/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product51.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 18:14:32,824 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 18:14:32,826 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 18:14:32,857 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 18:14:32,857 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 18:14:32,858 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 18:14:32,859 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 18:14:32,860 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 18:14:32,861 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 18:14:32,862 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 18:14:32,877 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 18:14:32,879 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 18:14:32,879 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 18:14:32,880 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 18:14:32,881 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 18:14:32,881 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 18:14:32,882 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 18:14:32,882 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 18:14:32,883 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 18:14:32,885 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 18:14:32,885 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 18:14:32,887 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 18:14:32,888 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 18:14:32,889 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 18:14:32,890 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 18:14:32,890 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 18:14:32,891 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 18:14:32,891 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 18:14:32,891 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 18:14:32,892 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 18:14:32,892 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 18:14:32,893 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 18:14:32,893 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 18:14:32,894 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 18:14:32,894 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 18:14:32,894 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 18:14:32,895 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 18:14:32,895 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 18:14:32,895 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 18:14:32,896 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 18:14:32,896 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 18:14:32,897 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf [2022-01-10 18:14:32,926 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 18:14:32,926 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 18:14:32,926 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 18:14:32,927 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 18:14:32,927 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 18:14:32,927 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 18:14:32,928 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 18:14:32,928 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 18:14:32,928 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 18:14:32,928 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 18:14:32,928 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 18:14:32,928 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 18:14:32,928 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 18:14:32,928 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 18:14:32,928 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 18:14:32,928 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 18:14:32,928 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 18:14:32,928 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 18:14:32,929 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 18:14:32,929 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 18:14:32,929 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 18:14:32,929 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:14:32,929 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 18:14:32,929 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 18:14:32,929 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 18:14:32,929 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 18:14:32,929 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 18:14:32,929 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 18:14:32,930 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 18:14:32,930 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 18:14:32,930 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 18:14:32,930 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 18:14:32,930 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 18:14:32,930 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_LAZY WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 18:14:33,094 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 18:14:33,107 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 18:14:33,109 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 18:14:33,109 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 18:14:33,110 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 18:14:33,110 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product51.cil.c [2022-01-10 18:14:33,185 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/85181b443/d9063f73688c44eba01bade841342503/FLAGee57171f4 [2022-01-10 18:14:33,502 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 18:14:33,503 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product51.cil.c [2022-01-10 18:14:33,513 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/85181b443/d9063f73688c44eba01bade841342503/FLAGee57171f4 [2022-01-10 18:14:33,914 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/85181b443/d9063f73688c44eba01bade841342503 [2022-01-10 18:14:33,916 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 18:14:33,917 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 18:14:33,919 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 18:14:33,920 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 18:14:33,926 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 18:14:33,927 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:14:33" (1/1) ... [2022-01-10 18:14:33,928 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@d8e8bcf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:33, skipping insertion in model container [2022-01-10 18:14:33,928 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:14:33" (1/1) ... [2022-01-10 18:14:33,933 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 18:14:33,969 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:14:34,163 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2022-01-10 18:14:34,198 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:14:34,211 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 18:14:34,220 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:14:34,252 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2022-01-10 18:14:34,273 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:14:34,276 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 18:14:34,296 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product51.cil.c[9329,9342] [2022-01-10 18:14:34,309 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:14:34,321 INFO L208 MainTranslator]: Completed translation [2022-01-10 18:14:34,322 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34 WrapperNode [2022-01-10 18:14:34,322 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 18:14:34,323 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 18:14:34,323 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 18:14:34,323 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 18:14:34,334 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34" (1/1) ... [2022-01-10 18:14:34,345 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34" (1/1) ... [2022-01-10 18:14:34,373 INFO L137 Inliner]: procedures = 59, calls = 157, calls flagged for inlining = 54, calls inlined = 80, statements flattened = 622 [2022-01-10 18:14:34,377 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 18:14:34,377 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 18:14:34,377 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 18:14:34,377 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 18:14:34,383 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34" (1/1) ... [2022-01-10 18:14:34,383 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34" (1/1) ... [2022-01-10 18:14:34,386 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34" (1/1) ... [2022-01-10 18:14:34,387 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34" (1/1) ... [2022-01-10 18:14:34,395 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34" (1/1) ... [2022-01-10 18:14:34,406 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34" (1/1) ... [2022-01-10 18:14:34,408 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34" (1/1) ... [2022-01-10 18:14:34,411 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 18:14:34,417 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 18:14:34,418 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 18:14:34,418 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 18:14:34,419 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34" (1/1) ... [2022-01-10 18:14:34,432 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:14:34,440 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:14:34,453 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 18:14:34,455 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 18:14:34,478 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 18:14:34,478 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 18:14:34,478 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 18:14:34,478 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 18:14:34,551 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 18:14:34,552 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 18:14:34,914 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 18:14:34,920 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 18:14:34,920 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 18:14:34,921 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:14:34 BoogieIcfgContainer [2022-01-10 18:14:34,922 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 18:14:34,922 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 18:14:34,922 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 18:14:34,923 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 18:14:34,929 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:14:34" (1/1) ... [2022-01-10 18:14:35,070 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:14:35 BasicIcfg [2022-01-10 18:14:35,070 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 18:14:35,071 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 18:14:35,072 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 18:14:35,073 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 18:14:35,074 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 06:14:33" (1/4) ... [2022-01-10 18:14:35,074 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4bd98698 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:14:35, skipping insertion in model container [2022-01-10 18:14:35,074 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:34" (2/4) ... [2022-01-10 18:14:35,074 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4bd98698 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:14:35, skipping insertion in model container [2022-01-10 18:14:35,074 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:14:34" (3/4) ... [2022-01-10 18:14:35,075 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4bd98698 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:14:35, skipping insertion in model container [2022-01-10 18:14:35,075 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:14:35" (4/4) ... [2022-01-10 18:14:35,075 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product51.cil.cTransformedIcfg [2022-01-10 18:14:35,079 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 18:14:35,081 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 