/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 18:14:48,366 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 18:14:48,369 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 18:14:48,404 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 18:14:48,404 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 18:14:48,405 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 18:14:48,406 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 18:14:48,408 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 18:14:48,409 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 18:14:48,423 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 18:14:48,424 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 18:14:48,425 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 18:14:48,425 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 18:14:48,426 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 18:14:48,427 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 18:14:48,428 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 18:14:48,429 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 18:14:48,429 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 18:14:48,435 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 18:14:48,440 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 18:14:48,441 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 18:14:48,446 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 18:14:48,447 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 18:14:48,447 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 18:14:48,449 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 18:14:48,450 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 18:14:48,450 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 18:14:48,451 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 18:14:48,451 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 18:14:48,452 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 18:14:48,452 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 18:14:48,452 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 18:14:48,453 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 18:14:48,454 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 18:14:48,455 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 18:14:48,455 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 18:14:48,455 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 18:14:48,456 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 18:14:48,456 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 18:14:48,457 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 18:14:48,463 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 18:14:48,464 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf [2022-01-10 18:14:48,501 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 18:14:48,501 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 18:14:48,502 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 18:14:48,502 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 18:14:48,503 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 18:14:48,503 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 18:14:48,503 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 18:14:48,504 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 18:14:48,504 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 18:14:48,504 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 18:14:48,505 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 18:14:48,505 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 18:14:48,505 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 18:14:48,505 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 18:14:48,505 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 18:14:48,505 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 18:14:48,505 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 18:14:48,505 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 18:14:48,506 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 18:14:48,506 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 18:14:48,506 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 18:14:48,507 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:14:48,507 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 18:14:48,507 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 18:14:48,507 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 18:14:48,507 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 18:14:48,507 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 18:14:48,508 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 18:14:48,508 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 18:14:48,508 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 18:14:48,508 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 18:14:48,508 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 18:14:48,509 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 18:14:48,509 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_LAZY WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 18:14:48,736 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 18:14:48,758 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 18:14:48,760 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 18:14:48,761 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 18:14:48,763 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 18:14:48,764 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c [2022-01-10 18:14:48,826 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1b24a282e/eb4d43a16ce64e12aa1ddb672e93a537/FLAG2fbb1b7a0 [2022-01-10 18:14:49,222 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 18:14:49,223 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c [2022-01-10 18:14:49,233 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1b24a282e/eb4d43a16ce64e12aa1ddb672e93a537/FLAG2fbb1b7a0 [2022-01-10 18:14:49,579 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1b24a282e/eb4d43a16ce64e12aa1ddb672e93a537 [2022-01-10 18:14:49,581 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 18:14:49,583 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 18:14:49,587 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 18:14:49,587 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 18:14:49,590 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 18:14:49,591 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:14:49" (1/1) ... [2022-01-10 18:14:49,592 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1ba70219 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:49, skipping insertion in model container [2022-01-10 18:14:49,592 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:14:49" (1/1) ... [2022-01-10 18:14:49,598 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 18:14:49,639 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:14:49,855 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2022-01-10 18:14:49,911 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:14:49,937 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 18:14:49,948 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:14:50,011 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2022-01-10 18:14:50,029 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:14:50,036 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 18:14:50,075 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2022-01-10 18:14:50,092 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:14:50,110 INFO L208 MainTranslator]: Completed translation [2022-01-10 18:14:50,110 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50 WrapperNode [2022-01-10 18:14:50,111 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 18:14:50,112 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 18:14:50,112 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 18:14:50,112 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 18:14:50,119 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50" (1/1) ... [2022-01-10 18:14:50,143 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50" (1/1) ... [2022-01-10 18:14:50,200 INFO L137 Inliner]: procedures = 61, calls = 162, calls flagged for inlining = 59, calls inlined = 175, statements flattened = 1272 [2022-01-10 18:14:50,200 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 18:14:50,201 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 18:14:50,201 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 18:14:50,201 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 18:14:50,208 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50" (1/1) ... [2022-01-10 18:14:50,208 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50" (1/1) ... [2022-01-10 18:14:50,216 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50" (1/1) ... [2022-01-10 18:14:50,216 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50" (1/1) ... [2022-01-10 18:14:50,247 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50" (1/1) ... [2022-01-10 18:14:50,256 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50" (1/1) ... [2022-01-10 18:14:50,259 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50" (1/1) ... [2022-01-10 