14:18,235 INFO L854 garLoopResultBuilder]: At program point L302(lines 298 304) the Hoare annotation is: false [2022-01-10 18:14:18,235 INFO L858 garLoopResultBuilder]: For program point L456-14(lines 456 460) no Hoare annotation was computed. [2022-01-10 18:14:18,235 INFO L858 garLoopResultBuilder]: For program point L373-15(lines 373 379) no Hoare annotation was computed. [2022-01-10 18:14:18,235 INFO L854 garLoopResultBuilder]: At program point L398(lines 391 401) the Hoare annotation is: false [2022-01-10 18:14:18,235 INFO L854 garLoopResultBuilder]: At program point L462-4(lines 447 465) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,236 INFO L854 garLoopResultBuilder]: At program point L373-17(lines 366 382) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~4#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)))) [2022-01-10 18:14:18,236 INFO L854 garLoopResultBuilder]: At program point L362-5(lines 357 364) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,236 INFO L858 garLoopResultBuilder]: For program point L373(lines 373 379) no Hoare annotation was computed. [2022-01-10 18:14:18,236 INFO L858 garLoopResultBuilder]: For program point L314-12(lines 314 322) no Hoare annotation was computed. [2022-01-10 18:14:18,236 INFO L854 garLoopResultBuilder]: At program point L373-2(lines 366 382) the Hoare annotation is: false [2022-01-10 18:14:18,236 INFO L854 garLoopResultBuilder]: At program point L362(lines 357 364) the Hoare annotation is: false [2022-01-10 18:14:18,236 INFO L854 garLoopResultBuilder]: At program point L101-6(lines 96 104) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,236 INFO L854 garLoopResultBuilder]: At program point L302-8(lines 298 304) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2#1Int| 0) .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,236 INFO L854 garLoopResultBuilder]: At program point L398-4(lines 391 401) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-10 18:14:18,236 INFO L858 garLoopResultBuilder]: For program point L373-12(lines 373 379) no Hoare annotation was computed. [2022-01-10 18:14:18,236 INFO L854 garLoopResultBuilder]: At program point L373-14(lines 366 382) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~4#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)))) [2022-01-10 18:14:18,236 INFO L854 garLoopResultBuilder]: At program point L362-4(lines 357 364) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 0) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0#1Int| 1)) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:14:18,240 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:18,241 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 18:14:18,372 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:14:18 BasicIcfg [2022-01-10 18:14:18,373 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 18:14:18,373 INFO L158 Benchmark]: Toolchain (without parser) took 30174.66ms. Allocated memory was 183.5MB in the beginning and 588.3MB in the end (delta: 404.8MB). Free memory was 126.1MB in the beginning and 524.4MB in the end (delta: -398.3MB). Peak memory consumption was 338.4MB. Max. memory is 8.0GB. [2022-01-10 18:14:18,373 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 183.5MB. Free memory is still 143.4MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 18:14:18,373 INFO L158 Benchmark]: CACSL2BoogieTranslator took 628.57ms. Allocated memory is still 183.5MB. Free memory was 126.0MB in the beginning and 137.4MB in the end (delta: -11.4MB). Peak memory consumption was 11.3MB. Max. memory is 8.0GB. [2022-01-10 18:14:18,374 INFO L158 Benchmark]: Boogie Procedure Inliner took 86.96ms. Allocated memory is still 183.5MB. Free memory was 136.9MB in the beginning and 133.2MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2022-01-10 18:14:18,374 INFO L158 Benchmark]: Boogie Preprocessor took 56.96ms. Allocated memory is still 183.5MB. Free memory was 133.2MB in the beginning and 130.6MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 18:14:18,374 INFO L158 Benchmark]: RCFGBuilder took 661.49ms. Allocated memory is still 183.5MB. Free memory was 130.6MB in the beginning and 105.4MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 8.0GB. [2022-01-10 18:14:18,374 INFO L158 Benchmark]: IcfgTransformer took 155.47ms. Allocated memory is still 183.5MB. Free memory was 105.4MB in the beginning and 94.9MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. [2022-01-10 18:14:18,374 INFO L158 Benchmark]: TraceAbstraction took 28577.37ms. Allocated memory was 183.5MB in the beginning and 588.3MB in the end (delta: 404.8MB). Free memory was 94.4MB in the beginning and 524.4MB in the end (delta: -430.0MB). Peak memory consumption was 306.1MB. Max. memory is 8.0GB. [2022-01-10 18:14:18,376 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 183.5MB. Free memory is still 143.4MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 628.57ms. Allocated memory is still 183.5MB. Free memory was 126.0MB in the beginning and 137.4MB in the end (delta: -11.4MB). Peak memory consumption was 11.3MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 86.96ms. Allocated memory is still 183.5MB. Free memory was 136.9MB in the beginning and 133.2MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 56.96ms. Allocated memory is still 183.5MB. Free memory was 133.2MB in the beginning and 130.6MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 661.49ms. Allocated memory is still 183.5MB. Free memory was 130.6MB in the beginning and 105.4MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 8.0GB. * IcfgTransformer took 155.47ms. Allocated memory is still 183.5MB. Free memory was 105.4MB in the beginning and 94.9MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. * TraceAbstraction took 28577.37ms. Allocated memory was 183.5MB in the beginning and 588.3MB in the end (delta: 404.8MB). Free memory was 94.4MB in the beginning and 524.4MB in the end (delta: -430.0MB). Peak memory consumption was 306.1MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 193]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 193]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 193]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 193 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 28.4s, OverallIterations: 11, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 22.1s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 5863 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 5863 mSDsluCounter, 10465 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 7026 mSDsCounter, 263 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 934 IncrementalHoareTripleChecker+Invalid, 1197 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 263 mSolverCounterUnsat, 3439 mSDtfsCounter, 934 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 228 GetRequests, 158 SyntacticMatches, 5 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 154 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1019occurred in iteration=10, InterpolantAutomatonStates: 78, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 11 MinimizatonAttempts, 4739 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 99 LocationsWithAnnotation, 99 PreInvPairs, 565 NumberOfFragments, 3450 HoareAnnotationTreeSize, 99 FomulaSimplifications, 332224 FormulaSimplificationTreeSizeReduction, 12.7s HoareSimplificationTime, 99 FomulaSimplificationsInter, 1646462 FormulaSimplificationTreeSizeReductionInter, 9.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.7s InterpolantComputationTime, 521 NumberOfCodeBlocks, 521 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 579 ConstructedInterpolants, 0 QuantifiedInterpolants, 3011 SizeOfPredicates, 4 NumberOfNonLiveVariables, 603 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 13 InterpolantComputations, 10 PerfectInterpolantSequences, 62/80 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: (((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) || ((~bvule32(1bv32, \result) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, \result) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32)) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 84]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 383]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: (~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 383]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 383]: Loop Invariant Derived loop invariant: ((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, waterLevel) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, tmp___0) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32))) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32))) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 210]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, \result) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32))) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 895]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) || ((~bvule32(1bv32, \result) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, \result) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 274]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 383]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, waterLevel) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp___0) - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32))) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) || ((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 485]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning) - InvariantResult [Line: 298]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) RESULT: Ultimate proved your program to be correct! [2022-01-10 18:14:18,500 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...