18:14:35,130 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 18:14:35,134 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 18:14:35,134 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 18:14:35,151 INFO L276 IsEmpty]: Start isEmpty. Operand has 173 states, 169 states have (on average 1.4023668639053255) internal successors, (237), 172 states have internal predecessors, (237), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-10 18:14:35,156 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:35,156 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:35,157 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:35,163 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:35,164 INFO L85 PathProgramCache]: Analyzing trace with hash -2002837841, now seen corresponding path program 1 times [2022-01-10 18:14:35,170 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:35,170 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [994733775] [2022-01-10 18:14:35,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:35,171 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:35,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:35,333 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:35,333 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:35,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [994733775] [2022-01-10 18:14:35,334 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [994733775] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:35,334 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:35,334 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:14:35,335 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1749373154] [2022-01-10 18:14:35,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:35,339 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 18:14:35,339 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:35,380 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 18:14:35,381 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:14:35,382 INFO L87 Difference]: Start difference. First operand has 173 states, 169 states have (on average 1.4023668639053255) internal successors, (237), 172 states have internal predecessors, (237), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:35,423 INFO L93 Difference]: Finished difference Result 335 states and 462 transitions. [2022-01-10 18:14:35,426 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 18:14:35,427 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-10 18:14:35,427 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:35,435 INFO L225 Difference]: With dead ends: 335 [2022-01-10 18:14:35,436 INFO L226 Difference]: Without dead ends: 163 [2022-01-10 18:14:35,439 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:14:35,443 INFO L933 BasicCegarLoop]: 227 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:35,445 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 227 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:35,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2022-01-10 18:14:35,491 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 163. [2022-01-10 18:14:35,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 163 states, 160 states have (on average 1.36875) internal successors, (219), 162 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 163 states to 163 states and 219 transitions. [2022-01-10 18:14:35,503 INFO L78 Accepts]: Start accepts. Automaton has 163 states and 219 transitions. Word has length 19 [2022-01-10 18:14:35,503 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:35,503 INFO L470 AbstractCegarLoop]: Abstraction has 163 states and 219 transitions. [2022-01-10 18:14:35,503 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,503 INFO L276 IsEmpty]: Start isEmpty. Operand 163 states and 219 transitions. [2022-01-10 18:14:35,504 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-10 18:14:35,504 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:35,504 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:35,504 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 18:14:35,505 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:35,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:35,505 INFO L85 PathProgramCache]: Analyzing trace with hash 479345203, now seen corresponding path program 1 times [2022-01-10 18:14:35,505 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:35,506 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1412483962] [2022-01-10 18:14:35,506 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:35,506 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:35,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:35,568 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:35,569 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:35,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1412483962] [2022-01-10 18:14:35,569 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1412483962] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:35,569 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:35,569 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:14:35,569 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1936928162] [2022-01-10 18:14:35,569 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:35,570 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:35,570 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:35,571 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:35,571 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:35,571 INFO L87 Difference]: Start difference. First operand 163 states and 219 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:35,621 INFO L93 Difference]: Finished difference Result 382 states and 517 transitions. [2022-01-10 18:14:35,621 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:35,621 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-10 18:14:35,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:35,623 INFO L225 Difference]: With dead ends: 382 [2022-01-10 18:14:35,623 INFO L226 Difference]: Without dead ends: 227 [2022-01-10 18:14:35,623 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:35,624 INFO L933 BasicCegarLoop]: 228 mSDtfsCounter, 202 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 202 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:35,625 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [202 Valid, 309 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:35,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2022-01-10 18:14:35,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 218. [2022-01-10 18:14:35,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 215 states have (on average 1.3767441860465117) internal successors, (296), 217 states have internal predecessors, (296), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 296 transitions. [2022-01-10 18:14:35,639 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 296 transitions. Word has length 20 [2022-01-10 18:14:35,639 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:35,639 INFO L470 AbstractCegarLoop]: Abstraction has 218 states and 296 transitions. [2022-01-10 18:14:35,639 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,640 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 296 transitions. [2022-01-10 18:14:35,640 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-10 18:14:35,640 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:35,641 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:35,641 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 18:14:35,641 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:35,641 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:35,641 INFO L85 PathProgramCache]: Analyzing trace with hash -419026856, now seen corresponding path program 1 times [2022-01-10 18:14:35,641 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:35,642 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [801023728] [2022-01-10 18:14:35,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:35,642 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:35,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:35,703 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:35,704 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:35,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [801023728] [2022-01-10 18:14:35,704 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [801023728] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:35,704 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:35,704 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:14:35,704 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1721035790] [2022-01-10 18:14:35,705 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:35,705 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:35,705 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:35,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:35,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:35,706 INFO L87 Difference]: Start difference. First operand 218 states and 296 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,805 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:35,806 INFO L93 Difference]: Finished difference Result 487 states and 660 transitions. [2022-01-10 18:14:35,806 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:35,806 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-10 18:14:35,807 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:35,808 INFO L225 Difference]: With dead ends: 487 [2022-01-10 18:14:35,808 INFO L226 Difference]: Without dead ends: 277 [2022-01-10 18:14:35,811 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:35,812 INFO L933 BasicCegarLoop]: 225 mSDtfsCounter, 140 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 332 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:35,812 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [140 Valid, 332 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:14:35,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2022-01-10 18:14:35,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 271. [2022-01-10 18:14:35,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 268 states have (on average 1.328358208955224) internal successors, (356), 270 states have internal predecessors, (356), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 356 transitions. [2022-01-10 18:14:35,833 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 356 transitions. Word has length 25 [2022-01-10 18:14:35,833 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:35,833 INFO L470 AbstractCegarLoop]: Abstraction has 271 states and 356 transitions. [2022-01-10 18:14:35,833 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,834 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 356 transitions. [2022-01-10 18:14:35,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-01-10 18:14:35,834 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:35,834 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:35,835 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 18:14:35,835 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:35,842 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:35,842 INFO L85 PathProgramCache]: Analyzing trace with hash 1020567160, now seen corresponding path program 1 times [2022-01-10 18:14:35,842 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:35,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [767410189] [2022-01-10 18:14:35,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:35,843 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:35,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:35,908 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:35,909 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:35,909 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [767410189] [2022-01-10 18:14:35,909 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [767410189] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:35,909 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:35,909 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:14:35,909 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [340109419] [2022-01-10 18:14:35,909 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:35,909 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:35,910 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:35,910 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:35,910 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:35,910 INFO L87 Difference]: Start difference. First operand 271 states