18:14:50,264 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 18:14:50,265 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 18:14:50,265 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 18:14:50,265 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 18:14:50,267 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50" (1/1) ... [2022-01-10 18:14:50,288 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:14:50,299 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:14:50,321 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 18:14:50,328 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 18:14:50,352 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 18:14:50,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 18:14:50,352 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 18:14:50,353 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 18:14:50,418 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 18:14:50,419 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 18:14:51,072 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 18:14:51,081 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 18:14:51,082 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 18:14:51,084 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:14:51 BoogieIcfgContainer [2022-01-10 18:14:51,084 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 18:14:51,085 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 18:14:51,085 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 18:14:51,086 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 18:14:51,088 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:14:51" (1/1) ... [2022-01-10 18:14:51,272 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:14:51 BasicIcfg [2022-01-10 18:14:51,272 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 18:14:51,274 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 18:14:51,274 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 18:14:51,276 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 18:14:51,277 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 06:14:49" (1/4) ... [2022-01-10 18:14:51,277 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4ea0a773 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:14:51, skipping insertion in model container [2022-01-10 18:14:51,277 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:14:50" (2/4) ... [2022-01-10 18:14:51,278 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4ea0a773 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:14:51, skipping insertion in model container [2022-01-10 18:14:51,278 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:14:51" (3/4) ... [2022-01-10 18:14:51,278 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4ea0a773 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:14:51, skipping insertion in model container [2022-01-10 18:14:51,278 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:14:51" (4/4) ... [2022-01-10 18:14:51,279 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product62.cil.cTransformedIcfg [2022-01-10 18:14:51,283 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 18:14:51,284 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 18:14:51,331 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 18:14:51,336 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 18:14:51,336 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 18:14:51,353 INFO L276 IsEmpty]: Start isEmpty. Operand has 326 states, 322 states have (on average 1.3664596273291925) internal successors, (440), 325 states have internal predecessors, (440), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:51,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-10 18:14:51,361 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:51,361 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:51,362 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:51,371 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:51,371 INFO L85 PathProgramCache]: Analyzing trace with hash 1599537341, now seen corresponding path program 1 times [2022-01-10 18:14:51,378 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:51,378 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1790995327] [2022-01-10 18:14:51,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:51,379 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:51,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:51,587 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:51,588 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:51,588 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1790995327] [2022-01-10 18:14:51,589 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1790995327] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:51,589 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:51,589 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:14:51,590 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [246897279] [2022-01-10 18:14:51,592 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:51,596 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 18:14:51,596 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:51,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 18:14:51,622 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:14:51,627 INFO L87 Difference]: Start difference. First operand has 326 states, 322 states have (on average 1.3664596273291925) internal successors, (440), 325 states have internal predecessors, (440), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:51,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:51,695 INFO L93 Difference]: Finished difference Result 641 states and 868 transitions. [2022-01-10 18:14:51,696 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 18:14:51,697 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-10 18:14:51,697 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:51,713 INFO L225 Difference]: With dead ends: 641 [2022-01-10 18:14:51,713 INFO L226 Difference]: Without dead ends: 316 [2022-01-10 18:14:51,720 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:14:51,723 INFO L933 BasicCegarLoop]: 430 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 430 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:51,724 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 430 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:51,741 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-01-10 18:14:51,797 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 316. [2022-01-10 18:14:51,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 313 states have (on average 1.3482428115015974) internal successors, (422), 315 states have internal predecessors, (422), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:51,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 422 transitions. [2022-01-10 18:14:51,801 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 422 transitions. Word has length 19 [2022-01-10 18:14:51,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:51,801 INFO L470 AbstractCegarLoop]: Abstraction has 316 states and 422 transitions. [2022-01-10 18:14:51,801 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:51,802 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 422 transitions. [2022-01-10 18:14:51,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-10 18:14:51,803 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:51,803 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:51,806 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 18:14:51,807 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:51,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:51,809 INFO L85 PathProgramCache]: Analyzing trace with hash 508697301, now seen corresponding path program 1 times [2022-01-10 18:14:51,810 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:51,810 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [581470228] [2022-01-10 18:14:51,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:51,811 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:51,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:51,947 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:51,948 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:51,948 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [581470228] [2022-01-10 18:14:51,948 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [581470228] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:51,948 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:51,948 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:14:51,949 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1634242563] [2022-01-10 18:14:51,949 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:51,950 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:51,950 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:51,950 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:51,951 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:51,951 INFO L87 Difference]: Start difference. First operand 316 states and 422 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:52,007 INFO L93 Difference]: Finished difference Result 