and 356 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:35,959 INFO L93 Difference]: Finished difference Result 534 states and 704 transitions. [2022-01-10 18:14:35,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:35,959 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-01-10 18:14:35,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:35,963 INFO L225 Difference]: With dead ends: 534 [2022-01-10 18:14:35,963 INFO L226 Difference]: Without dead ends: 528 [2022-01-10 18:14:35,963 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:35,967 INFO L933 BasicCegarLoop]: 210 mSDtfsCounter, 175 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 175 SdHoareTripleChecker+Valid, 403 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:35,968 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [175 Valid, 403 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:35,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 528 states. [2022-01-10 18:14:35,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 528 to 528. [2022-01-10 18:14:35,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 528 states, 525 states have (on average 1.318095238095238) internal successors, (692), 527 states have internal predecessors, (692), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 528 states to 528 states and 692 transitions. [2022-01-10 18:14:35,994 INFO L78 Accepts]: Start accepts. Automaton has 528 states and 692 transitions. Word has length 30 [2022-01-10 18:14:35,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:35,994 INFO L470 AbstractCegarLoop]: Abstraction has 528 states and 692 transitions. [2022-01-10 18:14:35,994 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:35,994 INFO L276 IsEmpty]: Start isEmpty. Operand 528 states and 692 transitions. [2022-01-10 18:14:35,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-01-10 18:14:35,996 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:35,996 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:35,996 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 18:14:35,996 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:35,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:35,997 INFO L85 PathProgramCache]: Analyzing trace with hash -814713549, now seen corresponding path program 1 times [2022-01-10 18:14:35,997 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:35,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [267760806] [2022-01-10 18:14:35,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:35,997 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:36,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:36,053 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:36,053 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:36,054 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [267760806] [2022-01-10 18:14:36,054 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [267760806] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:36,054 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:36,054 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:14:36,054 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [268879327] [2022-01-10 18:14:36,054 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:36,054 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:36,054 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:36,055 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:36,055 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:36,055 INFO L87 Difference]: Start difference. First operand 528 states and 692 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:36,083 INFO L93 Difference]: Finished difference Result 528 states and 692 transitions. [2022-01-10 18:14:36,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:36,084 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-01-10 18:14:36,084 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:36,085 INFO L225 Difference]: With dead ends: 528 [2022-01-10 18:14:36,085 INFO L226 Difference]: Without dead ends: 234 [2022-01-10 18:14:36,086 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:36,086 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 60 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:36,087 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [60 Valid, 97 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:36,087 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2022-01-10 18:14:36,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 234. [2022-01-10 18:14:36,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 234 states, 233 states have (on average 1.3390557939914163) internal successors, (312), 233 states have internal predecessors, (312), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 312 transitions. [2022-01-10 18:14:36,101 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 312 transitions. Word has length 43 [2022-01-10 18:14:36,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:36,101 INFO L470 AbstractCegarLoop]: Abstraction has 234 states and 312 transitions. [2022-01-10 18:14:36,102 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,102 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 312 transitions. [2022-01-10 18:14:36,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-01-10 18:14:36,103 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:36,103 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:36,103 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 18:14:36,103 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:36,104 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:36,104 INFO L85 PathProgramCache]: Analyzing trace with hash 1832947260, now seen corresponding path program 1 times [2022-01-10 18:14:36,104 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:36,104 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1379317393] [2022-01-10 18:14:36,104 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:36,104 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:36,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:36,170 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-01-10 18:14:36,170 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:36,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1379317393] [2022-01-10 18:14:36,170 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1379317393] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:36,170 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:36,171 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:14:36,171 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [976871735] [2022-01-10 18:14:36,171 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:36,171 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:14:36,171 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:36,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:14:36,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:36,172 INFO L87 Difference]: Start difference. First operand 234 states and 312 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,254 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:36,254 INFO L93 Difference]: Finished difference Result 928 states and 1238 transitions. [2022-01-10 18:14:36,255 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 18:14:36,255 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-01-10 18:14:36,256 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:36,258 INFO L225 Difference]: With dead ends: 928 [2022-01-10 18:14:36,258 INFO L226 Difference]: Without dead ends: 702 [2022-01-10 18:14:36,259 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 18:14:36,263 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 396 mSDsluCounter, 467 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 396 SdHoareTripleChecker+Valid, 594 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:36,266 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [396 Valid, 594 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:36,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 702 states. [2022-01-10 18:14:36,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 702 to 337. [2022-01-10 18:14:36,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 337 states, 336 states have (on average 1.3214285714285714) internal successors, (444), 336 states have internal predecessors, (444), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 337 states to 337 states and 444 transitions. [2022-01-10 18:14:36,304 INFO L78 Accepts]: Start accepts. Automaton has 337 states and 444 transitions. Word has length 49 [2022-01-10 18:14:36,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:36,305 INFO L470 AbstractCegarLoop]: Abstraction has 337 states and 444 transitions. [2022-01-10 18:14:36,305 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,305 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 444 transitions. [2022-01-10 18:14:36,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-01-10 18:14:36,309 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:36,309 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:36,309 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 18:14:36,309 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:36,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:36,310 INFO L85 PathProgramCache]: Analyzing trace with hash -1431350410, now seen corresponding path program 1 times [2022-01-10 18:14:36,310 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:36,310 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [117509072] [2022-01-10 18:14:36,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:36,310 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:36,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:36,412 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-01-10 18:14:36,412 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:36,413 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [117509072] [2022-01-10 18:14:36,413 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [117509072] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:36,413 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:36,413 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:14:36,413 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [506630097] [2022-01-10 18:14:36,413 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:36,414 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:14:36,414 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:36,414 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:14:36,414 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:36,414 INFO L87 Difference]: Start difference. First operand 337 states and 444 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:36,539 INFO L93 Difference]: Finished difference Result 1042 states and 1366 transitions. [2022-01-10 18:14:36,540 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-10 18:14:36,540 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-01-10 18:14:36,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:36,542 INFO L225 Difference]: With dead ends: 1042 [2022-01-10 18:14:36,542 INFO L226 Difference]: Without dead ends: 713 [2022-01-10 18:14:36,543 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 18:14:36,546 INFO L933 BasicCegarLoop]: 193 mSDtfsCounter, 312 mSDsluCounter, 445 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 638 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:36,547 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [312 Valid, 638 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:36,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 713 states. [2022-01-10 18:14:36,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 713 to 284. [2022-01-10 18:14:36,572 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 284 states, 283 states have (on average 1.3109540636042403) internal successors, (371), 283 states have internal predecessors, (371), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 284 states to 284 states and 371 transitions. [2022-01-10 18:14:36,573 INFO L78 Accepts]: Start accepts. Automaton has 284 states and 371 transitions. Word has length 51 [2022-01-10 18:14:36,573 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:36,573 INFO L470 AbstractCegarLoop]: Abstraction has 284 states and 371 transitions. [2022-01-10 18:14:36,573 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,573 INFO L276 IsEmpty]: Start isEmpty. Operand 284 states and 371 transitions. [2022-01-10 18:14:36,575 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-01-10 18:14:36,575 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:36,575 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:36,575 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 18:14:36,575 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:36,576 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:36,576 INFO L85 PathProgramCache]: Analyzing trace with hash -282706432, now seen corresponding path program 1 times [2022-01-10 18:14:36,576 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:36,577 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1572324868] [2022-01-10 18:14:36,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:36,577 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:36,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:36,640 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:36,640 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:36,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1572324868] [2022-01-10 18:14:36,640 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1572324868] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:36,640 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:36,640 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:14:36,641 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2045873738] [2022-01-10 18:14:36,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:36,641 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:36,642 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:36,642 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:36,642 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:36,642 INFO L87 Difference]: Start difference. First operand 284 states and 371 transitions. Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:36,679 INFO L93 Difference]: Finished difference Result 534 states and 699 transitions. [2022-01-10 18:14:36,679 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:36,679 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-01-10 18:14:36,681 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:36,682 INFO L225 Difference]: With dead ends: 534 [2022-01-10 18:14:36,682 INFO L226 Difference]: Without dead ends: 258 [2022-01-10 18:14:36,682 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:36,684 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 30 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 154 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:36,684 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [30 Valid, 154 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:36,685 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 258 states. [2022-01-10 18:14:36,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 258 to 258. [2022-01-10 18:14:36,709 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 257 states have (on average 1.2607003891050583) internal successors, (324), 257 states have internal predecessors, (324), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 324 transitions. [2022-01-10 18:14:36,710 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 324 transitions. Word has length 69 [2022-01-10 18:14:36,710 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:36,711 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 324 transitions. [2022-01-10 18:14:36,711 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,711 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 324 transitions. [2022-01-10 18:14:36,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-01-10 18:14:36,712 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:36,712 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:36,712 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 18:14:36,712 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:36,712 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:36,713 INFO L85 PathProgramCache]: Analyzing trace with hash 510973164, now seen corresponding path program 1 times [2022-01-10 18:14:36,713 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:36,713 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [771718697] [2022-01-10 18:14:36,713 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:36,713 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:36,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:36,794 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 18:14:36,794 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:36,794 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [771718697] [2022-01-10 18:14:36,794 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [771718697] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:36,794 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:36,794 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:14:36,794 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349050091] [2022-01-10 18:14:36,794 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:36,795 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:14:36,795 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:36,798 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:14:36,799 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:36,799 INFO L87 Difference]: Start difference. First operand 258 states and 324 transitions. Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:36,864 INFO L93 Difference]: Finished difference Result 719 states and 906 transitions. [2022-01-10 18:14:36,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 18:14:36,865 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-01-10 18:14:36,865 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:36,867 INFO L225 Difference]: With dead ends: 719 [2022-01-10 18:14:36,867 INFO L226 Difference]: Without dead ends: 469 [2022-01-10 18:14:36,867 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:14:36,868 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 156 mSDsluCounter, 298 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 410 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:36,869 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [156 Valid, 410 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:36,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 469 states. [2022-01-10 18:14:36,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 469 to 264. [2022-01-10 18:14:36,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 263 states have (on average 1.2547528517110267) internal successors, (330), 263 states have internal predecessors, (330), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 330 transitions. [2022-01-10 18:14:36,888 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 330 transitions. Word has length 70 [2022-01-10 18:14:36,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:36,888 INFO L470 AbstractCegarLoop]: Abstraction has 264 states and 330 transitions. [2022-01-10 18:14:36,888 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,888 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 330 transitions. [2022-01-10 18:14:36,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-01-10 18:14:36,889 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:36,889 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:36,889 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 18:14:36,889 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:36,889 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:36,889 INFO L85 PathProgramCache]: Analyzing trace with hash -1189767315, now seen corresponding path program 1 times [2022-01-10 18:14:36,890 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:36,890 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [689780812] [2022-01-10 18:14:36,890 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:36,890 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:36,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:36,929 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 18:14:36,929 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:36,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [689780812] [2022-01-10 18:14:36,929 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [689780812] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:36,930 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:36,930 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:14:36,930 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1613394534] [2022-01-10 18:14:36,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:36,930 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 18:14:36,930 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:36,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 18:14:36,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 18:14:36,931 INFO L87 Difference]: Start difference. First operand 264 states and 330 transitions. Second operand has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:36,977 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:36,977 INFO L93 Difference]: Finished difference Result 740 states and 927 transitions. [2022-01-10 18:14:36,977 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:14:36,977 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-01-10 18:14:36,978 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:36,980 INFO L225 Difference]: With dead ends: 740 [2022-01-10 18:14:36,980 INFO L226 Difference]: Without dead ends: 484 [2022-01-10 18:14:36,980 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:36,981 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 126 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:36,981 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [126 Valid, 298 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:36,982 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 484 states. [2022-01-10 18:14:37,000 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 484 to 268. [2022-01-10 18:14:37,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 268 states, 267 states have (on average 1.250936329588015) internal successors, (334), 267 states have internal predecessors, (334), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:37,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 268 states to 268 states and 334 transitions. [2022-01-10 18:14:37,001 INFO L78 Accepts]: Start accepts. Automaton has 268 states and 334 transitions. Word has length 70 [2022-01-10 18:14:37,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:37,002 INFO L470 AbstractCegarLoop]: Abstraction has 268 states and 334 transitions. [2022-01-10 18:14:37,002 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:37,002 INFO L276 IsEmpty]: Start isEmpty. Operand 268 states and 334 transitions. [2022-01-10 18:14:37,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2022-01-10 18:14:37,003 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:37,003 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:37,003 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-10 18:14:37,003 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:37,004 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:37,004 INFO L85 PathProgramCache]: Analyzing trace with hash 781172142, now seen corresponding path program 1 times [2022-01-10 18:14:37,004 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:37,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1962572502] [2022-01-10 18:14:37,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:37,004 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:37,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:37,070 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 18:14:37,070 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:37,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1962572502] [2022-01-10 18:14:37,071 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1962572502] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:37,071 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:37,071 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:14:37,071 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [382975659] [2022-01-10 18:14:37,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:37,071 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:37,071 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:37,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:37,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:37,072 INFO L87 Difference]: Start difference. First operand 268 states and 334 transitions. Second operand has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 2 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:37,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:37,108 INFO L93 Difference]: Finished difference Result 640 states and 800 transitions. [2022-01-10 18:14:37,109 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:37,109 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 2 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 70 [2022-01-10 18:14:37,109 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:37,111 INFO L225 Difference]: With dead ends: 640 [2022-01-10 18:14:37,111 INFO L226 Difference]: Without dead ends: 380 [2022-01-10 18:14:37,113 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:37,113 INFO L933 BasicCegarLoop]: 77 mSDtfsCounter, 27 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:37,113 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 141 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:37,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 380 states. [2022-01-10 18:14:37,138 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 380 to 380. [2022-01-10 18:14:37,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 380 states, 379 states have (on average 1.2348284960422165) internal successors, (468), 379 states have internal predecessors, (468), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:37,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 380 states to 380 states and 468 transitions. [2022-01-10 18:14:37,139 INFO L78 Accepts]: Start accepts. Automaton has 380 states and 468 transitions. Word has length 70 [2022-01-10 18:14:37,140 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:37,140 INFO L470 AbstractCegarLoop]: Abstraction has 380 states and 468 transitions. [2022-01-10 18:14:37,140 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 2 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:37,140 INFO L276 IsEmpty]: Start isEmpty. Operand 380 states and 468 transitions. [2022-01-10 18:14:37,144 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-01-10 18:14:37,144 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:37,144 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:37,144 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 18:14:37,145 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:37,145 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:37,145 INFO L85 PathProgramCache]: Analyzing trace with hash -1517987148, now seen corresponding path program 1 times [2022-01-10 18:14:37,145 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:37,145 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1497226170] [2022-01-10 18:14:37,145 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:37,145 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:37,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:37,222 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 18:14:37,222 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:37,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1497226170] [2022-01-10 18:14:37,223 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1497226170] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 18:14:37,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1171471055] [2022-01-10 18:14:37,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:37,223 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 18:14:37,223 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:14:37,228 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 18:14:37,237 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-10 18:14:37,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:37,357 INFO L263 TraceCheckSpWp]: Trace formula consists of 609 conjuncts, 12 conjunts are in the unsatisfiable core [2022-01-10 18:14:37,363 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 18:14:37,907 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 18:14:37,908 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 18:14:38,070 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-01-10 18:14:38,070 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1171471055] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 18:14:38,071 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 18:14:38,071 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 6] total 9 [2022-01-10 18:14:38,071 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [7197610] [2022-01-10 18:14:38,071 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 18:14:38,071 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-01-10 18:14:38,071 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:38,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-01-10 18:14:38,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2022-01-10 18:14:38,072 INFO L87 Difference]: Start difference. First operand 380 states and 468 transitions. Second operand has 10 states, 10 states have (on average 12.5) internal successors, (125), 9 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:38,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:38,765 INFO L93 Difference]: Finished difference Result 3282 states and 4102 transitions. [2022-01-10 18:14:38,766 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-01-10 18:14:38,766 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 12.5) internal successors, (125), 9 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 72 [2022-01-10 18:14:38,766 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:38,774 INFO L225 Difference]: With dead ends: 3282 [2022-01-10 18:14:38,774 INFO L226 Difference]: Without dead ends: 3022 [2022-01-10 18:14:38,775 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 135 SyntacticMatches, 5 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 110 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=163, Invalid=389, Unknown=0, NotChecked=0, Total=552 [2022-01-10 18:14:38,775 INFO L933 BasicCegarLoop]: 245 mSDtfsCounter, 1051 mSDsluCounter, 1225 mSDsCounter, 0 mSdLazyCounter, 187 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1051 SdHoareTripleChecker+Valid, 1470 SdHoareTripleChecker+Invalid, 225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 187 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:38,776 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1051 Valid, 1470 Invalid, 225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 187 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 18:14:38,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3022 states. [2022-01-10 18:14:38,872 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3022 to 1013. [2022-01-10 18:14:38,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1013 states, 1012 states have (on average 1.2371541501976284) internal successors, (1252), 1012 states have internal predecessors, (1252), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:38,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1013 states to 1013 states and 1252 transitions. [2022-01-10 18:14:38,876 INFO L78 Accepts]: Start accepts. Automaton has 1013 states and 1252 transitions. Word has length 72 [2022-01-10 18:14:38,876 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:38,876 INFO L470 AbstractCegarLoop]: Abstraction has 1013 states and 1252 transitions. [2022-01-10 18:14:38,876 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 12.5) internal successors, (125), 9 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:38,876 INFO L276 IsEmpty]: Start isEmpty. Operand 1013 states and 1252 transitions. [2022-01-10 18:14:38,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-01-10 18:14:38,877 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:38,877 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:38,901 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-01-10 18:14:39,095 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-10 18:14:39,096 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:39,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:39,096 INFO L85 PathProgramCache]: Analyzing trace with hash -10435339, now seen corresponding path program 1 times [2022-01-10 18:14:39,096 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:39,096 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [188443442] [2022-01-10 18:14:39,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:39,097 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:39,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:39,148 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-01-10 18:14:39,148 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:39,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [188443442] [2022-01-10 18:14:39,148 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [188443442] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:39,148 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:39,149 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:14:39,149 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [549128339] [2022-01-10 18:14:39,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:39,149 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:14:39,149 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:39,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:14:39,149 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:39,149 INFO L87 Difference]: Start difference. First operand 1013 states and 1252 transitions. Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:39,262 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:39,262 INFO L93 Difference]: Finished difference Result 1878 states and 2299 transitions. [2022-01-10 18:14:39,263 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:14:39,263 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 72 [2022-01-10 18:14:39,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:39,266 INFO L225 Difference]: With dead ends: 1878 [2022-01-10 18:14:39,266 INFO L226 Difference]: Without dead ends: 873 [2022-01-10 18:14:39,268 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:14:39,269 INFO L933 BasicCegarLoop]: 129 mSDtfsCounter, 229 mSDsluCounter, 261 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 390 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:39,269 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [229 Valid, 390 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:39,271 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 873 states. [2022-01-10 18:14:39,307 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 873 to 356. [2022-01-10 18:14:39,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 356 states, 355 states have (on average 1.1971830985915493) internal successors, (425), 355 states have internal predecessors, (425), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:39,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 425 transitions. [2022-01-10 18:14:39,308 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 425 transitions. Word has length 72 [2022-01-10 18:14:39,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:39,309 INFO L470 AbstractCegarLoop]: Abstraction has 356 states and 425 transitions. [2022-01-10 18:14:39,309 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:39,309 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 425 transitions. [2022-01-10 18:14:39,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-01-10 18:14:39,309 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:39,310 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:39,310 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-01-10 18:14:39,310 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:39,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:39,310 INFO L85 PathProgramCache]: Analyzing trace with hash 246547903, now seen corresponding path program 1 times [2022-01-10 18:14:39,310 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:39,310 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [159580052] [2022-01-10 18:14:39,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:39,310 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:39,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:39,344 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-01-10 18:14:39,345 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:39,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [159580052] [2022-01-10 18:14:39,345 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [159580052] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:39,345 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:39,345 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:14:39,345 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1732419044] [2022-01-10 18:14:39,345 