624 states and 836 transitions. [2022-01-10 18:14:52,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:52,008 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-10 18:14:52,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:52,009 INFO L225 Difference]: With dead ends: 624 [2022-01-10 18:14:52,010 INFO L226 Difference]: Without dead ends: 316 [2022-01-10 18:14:52,012 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:52,014 INFO L933 BasicCegarLoop]: 416 mSDtfsCounter, 406 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 406 SdHoareTripleChecker+Valid, 416 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:52,014 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [406 Valid, 416 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:52,017 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-01-10 18:14:52,035 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 316. [2022-01-10 18:14:52,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 313 states have (on average 1.3386581469648562) internal successors, (419), 315 states have internal predecessors, (419), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 419 transitions. [2022-01-10 18:14:52,038 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 419 transitions. Word has length 20 [2022-01-10 18:14:52,039 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:52,039 INFO L470 AbstractCegarLoop]: Abstraction has 316 states and 419 transitions. [2022-01-10 18:14:52,040 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,042 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 419 transitions. [2022-01-10 18:14:52,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-01-10 18:14:52,049 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:52,049 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:52,049 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 18:14:52,049 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:52,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:52,050 INFO L85 PathProgramCache]: Analyzing trace with hash 1770795515, now seen corresponding path program 1 times [2022-01-10 18:14:52,050 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:52,050 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2102891584] [2022-01-10 18:14:52,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:52,051 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:52,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:52,124 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:52,124 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:52,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2102891584] [2022-01-10 18:14:52,125 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2102891584] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:52,125 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:52,125 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:14:52,125 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [382866497] [2022-01-10 18:14:52,125 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:52,126 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:52,126 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:52,126 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:52,126 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:52,127 INFO L87 Difference]: Start difference. First operand 316 states and 419 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:52,306 INFO L93 Difference]: Finished difference Result 641 states and 845 transitions. [2022-01-10 18:14:52,306 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:52,307 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-01-10 18:14:52,307 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:52,308 INFO L225 Difference]: With dead ends: 641 [2022-01-10 18:14:52,308 INFO L226 Difference]: Without dead ends: 333 [2022-01-10 18:14:52,309 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:52,310 INFO L933 BasicCegarLoop]: 305 mSDtfsCounter, 226 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 74 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:52,311 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [226 Valid, 443 Invalid, 74 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:14:52,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2022-01-10 18:14:52,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 327. [2022-01-10 18:14:52,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 327 states, 324 states have (on average 1.2839506172839505) internal successors, (416), 326 states have internal predecessors, (416), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 416 transitions. [2022-01-10 18:14:52,330 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 416 transitions. Word has length 26 [2022-01-10 18:14:52,330 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:52,330 INFO L470 AbstractCegarLoop]: Abstraction has 327 states and 416 transitions. [2022-01-10 18:14:52,330 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,331 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 416 transitions. [2022-01-10 18:14:52,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 18:14:52,331 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:52,331 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:52,332 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 18:14:52,332 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:52,332 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:52,332 INFO L85 PathProgramCache]: Analyzing trace with hash -816370830, now seen corresponding path program 1 times [2022-01-10 18:14:52,332 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:52,333 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1470488654] [2022-01-10 18:14:52,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:52,333 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:52,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:52,420 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:52,420 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:52,421 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1470488654] [2022-01-10 18:14:52,421 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1470488654] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:52,421 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:52,421 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:14:52,421 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1093936868] [2022-01-10 18:14:52,422 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:52,423 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:52,424 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:52,424 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:52,425 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:52,425 INFO L87 Difference]: Start difference. First operand 327 states and 416 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:52,483 INFO L93 Difference]: Finished difference Result 646 states and 824 transitions. [2022-01-10 18:14:52,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:52,483 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 18:14:52,484 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:52,489 INFO L225 Difference]: With dead ends: 646 [2022-01-10 18:14:52,489 INFO L226 Difference]: Without dead ends: 640 [2022-01-10 18:14:52,489 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:52,499 INFO L933 BasicCegarLoop]: 317 mSDtfsCounter, 279 mSDsluCounter, 300 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 279 SdHoareTripleChecker+Valid, 617 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:52,501 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [279 Valid, 617 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:52,503 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 640 states. [2022-01-10 18:14:52,533 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 640 to 640. [2022-01-10 18:14:52,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 640 states, 637 states have (on average 1.2794348508634223) internal successors, (815), 639 states have internal predecessors, (815), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 640 states to 640 states and 815 transitions. [2022-01-10 18:14:52,536 INFO L78 Accepts]: Start accepts. Automaton has 640 states and 815 transitions. Word has length 33 [2022-01-10 18:14:52,538 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:52,538 INFO L470 AbstractCegarLoop]: Abstraction has 640 states and 815 transitions. [2022-01-10 18:14:52,538 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,539 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 815 transitions. [2022-01-10 18:14:52,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-01-10 18:14:52,542 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:52,542 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:52,542 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 18:14:52,543 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:52,543 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:52,544 INFO L85 PathProgramCache]: Analyzing trace with hash 1722438156, now seen corresponding path program 1 times [2022-01-10 18:14:52,544 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:52,544 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [664554680] [2022-01-10 18:14:52,544 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:52,545 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:52,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:52,656 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:52,657 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:52,657 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [664554680] [2022-01-10 18:14:52,658 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [664554680] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:52,658 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:52,658 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:14:52,658 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [608372012] [2022-01-10 18:14:52,658 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:52,659 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:14:52,659 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:52,659 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:14:52,659 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:52,659 INFO L87 Difference]: Start difference. First operand 640 states and 815 transitions. Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:52,867 INFO L93 Difference]: Finished difference Result 1658 states and 2078 transitions. [2022-01-10 18:14:52,867 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 18:14:52,867 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2022-01-10 18:14:52,867 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:52,871 INFO L225 Difference]: With dead ends: 1658 [2022-01-10 18:14:52,871 INFO L226 Difference]: Without dead ends: 1026 [2022-01-10 18:14:52,872 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:14:52,875 INFO L933 BasicCegarLoop]: 349 mSDtfsCounter, 456 mSDsluCounter, 953 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 1302 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:52,875 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [456 Valid, 1302 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:14:52,877 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1026 states. [2022-01-10 18:14:52,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1026 to 694. [2022-01-10 18:14:52,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 694 states, 691 states have (on average 1.2575976845151953) internal successors, (869), 693 states have internal predecessors, (869), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 694 states to 694 states and 869 transitions. [2022-01-10 18:14:52,916 INFO L78 Accepts]: Start accepts. Automaton has 694 states and 869 transitions. Word has length 59 [2022-01-10 18:14:52,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:52,918 INFO L470 AbstractCegarLoop]: Abstraction has 694 states and 869 transitions. [2022-01-10 18:14:52,918 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:52,918 INFO L276 IsEmpty]: Start isEmpty. Operand 694 states and 869 transitions. [2022-01-10 18:14:52,919 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-01-10 18:14:52,920 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:52,920 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:52,920 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 18:14:52,920 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:52,920 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:52,921 INFO L85 PathProgramCache]: Analyzing trace with hash -213222131, now seen corresponding path program 1 times [2022-01-10 18:14:52,921 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:52,921 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1698775310] [2022-01-10 18:14:52,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:52,922 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:52,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:52,991 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:52,991 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:52,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1698775310] [2022-01-10 18:14:52,991 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1698775310] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:52,991 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:52,992 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:14:52,992 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1823884691] [2022-01-10 18:14:52,992 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:52,992 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 18:14:52,992 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:52,993 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 18:14:52,993 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 18:14:52,993 INFO L87 Difference]: Start difference. First operand 694 states and 869 transitions. Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:53,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:53,180 INFO L93 Difference]: Finished difference Result 1826 states and 2246 transitions. [2022-01-10 18:14:53,180 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:14:53,181 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2022-01-10 18:14:53,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:53,186 INFO L225 Difference]: With dead ends: 1826 [2022-01-10 18:14:53,186 INFO L226 Difference]: Without dead ends: 1140 [2022-01-10 18:14:53,187 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:53,188 INFO L933 BasicCegarLoop]: 419 mSDtfsCounter, 357 mSDsluCounter, 622 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 357 SdHoareTripleChecker+Valid, 1041 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:53,189 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [357 Valid, 1041 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:14:53,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1140 states. [2022-01-10 18:14:53,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1140 to 730. [2022-01-10 18:14:53,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 730 states, 727 states have (on average 1.2448418156808803) internal successors, (905), 729 states have internal predecessors, (905), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:53,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 730 states to 730 states and 905 transitions. [2022-01-10 18:14:53,239 INFO L78 Accepts]: Start accepts. Automaton has 730 states and 905 transitions. Word has length 59 [2022-01-10 18:14:53,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:53,239 INFO L470 AbstractCegarLoop]: Abstraction has 730 states and 905 transitions. [2022-01-10 18:14:53,240 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:53,240 INFO L276 IsEmpty]: Start isEmpty. Operand 730 states and 905 transitions. [2022-01-10 18:14:53,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-01-10 18:14:53,242 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:53,242 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:53,242 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 18:14:53,243 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:53,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:53,243 INFO L85 PathProgramCache]: Analyzing trace with hash -661918770, now seen corresponding path program 1 times [2022-01-10 18:14:53,243 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:53,243 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1669912412] [2022-01-10 18:14:53,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:53,244 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:53,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:53,338 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:53,338 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:53,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1669912412] [2022-01-10 18:14:53,339 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1669912412] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:53,339 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:53,339 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:14:53,339 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [492350811] [2022-01-10 18:14:53,339 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:53,340 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:14:53,340 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:53,341 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:14:53,341 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:53,341 INFO L87 Difference]: Start difference. First operand 730 states and 905 transitions. Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:53,646 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:53,646 INFO L93 Difference]: Finished difference Result 2459 states and 3042 transitions. [2022-01-10 18:14:53,646 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 18:14:53,647 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2022-01-10 18:14:53,647 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:53,652 INFO L225 Difference]: With dead ends: 2459 [2022-01-10 18:14:53,653 INFO L226 Difference]: Without dead ends: 1491 [2022-01-10 18:14:53,654 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 18:14:53,656 INFO L933 BasicCegarLoop]: 358 mSDtfsCounter, 1227 mSDsluCounter, 1095 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1227 SdHoareTripleChecker+Valid, 1453 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:53,656 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1227 Valid, 1453 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:14:53,658 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1491 states. [2022-01-10 18:14:53,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1491 to 860. [2022-01-10 18:14:53,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 860 states, 857 states have (on average 1.2427071178529756) internal successors, (1065), 859 states have internal predecessors, (1065), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:53,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 860 states to 860 states and 1065 transitions. [2022-01-10 18:14:53,729 INFO L78 Accepts]: Start accepts. Automaton has 860 states and 1065 transitions. Word has length 59 [2022-01-10 18:14:53,729 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:53,729 INFO L470 AbstractCegarLoop]: Abstraction has 860 states and 1065 transitions. [2022-01-10 18:14:53,729 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:53,729 INFO L276 IsEmpty]: Start isEmpty. Operand 860 states and 1065 transitions. [2022-01-10 18:14:53,730 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-01-10 18:14:53,730 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:53,730 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:53,731 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 18:14:53,731 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:53,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:53,732 INFO L85 PathProgramCache]: Analyzing trace with hash -279504778, now seen corresponding path program 1 times [2022-01-10 18:14:53,732 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:53,732 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [847949830] [2022-01-10 18:14:53,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:53,732 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:53,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:53,792 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:14:53,792 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:53,793 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [847949830] [2022-01-10 18:14:53,793 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [847949830] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:53,793 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:53,793 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:14:53,793 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1906286176] [2022-01-10 18:14:53,793 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:53,793 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:14:53,794 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:53,794 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:14:53,794 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:53,794 INFO L87 Difference]: Start difference. First operand 860 states and 1065 transitions. Second operand has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:53,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:53,867 INFO L93 Difference]: Finished difference Result 860 states and 1065 transitions. [2022-01-10 18:14:53,867 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:14:53,867 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2022-01-10 18:14:53,868 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:53,870 INFO L225 Difference]: With dead ends: 860 [2022-01-10 18:14:53,870 INFO L226 Difference]: Without dead ends: 412 [2022-01-10 18:14:53,871 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:14:53,872 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 77 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:53,873 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 130 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:53,873 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 412 states. [2022-01-10 18:14:53,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 412 to 412. [2022-01-10 18:14:53,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 412 states, 411 states have (on average 1.2530413625304135) internal successors, (515), 411 states have internal predecessors, (515), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:53,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 412 states to 412 states and 515 transitions. [2022-01-10 18:14:53,921 INFO L78 Accepts]: Start accepts. Automaton has 412 states and 515 transitions. Word has length 67 [2022-01-10 18:14:53,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:53,923 INFO L470 AbstractCegarLoop]: Abstraction has 412 states and 515 transitions. [2022-01-10 18:14:53,923 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:53,923 INFO L276 IsEmpty]: Start isEmpty. Operand 412 states and 515 transitions. [2022-01-10 18:14:53,924 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-01-10 18:14:53,924 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:53,924 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:53,924 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 18:14:53,925 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:53,925 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:53,925 INFO L85 PathProgramCache]: Analyzing trace with hash -2077863054, now seen corresponding path program 1 times [2022-01-10 18:14:53,925 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:53,925 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1441655884] [2022-01-10 18:14:53,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:53,926 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:53,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:53,998 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-10 18:14:53,998 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:53,998 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1441655884] [2022-01-10 18:14:53,998 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1441655884] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:53,998 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:53,998 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 18:14:53,999 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [242941296] [2022-01-10 18:14:53,999 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:53,999 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 18:14:53,999 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:54,000 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 18:14:54,000 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 18:14:54,000 INFO L87 Difference]: Start difference. First operand 412 states and 515 transitions. Second operand has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:54,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:54,299 INFO L93 Difference]: Finished difference Result 1414 states and 1760 transitions. [2022-01-10 18:14:54,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-10 18:14:54,300 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-01-10 18:14:54,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:54,303 INFO L225 Difference]: With dead ends: 1414 [2022-01-10 18:14:54,304 INFO L226 Difference]: Without dead ends: 1010 [2022-01-10 18:14:54,304 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=191, Unknown=0, NotChecked=0, Total=272 [2022-01-10 18:14:54,306 INFO L933 BasicCegarLoop]: 329 mSDtfsCounter, 574 mSDsluCounter, 1044 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 574 SdHoareTripleChecker+Valid, 1373 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:54,307 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [574 Valid, 1373 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:14:54,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1010 states. [2022-01-10 18:14:54,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1010 to 390. [2022-01-10 18:14:54,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 390 states, 389 states have (on average 1.2416452442159382) internal successors, (483), 389 states have internal predecessors, (483), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:54,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 483 transitions. [2022-01-10 18:14:54,365 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 483 transitions. Word has length 74 [2022-01-10 18:14:54,365 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:54,365 INFO L470 AbstractCegarLoop]: Abstraction has 390 states and 483 transitions. [2022-01-10 18:14:54,365 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:54,365 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 483 transitions. [2022-01-10 18:14:54,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-10 18:14:54,366 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:54,366 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:54,366 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 18:14:54,367 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:54,367 