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:39,346 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:39,346 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:39,346 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:39,346 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:39,346 INFO L87 Difference]: Start difference. First operand 356 states and 425 transitions. Second operand has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 3 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:39,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:39,394 INFO L93 Difference]: Finished difference Result 693 states and 827 transitions. [2022-01-10 18:14:39,394 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:39,394 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 3 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 76 [2022-01-10 18:14:39,394 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:39,394 INFO L225 Difference]: With dead ends: 693 [2022-01-10 18:14:39,394 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 18:14:39,395 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:39,396 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 29 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:39,396 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [29 Valid, 157 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:39,396 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 18:14:39,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 18:14:39,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:39,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 18:14:39,397 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 76 [2022-01-10 18:14:39,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:39,397 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 18:14:39,397 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.666666666666668) internal successors, (71), 3 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:39,397 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 18:14:39,397 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 18:14:39,399 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 18:14:39,400 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 18:14:39,400 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 18:14:39,400 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-01-10 18:14:39,402 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 18:14:52,875 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 18:14:52,875 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 18:14:52,875 INFO L854 garLoopResultBuilder]: At program point L409(lines 405 411) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:14:52,875 INFO L854 garLoopResultBuilder]: At program point L402(lines 398 404) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:14:52,875 INFO L854 garLoopResultBuilder]: At program point L417(lines 412 420) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:14:52,875 INFO L858 garLoopResultBuilder]: For program point L609(lines 609 616) no Hoare annotation was computed. [2022-01-10 18:14:52,876 INFO L854 garLoopResultBuilder]: At program point L585(lines 581 587) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:14:52,876 INFO L858 garLoopResultBuilder]: For program point L609-2(lines 609 616) no Hoare annotation was computed. [2022-01-10 18:14:52,876 INFO L854 garLoopResultBuilder]: At program point L351(lines 346 353) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:14:52,876 INFO L861 garLoopResultBuilder]: At program point L618(lines 599 621) the Hoare annotation is: true [2022-01-10 18:14:52,876 INFO L854 garLoopResultBuilder]: At program point L65-2(lines 65 112) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse3 .cse5 .cse8 .cse6) (and .cse0 .cse1 .cse9 .cse4 .cse5 (= ~pumpRunning~0Int 1)) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6))) [2022-01-10 18:14:52,876 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 18:14:52,876 INFO L854 garLoopResultBuilder]: At program point L113(lines 64 114) the Hoare annotation is: false [2022-01-10 18:14:52,876 INFO L858 garLoopResultBuilder]: For program point L66(lines 65 112) no Hoare annotation was computed. [2022-01-10 18:14:52,876 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 18:14:52,876 INFO L858 garLoopResultBuilder]: For program point L139-3(lines 139 145) no Hoare annotation was computed. [2022-01-10 18:14:52,876 INFO L858 garLoopResultBuilder]: For program point L67(lines 67 71) no Hoare annotation was computed. [2022-01-10 18:14:52,876 INFO L858 garLoopResultBuilder]: For program point L429-3(lines 429 433) no Hoare annotation was computed. [2022-01-10 18:14:52,876 INFO L858 garLoopResultBuilder]: For program point L139-5(lines 138 157) no Hoare annotation was computed. [2022-01-10 18:14:52,876 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 81) no Hoare annotation was computed. [2022-01-10 18:14:52,876 INFO L854 garLoopResultBuilder]: At program point L429-5(lines 425 436) the Hoare annotation is: false [2022-01-10 18:14:52,877 INFO L858 garLoopResultBuilder]: For program point L197-2(lines 197 214) no Hoare annotation was computed. [2022-01-10 18:14:52,877 INFO L858 garLoopResultBuilder]: For program point L146-3(lines 146 152) no Hoare annotation was computed. [2022-01-10 18:14:52,877 INFO L858 garLoopResultBuilder]: For program point L441(lines 441 445) no Hoare annotation was computed. [2022-01-10 18:14:52,877 INFO L858 garLoopResultBuilder]: For program point L75-2(lines 75 81) no Hoare annotation was computed. [2022-01-10 18:14:52,877 INFO L854 garLoopResultBuilder]: At program point L521-1(lines 516 524) the Hoare annotation is: false [2022-01-10 18:14:52,877 INFO L858 garLoopResultBuilder]: For program point L171-6(lines 171 188) no Hoare annotation was computed. [2022-01-10 18:14:52,877 INFO L854 garLoopResultBuilder]: At program point L466-1(lines 461 469) the Hoare annotation is: false [2022-01-10 18:14:52,878 INFO L854 garLoopResultBuilder]: At program point L441-2(lines 437 448) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse6 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (= ~systemActive~0Int 0) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse4 (= ~pumpRunning~0Int 1)) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-01-10 18:14:52,878 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-01-10 18:14:52,878 INFO L858 garLoopResultBuilder]: For program point L318-3(lines 318 322) no Hoare annotation was computed. [2022-01-10 18:14:52,878 INFO L858 garLoopResultBuilder]: For program point L506-3(lines 506 512) no Hoare annotation was computed. [2022-01-10 18:14:52,878 INFO L854 garLoopResultBuilder]: At program point L163-7(lines 159 165) the Hoare annotation is: false [2022-01-10 18:14:52,878 INFO L858 garLoopResultBuilder]: For program point L362-2(lines 362 379) no Hoare annotation was computed. [2022-01-10 18:14:52,878 INFO L858 garLoopResultBuilder]: For program point L453(lines 453 457) no Hoare annotation was computed. [2022-01-10 18:14:52,878 INFO L858 garLoopResultBuilder]: For program point L85-2(lines 85 91) no Hoare annotation was computed. [2022-01-10 18:14:52,878 INFO L858 garLoopResultBuilder]: For program point L318-5(lines 318 322) no Hoare annotation was computed. [2022-01-10 18:14:52,878 INFO L854 garLoopResultBuilder]: At program point L511-3(lines 502 515) the Hoare annotation is: false [2022-01-10 18:14:52,878 INFO L854 garLoopResultBuilder]: At program point L171-7(lines 167 191) the Hoare annotation is: false [2022-01-10 18:14:52,878 INFO L854 garLoopResultBuilder]: At program point L250-1(lines 245 253) the Hoare annotation is: false [2022-01-10 18:14:52,878 INFO L854 garLoopResultBuilder]: At program point L362-3(lines 354 382) the Hoare annotation is: false [2022-01-10 18:14:52,878 INFO L854 garLoopResultBuilder]: At program point L453-2(lines 449 460) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse9 (<= 1 ~waterLevel~0Int)) (.cse10 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse8 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse3 .cse5 .cse9 .cse10) (and .cse7 .cse2 .cse3 .cse5 .cse9 .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse10) (and .cse7 .cse2 .cse3 .cse5 .cse9 .cse10) (and .cse7 .cse8 .cse3 .cse5 .cse9 .cse6) (and .cse0 .cse1 .cse8 .cse4 .cse5 (= ~pumpRunning~0Int 1)) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse10) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6))) [2022-01-10 18:14:52,878 INFO L858 garLoopResultBuilder]: For program point L95(lines 95 108) no Hoare annotation was computed. [2022-01-10 18:14:52,878 INFO L854 garLoopResultBuilder]: At program point L324-1(lines 309 327) the Hoare annotation is: false [2022-01-10 18:14:52,878 INFO L858 garLoopResultBuilder]: For program point L299-9(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,878 INFO L854 garLoopResultBuilder]: At program point L197-3(lines 193 217) the Hoare annotation is: false [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L366-2(lines 366 376) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L854 garLoopResultBuilder]: At program point L156-1(lines 135 158) the Hoare annotation is: false [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L101-2(lines 95 108) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L101(lines 101 107) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L201-3(lines 201 209) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L299-11(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L367-3(lines 367 373) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L854 garLoopResultBuilder]: At program point L537-2(lines 537 551) the Hoare annotation is: false [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L139(lines 139 145) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L332(lines 332 338) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L854 garLoopResultBuilder]: At program point L231-2(lines 226 233) the Hoare annotation is: false [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L171-4(lines 171 188) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L854 garLoopResultBuilder]: At program point L305-3(lines 290 308) the Hoare annotation is: false [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L627-1(line 627) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L861 garLoopResultBuilder]: At program point L552(lines 527 556) the Hoare annotation is: true [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L538(line 538) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L429(lines 429 433) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L139-2(lines 138 157) no Hoare annotation was computed. [2022-01-10 18:14:52,879 INFO L854 garLoopResultBuilder]: At program point L231(lines 226 233) the Hoare annotation is: (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) (= ~pumpRunning~0Int 0) (<= 0 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) [2022-01-10 18:14:52,879 INFO L858 garLoopResultBuilder]: For program point L332-2(lines 332 338) no Hoare annotation was computed. [2022-01-10 18:14:52,880 INFO L858 garLoopResultBuilder]: For program point L506-2(lines 506 512) no Hoare annotation was computed. [2022-01-10 18:14:52,880 INFO L854 garLoopResultBuilder]: At program point L163-5(lines 159 165) the Hoare annotation is: false [2022-01-10 18:14:52,880 INFO L858 garLoopResultBuilder]: For program point L175-9(lines 175 183) no Hoare annotation was computed. [2022-01-10 18:14:52,880 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 627) no Hoare annotation was computed. [2022-01-10 18:14:52,880 INFO L854 garLoopResultBuilder]: At program point L628-1(lines 623 630) the Hoare annotation is: false [2022-01-10 18:14:52,880 INFO L861 garLoopResultBuilder]: At program point L118(lines 55 120) the Hoare annotation is: true [2022-01-10 18:14:52,880 INFO L858 garLoopResultBuilder]: For program point L541(lines 541 545) no Hoare annotation was computed. [2022-01-10 18:14:52,880 INFO L854 garLoopResultBuilder]: At program point L429-2(lines 425 436) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (= ~pumpRunning~0Int 1) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:14:52,880 INFO L858 garLoopResultBuilder]: For program point L197(lines 197 214) no Hoare annotation was computed. [2022-01-10 18:14:52,880 INFO L858 garLoopResultBuilder]: For program point L146-1(lines 146 152) no Hoare annotation was computed. [2022-01-10 18:14:52,880 INFO L854 garLoopResultBuilder]: At program point L340(lines 328 342) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~waterLevel~0Int)) (.cse0 (= ~systemActive~0Int 0))) (or (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 (<= 0 ~waterLevel~0Int) .cse2) (and .cse3 .cse0 .cse1 .cse2 .cse4 (<= ~methaneLevelCritical~0Int 0)) (and (or (and .cse3 .cse1 .cse2 .cse4 (= ~methAndRunningLastTime~0Int 0)) (and .cse3 .cse1 .cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 1)) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 0))) .cse0))) [2022-01-10 18:14:52,880 INFO L854 garLoopResultBuilder]: At program point L511-2(lines 502 515) the Hoare annotation is: false [2022-01-10 18:14:52,880 INFO L854 garLoopResultBuilder]: At program point L171-5(lines 167 191) the Hoare annotation is: false [2022-01-10 18:14:52,880 INFO L854 garLoopResultBuilder]: At program point L223-3(lines 218 225) the Hoare annotation is: false [2022-01-10 18:14:52,880 INFO L854 garLoopResultBuilder]: At program point L163-6(lines 159 165) the Hoare annotation is: false [2022-01-10 18:14:52,880 INFO L861 garLoopResultBuilder]: At program point L596(lines 588 598) the Hoare annotation is: true [2022-01-10 18:14:52,880 INFO L858 garLoopResultBuilder]: For program point L541-1(lines 541 545) no Hoare annotation was computed. [2022-01-10 18:14:52,880 INFO L854 garLoopResultBuilder]: At program point L521(lines 516 524) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (= ~pumpRunning~0Int 1) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:14:52,881 INFO L858 garLoopResultBuilder]: For program point L171-2(lines 171 188) no Hoare annotation was computed. [2022-01-10 18:14:52,881 INFO L854 garLoopResultBuilder]: At program point L466(lines 461 469) the Hoare annotation is: (let ((.cse1 (= ~systemActive~0Int 0)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 1 ~waterLevel~0Int)) (.cse5 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse6 (< ~waterLevel~0Int 4294967296)) (.cse8 (<= 1 ~systemActive~0Int)) (.cse7 (<= 0 ~waterLevel~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse9 (= ~pumpRunning~0Int 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse7 .cse3) (and .cse5 .cse6 .cse8 .cse2 .cse7 .cse3) (and .cse0 .cse8 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse7 .cse3 .cse9 (<= ~methaneLevelCritical~0Int 0)) (and .cse5 .cse6 .cse8 .cse7 .cse3 .cse9 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 18:14:52,881 INFO L858 garLoopResultBuilder]: For program point L299-6(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,881 INFO L858 garLoopResultBuilder]: For program point L139-6(lines 139 145) no Hoare annotation was computed. [2022-01-10 18:14:52,881 INFO L858 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-01-10 18:14:52,881 INFO L858 garLoopResultBuilder]: For program point L506-1(lines 506 512) no Hoare annotation was computed. [2022-01-10 18:14:52,881 INFO L854 garLoopResultBuilder]: At program point L163-3(lines 159 165) the Hoare annotation is: false [2022-01-10 18:14:52,881 INFO L858 garLoopResultBuilder]: For program point L362(lines 362 379) no Hoare annotation was computed. [2022-01-10 18:14:52,881 INFO L858 garLoopResultBuilder]: For program point L299-8(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,881 INFO L858 garLoopResultBuilder]: For program point L429-6(lines 429 433) no Hoare annotation was computed. [2022-01-10 18:14:52,881 INFO L858 garLoopResultBuilder]: For program point L139-8(lines 138 157) no Hoare annotation was computed. [2022-01-10 18:14:52,881 INFO L858 garLoopResultBuilder]: For program point L318-2(lines 318 322) no Hoare annotation was computed. [2022-01-10 18:14:52,881 INFO L854 garLoopResultBuilder]: At program point L511-1(lines 502 515) the Hoare annotation is: (let ((.cse3 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse4 (< ~waterLevel~0Int 4294967296)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (<= 0 ~waterLevel~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse3 .cse4 .cse0 .cse1 .cse5 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse3 .cse4 .cse0 .cse1 .cse5 .cse2 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 18:14:52,881 INFO L854 garLoopResultBuilder]: At program point L171-3(lines 167 191) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1))) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse5 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse6 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse7 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (= ~pumpRunning~0Int 1))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse5 .cse6 .cse0 .cse1 .cse2 .cse3 .cse7 .cse4) (and .cse5 .cse6 .cse2 .cse7 .cse4 .cse8 (<= ~methaneLevelCritical~0Int 0)) (and .cse5 .cse6 .cse2 .cse7 .cse4 .cse8 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 18:14:52,881 INFO L854 garLoopResultBuilder]: At program point L250(lines 245 253) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse5 (<= 1 ~waterLevel~0Int)) (.cse6 (= ~systemActive~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse7 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse8 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse9 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse1 .cse3 .cse4 .cse5) (and .cse7 .cse8 .cse6 .cse1 .cse3 .cse9 .cse4) (and .cse7 .cse8 .cse1 .cse2 .cse3 .cse9 .cse4) (and .cse7 .cse8 .cse2 .cse9 .cse4 (= ~pumpRunning~0Int 1) (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 18:14:52,882 INFO L854 garLoopResultBuilder]: At program point L362-1(lines 354 382) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse3 .cse5 .cse8 .cse6) (and .cse0 .cse1 .cse9 .cse4 .cse5 (= ~pumpRunning~0Int 1)) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6))) [2022-01-10 18:14:52,882 INFO L854 garLoopResultBuilder]: At program point L305-2(lines 290 308) the Hoare annotation is: false [2022-01-10 18:14:52,882 INFO L854 garLoopResultBuilder]: At program point L429-8(lines 425 436) the Hoare annotation is: false [2022-01-10 18:14:52,882 INFO L858 garLoopResultBuilder]: For program point L197-4(lines 197 214) no Hoare annotation was computed. [2022-01-10 18:14:52,882 INFO L858 garLoopResultBuilder]: For program point L146-5(lines 146 152) no Hoare annotation was computed. [2022-01-10 18:14:52,882 INFO L854 garLoopResultBuilder]: At program point L324(lines 309 327) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (= ~pumpRunning~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 1)) (= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~2#1Int| 1) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 0)) [2022-01-10 18:14:52,882 INFO L858 garLoopResultBuilder]: For program point L299-3(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,882 INFO L854 garLoopResultBuilder]: At program point L197-1(lines 193 217) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= ~pumpRunning~0Int 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4) (and (<= ~waterLevel~0Int 1) .cse2 .cse6 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 18:14:52,882 INFO L858 garLoopResultBuilder]: For program point L366(lines 366 376) no Hoare annotation was computed. [2022-01-10 18:14:52,882 INFO L854 garLoopResultBuilder]: At program point L156(lines 135 158) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse3 .cse5 .cse8 .cse6) (and .cse0 .cse1 .cse9 .cse4 .cse5 (= ~pumpRunning~0Int 1)) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6))) [2022-01-10 18:14:52,882 INFO L858 garLoopResultBuilder]: For program point L175-6(lines 175 183) no Hoare annotation was computed. [2022-01-10 18:14:52,882 INFO L854 garLoopResultBuilder]: At program point L521-2(lines 516 524) the Hoare annotation is: false [2022-01-10 18:14:52,882 INFO L858 garLoopResultBuilder]: For program point L171-10(lines 171 188) no Hoare annotation was computed. [2022-01-10 18:14:52,882 INFO L854 garLoopResultBuilder]: At program point L466-2(lines 461 469) the Hoare annotation is: false [2022-01-10 18:14:52,882 INFO L858 garLoopResultBuilder]: For program point L201(lines 201 209) no Hoare annotation was computed. [2022-01-10 18:14:52,882 INFO L858 garLoopResultBuilder]: For program point L299-5(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,882 INFO L858 garLoopResultBuilder]: For program point L367(lines 367 373) no Hoare annotation was computed. [2022-01-10 18:14:52,882 INFO L854 garLoopResultBuilder]: At program point L223-2(lines 218 225) the Hoare annotation is: false [2022-01-10 18:14:52,882 INFO L854 garLoopResultBuilder]: At program point L163-4(lines 159 165) the Hoare annotation is: false [2022-01-10 18:14:52,882 INFO L858 garLoopResultBuilder]: For program point L318-6(lines 318 322) no Hoare annotation was computed. [2022-01-10 18:14:52,883 INFO L858 garLoopResultBuilder]: For program point L506-5(lines 506 512) no Hoare annotation was computed. [2022-01-10 18:14:52,883 INFO L854 garLoopResultBuilder]: At program point L163-11(lines 159 165) the Hoare annotation is: false [2022-01-10 18:14:52,883 INFO L858 garLoopResultBuilder]: For program point L362-4(lines 362 379) no Hoare annotation was computed. [2022-01-10 18:14:52,883 INFO L854 garLoopResultBuilder]: At program point L231-1(lines 226 233) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 1)) (= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~2#1Int| 1) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 0)) [2022-01-10 18:14:52,883 INFO L858 garLoopResultBuilder]: For program point L171(lines 171 188) no Hoare annotation was computed. [2022-01-10 18:14:52,883 INFO L854 garLoopResultBuilder]: At program point L305-1(lines 290 308) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int| 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~3#1Int|)) (.cse6 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse7 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse8 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 (<= ~waterLevel~0Int 1) .cse1 .cse2 .cse3 .cse4 .cse5 (<= 1 ~waterLevel~0Int)) (and .cse6 .cse0 .cse7 .cse1 .cse2 .cse3 .cse8 .cse4 .cse5) (and .cse6 .cse7 .cse2 .cse3 .cse8 .cse4 (<= ~methaneLevelCritical~0Int 0)) (and .cse6 .cse7 .cse2 .cse3 .cse8 .cse4 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 18:14:52,883 INFO L858 garLoopResultBuilder]: For program point L627(line 627) no Hoare annotation was computed. [2022-01-10 18:14:52,883 INFO L858 garLoopResultBuilder]: For program point L318-8(lines 318 322) no Hoare annotation was computed. [2022-01-10 18:14:52,883 INFO L854 garLoopResultBuilder]: At program point L511-5(lines 502 515) the Hoare annotation is: false [2022-01-10 18:14:52,883 INFO L854 garLoopResultBuilder]: At program point L171-11(lines 167 191) the Hoare annotation is: false [2022-01-10 18:14:52,883 INFO L854 garLoopResultBuilder]: At program point L250-2(lines 245 253) the Hoare annotation is: false [2022-01-10 18:14:52,883 INFO L854 garLoopResultBuilder]: At program point L362-5(lines 354 382) the Hoare annotation is: false [2022-01-10 18:14:52,883 INFO L858 garLoopResultBuilder]: For program point L506(lines 506 512) no Hoare annotation was computed. [2022-01-10 18:14:52,883 INFO L854 garLoopResultBuilder]: At program point L163-1(lines 159 165) the Hoare annotation is: false [2022-01-10 18:14:52,883 INFO L858 garLoopResultBuilder]: For program point L175-3(lines 175 183) no Hoare annotation was computed. [2022-01-10 18:14:52,883 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 627) no Hoare annotation was computed. [2022-01-10 18:14:52,883 INFO L854 garLoopResultBuilder]: At program point L628(lines 623 630) the Hoare annotation is: false [2022-01-10 18:14:52,884 INFO L854 garLoopResultBuilder]: At program point L324-2(lines 309 327) the Hoare annotation is: false [2022-01-10 18:14:52,884 INFO L858 garLoopResultBuilder]: For program point L299-15(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,884 INFO L854 garLoopResultBuilder]: At program point L197-5(lines 193 217) the Hoare annotation is: false [2022-01-10 18:14:52,884 INFO L858 garLoopResultBuilder]: For program point L366-4(lines 366 376) no Hoare annotation was computed. [2022-01-10 18:14:52,884 INFO L854 garLoopResultBuilder]: At program point L156-2(lines 135 158) the Hoare annotation is: false [2022-01-10 18:14:52,884 INFO L854 garLoopResultBuilder]: At program point L511(lines 502 515) the Hoare annotation is: false [2022-01-10 18:14:52,884 INFO L854 garLoopResultBuilder]: At program point L171-1(lines 167 191) the Hoare annotation is: false [2022-01-10 18:14:52,884 INFO L854 garLoopResultBuilder]: At program point L223-1(lines 218 225) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= ~pumpRunning~0Int 