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:54,367 INFO L85 PathProgramCache]: Analyzing trace with hash -1251912056, now seen corresponding path program 1 times [2022-01-10 18:14:54,367 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:54,367 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [29103528] [2022-01-10 18:14:54,368 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:54,368 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:54,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:54,417 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-01-10 18:14:54,417 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:54,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [29103528] [2022-01-10 18:14:54,418 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [29103528] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:54,418 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:54,418 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:14:54,418 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [977501049] [2022-01-10 18:14:54,418 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:54,418 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 18:14:54,419 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:54,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 18:14:54,419 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 18:14:54,419 INFO L87 Difference]: Start difference. First operand 390 states and 483 transitions. Second operand has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:54,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:54,516 INFO L93 Difference]: Finished difference Result 880 states and 1085 transitions. [2022-01-10 18:14:54,517 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-10 18:14:54,517 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-10 18:14:54,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:54,519 INFO L225 Difference]: With dead ends: 880 [2022-01-10 18:14:54,519 INFO L226 Difference]: Without dead ends: 498 [2022-01-10 18:14:54,520 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:54,520 INFO L933 BasicCegarLoop]: 154 mSDtfsCounter, 205 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 205 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:54,521 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [205 Valid, 289 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:54,521 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2022-01-10 18:14:54,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 390. [2022-01-10 18:14:54,568 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 390 states, 389 states have (on average 1.218508997429306) internal successors, (474), 389 states have internal predecessors, (474), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:54,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 474 transitions. [2022-01-10 18:14:54,569 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 474 transitions. Word has length 75 [2022-01-10 18:14:54,570 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:54,570 INFO L470 AbstractCegarLoop]: Abstraction has 390 states and 474 transitions. [2022-01-10 18:14:54,570 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:54,570 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 474 transitions. [2022-01-10 18:14:54,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-10 18:14:54,571 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:54,571 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:54,571 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-10 18:14:54,571 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:54,572 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:54,572 INFO L85 PathProgramCache]: Analyzing trace with hash 1225220776, now seen corresponding path program 1 times [2022-01-10 18:14:54,572 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:54,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1845602550] [2022-01-10 18:14:54,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:54,572 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:54,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:54,621 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-01-10 18:14:54,622 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:54,622 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1845602550] [2022-01-10 18:14:54,622 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1845602550] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:54,622 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:54,622 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:14:54,622 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2114109769] [2022-01-10 18:14:54,622 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:54,622 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:14:54,623 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:54,623 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:14:54,623 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:54,623 INFO L87 Difference]: Start difference. First operand 390 states and 474 transitions. Second operand has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:54,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:54,770 INFO L93 Difference]: Finished difference Result 1015 states and 1242 transitions. [2022-01-10 18:14:54,770 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:14:54,770 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-10 18:14:54,771 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:54,773 INFO L225 Difference]: With dead ends: 1015 [2022-01-10 18:14:54,773 INFO L226 Difference]: Without dead ends: 633 [2022-01-10 18:14:54,774 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:14:54,774 INFO L933 BasicCegarLoop]: 162 mSDtfsCounter, 380 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 380 SdHoareTripleChecker+Valid, 434 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:54,775 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [380 Valid, 434 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:54,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 633 states. [2022-01-10 18:14:54,827 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 633 to 390. [2022-01-10 18:14:54,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 390 states, 389 states have (on average 1.1953727506426735) internal successors, (465), 389 states have internal predecessors, (465), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:54,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 465 transitions. [2022-01-10 18:14:54,829 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 465 transitions. Word has length 75 [2022-01-10 18:14:54,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:54,829 INFO L470 AbstractCegarLoop]: Abstraction has 390 states and 465 transitions. [2022-01-10 18:14:54,829 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:54,830 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 465 transitions. [2022-01-10 18:14:54,830 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-10 18:14:54,830 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:54,831 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:54,831 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 18:14:54,831 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:54,831 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:54,831 INFO L85 PathProgramCache]: Analyzing trace with hash 1930285672, now seen corresponding path program 1 times [2022-01-10 18:14:54,832 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:54,832 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1531887348] [2022-01-10 18:14:54,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:54,832 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:54,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:54,902 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-01-10 18:14:54,903 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:54,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1531887348] [2022-01-10 18:14:54,903 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1531887348] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:54,903 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:54,903 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:14:54,903 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1056278955] [2022-01-10 18:14:54,903 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:54,904 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:14:54,904 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:54,904 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:14:54,904 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:14:54,904 INFO L87 Difference]: Start difference. First operand 390 states and 465 transitions. Second operand has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:55,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:55,028 INFO L93 Difference]: Finished difference Result 914 states and 1082 transitions. [2022-01-10 18:14:55,028 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:14:55,029 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-10 18:14:55,029 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:55,031 INFO L225 Difference]: With dead ends: 914 [2022-01-10 18:14:55,031 INFO L226 Difference]: Without dead ends: 532 [2022-01-10 18:14:55,031 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-01-10 18:14:55,032 INFO L933 BasicCegarLoop]: 162 mSDtfsCounter, 196 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 430 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:55,032 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [196 Valid, 430 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:14:55,033 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 532 states. [2022-01-10 18:14:55,074 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 532 to 306. [2022-01-10 18:14:55,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 306 states, 305 states have (on average 1.2098360655737705) internal successors, (369), 305 states have internal predecessors, (369), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:55,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 306 states to 306 states and 369 transitions. [2022-01-10 18:14:55,076 INFO L78 Accepts]: Start accepts. Automaton has 306 states and 369 transitions. Word has length 75 [2022-01-10 18:14:55,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:55,077 INFO L470 AbstractCegarLoop]: Abstraction has 306 states and 369 transitions. [2022-01-10 18:14:55,077 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:55,077 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 369 transitions. [2022-01-10 18:14:55,078 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-01-10 18:14:55,078 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:14:55,078 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:14:55,078 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-01-10 18:14:55,078 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:14:55,079 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:14:55,079 INFO L85 PathProgramCache]: Analyzing trace with hash 1886032146, now seen corresponding path program 1 times [2022-01-10 18:14:55,079 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:14:55,079 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605846729] [2022-01-10 18:14:55,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:14:55,079 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:14:55,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:14:55,159 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 48 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-01-10 18:14:55,160 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:14:55,160 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605846729] [2022-01-10 18:14:55,160 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605846729] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:14:55,160 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:14:55,160 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-10 18:14:55,160 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2111109843] [2022-01-10 18:14:55,160 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:14:55,161 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 18:14:55,161 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:14:55,161 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 18:14:55,161 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 18:14:55,162 INFO L87 Difference]: Start difference. First operand 306 states and 369 transitions. Second operand has 6 states, 6 states have (on average 16.0) internal successors, (96), 6 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:55,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:14:55,358 INFO L93 Difference]: Finished difference Result 744 states and 884 transitions. [2022-01-10 18:14:55,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-01-10 18:14:55,359 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 16.0) internal successors, (96), 6 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 117 [2022-01-10 18:14:55,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:14:55,359 INFO L225 Difference]: With dead ends: 744 [2022-01-10 18:14:55,359 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 18:14:55,360 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=51, Invalid=105, Unknown=0, NotChecked=0, Total=156 [2022-01-10 18:14:55,361 INFO L933 BasicCegarLoop]: 286 mSDtfsCounter, 275 mSDsluCounter, 873 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 275 SdHoareTripleChecker+Valid, 1159 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:14:55,362 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [275 Valid, 1159 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:14:55,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 18:14:55,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 18:14:55,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:55,362 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 18:14:55,363 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 117 [2022-01-10 18:14:55,363 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:14:55,363 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 18:14:55,363 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 16.0) internal successors, (96), 6 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:14:55,363 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 18:14:55,363 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 18:14:55,365 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 18:14:55,366 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 18:14:55,366 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 18:14:55,366 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-01-10 18:14:55,368 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 18:15:07,815 WARN L228 SmtUtils]: Spent 5.13s on a formula simplification that was a NOOP. DAG size: 146 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2022-01-10 18:15:24,030 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 18:15:24,030 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 18:15:24,030 INFO L854 garLoopResultBuilder]: At program point L702(lines 698 704) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,030 INFO L854 garLoopResultBuilder]: At program point L695(lines 691 697) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,030 INFO L854 garLoopResultBuilder]: At program point L710(lines 705 713) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,030 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2022-01-10 18:15:24,031 INFO L854 garLoopResultBuilder]: At program point L479(lines 475 481) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,031 INFO L858 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2022-01-10 18:15:24,031 INFO L854 garLoopResultBuilder]: At program point L539(lines 534 541) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,031 INFO L861 garLoopResultBuilder]: At program point L517(lines 498 520) the Hoare annotation is: true [2022-01-10 18:15:24,031 INFO L854 garLoopResultBuilder]: At program point L726-2(lines 726 773) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4 .cse3) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:24,031 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 18:15:24,031 INFO L854 garLoopResultBuilder]: At program point L774(lines 725 775) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) .cse2))) [2022-01-10 18:15:24,031 INFO L858 garLoopResultBuilder]: For program point L727(lines 726 773) no Hoare annotation was computed. [2022-01-10 18:15:24,031 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 18:15:24,032 INFO L858 garLoopResultBuilder]: For program point L792-3(lines 792 798) no Hoare annotation was computed. [2022-01-10 18:15:24,032 INFO L858 garLoopResultBuilder]: For program point L728(lines 728 732) no Hoare annotation was computed. [2022-01-10 18:15:24,032 INFO L858 garLoopResultBuilder]: For program point L583-3(lines 583 587) no Hoare annotation was computed. [2022-01-10 18:15:24,032 INFO L858 garLoopResultBuilder]: For program point L792-5(lines 791 810) no Hoare annotation was computed. [2022-01-10 18:15:24,032 INFO L858 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2022-01-10 18:15:24,032 INFO L854 garLoopResultBuilder]: At program point L583-5(lines 579 590) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,032 INFO L858 garLoopResultBuilder]: For program point L876-2(lines 876 893) no Hoare annotation was computed. [2022-01-10 18:15:24,032 INFO L858 garLoopResultBuilder]: For program point L799-3(lines 799 805) no Hoare annotation was computed. [2022-01-10 18:15:24,032 INFO L858 garLoopResultBuilder]: For program point L595(lines 595 599) no Hoare annotation was computed. [2022-01-10 18:15:24,032 INFO L858 garLoopResultBuilder]: For program point L736-2(lines 736 742) no Hoare annotation was computed. [2022-01-10 18:15:24,032 INFO L854 garLoopResultBuilder]: At program point L620-6(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,032 INFO L858 garLoopResultBuilder]: For program point L850-6(lines 850 867) no Hoare annotation was computed. [2022-01-10 18:15:24,033 INFO