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 18:14:52,884 INFO L854 garLoopResultBuilder]: At program point L163-2(lines 159 165) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1))) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 .cse2 .cse3 (<= 0 ~waterLevel~0Int) .cse4))) [2022-01-10 18:14:52,884 INFO L858 garLoopResultBuilder]: For program point L201-6(lines 201 209) no Hoare annotation was computed. [2022-01-10 18:14:52,884 INFO L858 garLoopResultBuilder]: For program point L299-17(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,884 INFO L858 garLoopResultBuilder]: For program point L367-6(lines 367 373) no Hoare annotation was computed. [2022-01-10 18:14:52,884 INFO L858 garLoopResultBuilder]: For program point L299(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,884 INFO L854 garLoopResultBuilder]: At program point L231-3(lines 226 233) the Hoare annotation is: false [2022-01-10 18:14:52,884 INFO L858 garLoopResultBuilder]: For program point L171-8(lines 171 188) no Hoare annotation was computed. [2022-01-10 18:14:52,884 INFO L854 garLoopResultBuilder]: At program point L305-5(lines 290 308) the Hoare annotation is: false [2022-01-10 18:14:52,884 INFO L858 garLoopResultBuilder]: For program point L627-2(line 627) no Hoare annotation was computed. [2022-01-10 18:14:52,884 INFO L858 garLoopResultBuilder]: For program point L299-2(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,884 INFO L858 garLoopResultBuilder]: For program point L506-4(lines 506 512) no Hoare annotation was computed. [2022-01-10 18:14:52,887 INFO L854 garLoopResultBuilder]: At program point L163-9(lines 159 165) the Hoare annotation is: false [2022-01-10 18:14:52,888 INFO L858 garLoopResultBuilder]: For program point L175-15(lines 175 183) no Hoare annotation was computed. [2022-01-10 18:14:52,888 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 627) no Hoare annotation was computed. [2022-01-10 18:14:52,888 INFO L854 garLoopResultBuilder]: At program point L628-2(lines 623 630) the Hoare annotation is: false [2022-01-10 18:14:52,888 INFO L854 garLoopResultBuilder]: At program point L305(lines 290 308) the Hoare annotation is: false [2022-01-10 18:14:52,888 INFO L854 garLoopResultBuilder]: At program point L511-4(lines 502 515) the Hoare annotation is: false [2022-01-10 18:14:52,888 INFO L854 garLoopResultBuilder]: At program point L171-9(lines 167 191) the Hoare annotation is: false [2022-01-10 18:14:52,888 INFO L854 garLoopResultBuilder]: At program point L223-5(lines 218 225) the Hoare annotation is: false [2022-01-10 18:14:52,888 INFO L854 garLoopResultBuilder]: At program point L163-10(lines 159 165) the Hoare annotation is: false [2022-01-10 18:14:52,888 INFO L858 garLoopResultBuilder]: For program point L175(lines 175 183) no Hoare annotation was computed. [2022-01-10 18:14:52,888 INFO L858 garLoopResultBuilder]: For program point L299-12(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,888 INFO L854 garLoopResultBuilder]: At program point L223(lines 218 225) the Hoare annotation is: false [2022-01-10 18:14:52,888 INFO L854 garLoopResultBuilder]: At program point L163(lines 159 165) the Hoare annotation is: false [2022-01-10 18:14:52,888 INFO L858 garLoopResultBuilder]: For program point L299-14(lines 299 303) no Hoare annotation was computed. [2022-01-10 18:14:52,888 INFO L854 garLoopResultBuilder]: At program point L305-4(lines 290 308) the Hoare annotation is: false [2022-01-10 18:14:52,888 INFO L858 garLoopResultBuilder]: For program point L175-12(lines 175 183) no Hoare annotation was computed. [2022-01-10 18:14:52,888 INFO L854 garLoopResultBuilder]: At program point L223-4(lines 218 225) the Hoare annotation is: false [2022-01-10 18:14:52,888 INFO L854 garLoopResultBuilder]: At program point L163-8(lines 159 165) the Hoare annotation is: false [2022-01-10 18:14:52,891 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:52,892 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 18:14:52,982 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:14:52 BasicIcfg [2022-01-10 18:14:52,982 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 18:14:52,982 INFO L158 Benchmark]: Toolchain (without parser) took 19064.96ms. Allocated memory was 191.9MB in the beginning and 522.2MB in the end (delta: 330.3MB). Free memory was 140.9MB in the beginning and 275.1MB in the end (delta: -134.2MB). Peak memory consumption was 296.3MB. Max. memory is 8.0GB. [2022-01-10 18:14:52,983 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 191.9MB. Free memory was 157.8MB in the beginning and 157.7MB in the end (delta: 143.4kB). There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 18:14:52,983 INFO L158 Benchmark]: CACSL2BoogieTranslator took 402.49ms. Allocated memory is still 191.9MB. Free memory was 140.8MB in the beginning and 153.1MB in the end (delta: -12.3MB). Peak memory consumption was 12.6MB. Max. memory is 8.0GB. [2022-01-10 18:14:52,983 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.21ms. Allocated memory is still 191.9MB. Free memory was 153.1MB in the beginning and 149.4MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2022-01-10 18:14:52,983 INFO L158 Benchmark]: Boogie Preprocessor took 34.44ms. Allocated memory is still 191.9MB. Free memory was 149.4MB in the beginning and 147.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 18:14:52,983 INFO L158 Benchmark]: RCFGBuilder took 504.27ms. Allocated memory is still 191.9MB. Free memory was 146.8MB in the beginning and 123.2MB in the end (delta: 23.6MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. [2022-01-10 18:14:52,983 INFO L158 Benchmark]: IcfgTransformer took 148.18ms. Allocated memory is still 191.9MB. Free memory was 123.2MB in the beginning and 113.3MB in the end (delta: 10.0MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. [2022-01-10 18:14:52,984 INFO L158 Benchmark]: TraceAbstraction took 17910.45ms. Allocated memory was 191.9MB in the beginning and 522.2MB in the end (delta: 330.3MB). Free memory was 112.7MB in the beginning and 275.1MB in the end (delta: -162.3MB). Peak memory consumption was 268.1MB. Max. memory is 8.0GB. [2022-01-10 18:14:52,985 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 191.9MB. Free memory was 157.8MB in the beginning and 157.7MB in the end (delta: 143.4kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 402.49ms. Allocated memory is still 191.9MB. Free memory was 140.8MB in the beginning and 153.1MB in the end (delta: -12.3MB). Peak memory consumption was 12.6MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 54.21ms. Allocated memory is still 191.9MB. Free memory was 153.1MB in the beginning and 149.4MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 34.44ms. Allocated memory is still 191.9MB. Free memory was 149.4MB in the beginning and 147.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 504.27ms. Allocated memory is still 191.9MB. Free memory was 146.8MB in the beginning and 123.2MB in the end (delta: 23.6MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. * IcfgTransformer took 148.18ms. Allocated memory is still 191.9MB. Free memory was 123.2MB in the beginning and 113.3MB in the end (delta: 10.0MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. * TraceAbstraction took 17910.45ms. Allocated memory was 191.9MB in the beginning and 522.2MB in the end (delta: 330.3MB). Free memory was 112.7MB in the beginning and 275.1MB in the end (delta: -162.3MB). Peak memory consumption was 268.1MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 627]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 627]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 627]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 173 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 17.8s, OverallIterations: 14, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 13.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2933 SdHoareTripleChecker+Valid, 0.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2933 mSDsluCounter, 5620 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3450 mSDsCounter, 101 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 370 IncrementalHoareTripleChecker+Invalid, 471 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 101 mSolverCounterUnsat, 2170 mSDtfsCounter, 370 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 224 GetRequests, 163 SyntacticMatches, 5 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 120 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1013occurred in iteration=12, InterpolantAutomatonStates: 76, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 3756 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 82 LocationsWithAnnotation, 82 PreInvPairs, 196 NumberOfFragments, 2365 HoareAnnotationTreeSize, 82 FomulaSimplifications, 7400 FormulaSimplificationTreeSizeReduction, 6.9s HoareSimplificationTime, 82 FomulaSimplificationsInter, 620711 FormulaSimplificationTreeSizeReductionInter, 6.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 808 NumberOfCodeBlocks, 808 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 864 ConstructedInterpolants, 0 QuantifiedInterpolants, 3616 SizeOfPredicates, 4 NumberOfNonLiveVariables, 609 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 16 InterpolantComputations, 13 PerfectInterpolantSequences, 207/225 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 309]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 226]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: ((((((1bv32 == pumpRunning && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || ((((((1bv32 == pumpRunning && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 581]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((1bv32 == pumpRunning && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: ((((((((1bv32 == pumpRunning && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((1bv32 == pumpRunning && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 226]: Loop Invariant Derived loop invariant: (((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 309]: Loop Invariant Derived loop invariant: ((((((((1bv32 == pumpRunning && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && tmp___0 == 1bv32 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 226]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 245]: Loop Invariant Derived loop invariant: (((((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((1bv32 == pumpRunning && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 309]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, tmp)) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 55]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: ((((((1bv32 == pumpRunning && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: ((((((((1bv32 == pumpRunning && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || (((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 245]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: ((((((((1bv32 == pumpRunning && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || ((((((1bv32 == pumpRunning && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || (((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (systemActive == 0bv32 && (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning))) - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 245]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: ((((((((1bv32 == pumpRunning && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || (((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 412]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 354]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 588]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 226]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, tmp) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) && tmp___0 == 1bv32 - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 159]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 135]: Loop Invariant Derived loop invariant: ((((((((1bv32 == pumpRunning && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || (((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: ((((((((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((1bv32 == pumpRunning && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((((1bv32 == pumpRunning && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32))) || (((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning) - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2022-01-10 18:14:53,059 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...