L854 garLoopResultBuilder]: At program point L620-11(lines 615 623) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,033 INFO L854 garLoopResultBuilder]: At program point L595-2(lines 591 602) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4 .cse3) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:24,033 INFO L858 garLoopResultBuilder]: For program point L746(lines 746 752) no Hoare annotation was computed. [2022-01-10 18:15:24,033 INFO L854 garLoopResultBuilder]: At program point L937-5(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,033 INFO L854 garLoopResultBuilder]: At program point L675-3(lines 670 678) the Hoare annotation is: false [2022-01-10 18:15:24,033 INFO L858 garLoopResultBuilder]: For program point L824-14(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,033 INFO L858 garLoopResultBuilder]: For program point L550-2(lines 550 567) no Hoare annotation was computed. [2022-01-10 18:15:24,033 INFO L858 garLoopResultBuilder]: For program point L607(lines 607 611) no Hoare annotation was computed. [2022-01-10 18:15:24,033 INFO L858 garLoopResultBuilder]: For program point L746-2(lines 746 752) no Hoare annotation was computed. [2022-01-10 18:15:24,033 INFO L858 garLoopResultBuilder]: For program point L880-3(lines 880 888) no Hoare annotation was computed. [2022-01-10 18:15:24,033 INFO L858 garLoopResultBuilder]: For program point L1014-9(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,033 INFO L858 garLoopResultBuilder]: For program point L660-7(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,034 INFO L854 garLoopResultBuilder]: At program point L816-15(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,034 INFO L854 garLoopResultBuilder]: At program point L946-1(lines 941 949) the Hoare annotation is: false [2022-01-10 18:15:24,034 INFO L854 garLoopResultBuilder]: At program point L550-3(lines 542 570) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,034 INFO L854 garLoopResultBuilder]: At program point L607-2(lines 603 614) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 (<= ~methaneLevelCritical~0Int 0)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:24,034 INFO L858 garLoopResultBuilder]: For program point L756(lines 756 769) no Hoare annotation was computed. [2022-01-10 18:15:24,034 INFO L854 garLoopResultBuilder]: At program point L927-3(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,034 INFO L858 garLoopResultBuilder]: For program point L850-4(lines 850 867) no Hoare annotation was computed. [2022-01-10 18:15:24,034 INFO L858 garLoopResultBuilder]: For program point L1014-11(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,034 INFO L854 garLoopResultBuilder]: At program point L665-7(lines 656 669) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,034 INFO L854 garLoopResultBuilder]: At program point L824-15(lines 820 844) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 .cse2))) [2022-01-10 18:15:24,034 INFO L858 garLoopResultBuilder]: For program point L554-2(lines 554 564) no Hoare annotation was computed. [2022-01-10 18:15:24,035 INFO L854 garLoopResultBuilder]: At program point L809-1(lines 788 811) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,035 INFO L854 garLoopResultBuilder]: At program point L1029(lines 1024 1031) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse8 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse4 (= ~methAndRunningLastTime~0Int 0)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4) (and .cse5 .cse0 .cse6 .cse2 .cse7 .cse8 .cse3 .cse9) (and .cse5 .cse0 .cse6 .cse2 .cse7 .cse8 .cse4 .cse9))) [2022-01-10 18:15:24,035 INFO L858 garLoopResultBuilder]: For program point L764(lines 764 768) no Hoare annotation was computed. [2022-01-10 18:15:24,035 INFO L854 garLoopResultBuilder]: At program point L876-3(lines 872 896) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 .cse2))) [2022-01-10 18:15:24,035 INFO L854 garLoopResultBuilder]: At program point L675-2(lines 670 678) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,035 INFO L858 garLoopResultBuilder]: For program point L824-10(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,035 INFO L854 garLoopResultBuilder]: At program point L1020-3(lines 1005 1023) the Hoare annotation is: false [2022-01-10 18:15:24,035 INFO L858 garLoopResultBuilder]: For program point L995-21(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,035 INFO L854 garLoopResultBuilder]: At program point L850-7(lines 846 870) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 .cse2))) [2022-01-10 18:15:24,035 INFO L858 garLoopResultBuilder]: For program point L555-3(lines 555 561) no Hoare annotation was computed. [2022-01-10 18:15:24,035 INFO L854 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,035 INFO L858 garLoopResultBuilder]: For program point L764-2(lines 756 769) no Hoare annotation was computed. [2022-01-10 18:15:24,036 INFO L858 garLoopResultBuilder]: For program point L1014-6(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,036 INFO L858 garLoopResultBuilder]: For program point L660-5(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,036 INFO L854 garLoopResultBuilder]: At program point L816-11(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,036 INFO L858 garLoopResultBuilder]: For program point L854-9(lines 854 862) no Hoare annotation was computed. [2022-01-10 18:15:24,036 INFO L858 garLoopResultBuilder]: For program point L995-23(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,036 INFO L858 garLoopResultBuilder]: For program point L526-1(line 526) no Hoare annotation was computed. [2022-01-10 18:15:24,036 INFO L861 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2022-01-10 18:15:24,036 INFO L858 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2022-01-10 18:15:24,036 INFO L858 garLoopResultBuilder]: For program point L792(lines 792 798) no Hoare annotation was computed. [2022-01-10 18:15:24,036 INFO L858 garLoopResultBuilder]: For program point L1014-8(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,036 INFO L854 garLoopResultBuilder]: At program point L665-5(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,036 INFO L854 garLoopResultBuilder]: At program point L824-11(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,036 INFO L854 garLoopResultBuilder]: At program point L927-5(lines 922 929) the Hoare annotation is: false [2022-01-10 18:15:24,036 INFO L858 garLoopResultBuilder]: For program point L824-12(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,037 INFO L854 garLoopResultBuilder]: At program point L1001-7(lines 986 1004) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,037 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-10 18:15:24,037 INFO L854 garLoopResultBuilder]: At program point L527-1(lines 522 529) the Hoare annotation is: false [2022-01-10 18:15:24,037 INFO L861 garLoopResultBuilder]: At program point L779(lines 716 781) the Hoare annotation is: true [2022-01-10 18:15:24,037 INFO L858 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2022-01-10 18:15:24,037 INFO L858 garLoopResultBuilder]: For program point L583(lines 583 587) no Hoare annotation was computed. [2022-01-10 18:15:24,037 INFO L858 garLoopResultBuilder]: For program point L792-2(lines 791 810) no Hoare annotation was computed. [2022-01-10 18:15:24,037 INFO L854 garLoopResultBuilder]: At program point L1020-2(lines 1005 1023) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,037 INFO L858 garLoopResultBuilder]: For program point L995-15(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,037 INFO L854 garLoopResultBuilder]: At program point L850-5(lines 846 870) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,037 INFO L858 garLoopResultBuilder]: For program point L660-6(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,038 INFO L854 garLoopResultBuilder]: At program point L816-13(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,038 INFO L858 garLoopResultBuilder]: For program point L828-21(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,038 INFO L861 garLoopResultBuilder]: At program point L492(lines 484 494) the Hoare annotation is: true [2022-01-10 18:15:24,038 INFO L858 garLoopResultBuilder]: For program point L432-1(lines 432 436) no Hoare annotation was computed. [2022-01-10 18:15:24,038 INFO L854 garLoopResultBuilder]: At program point L583-2(lines 579 590) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= ~methaneLevelCritical~0Int 0) .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0Int 0) .cse6))) [2022-01-10 18:15:24,038 INFO L858 garLoopResultBuilder]: For program point L876(lines 876 893) no Hoare annotation was computed. [2022-01-10 18:15:24,038 INFO L858 garLoopResultBuilder]: For program point L799-1(lines 799 805) no Hoare annotation was computed. [2022-01-10 18:15:24,038 INFO L858 garLoopResultBuilder]: For program point L854-6(lines 854 862) no Hoare annotation was computed. [2022-01-10 18:15:24,038 INFO L858 garLoopResultBuilder]: For program point L995-17(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,038 INFO L854 garLoopResultBuilder]: At program point L665-6(lines 656 669) the Hoare annotation is: false [2022-01-10 18:15:24,038 INFO L854 garLoopResultBuilder]: At program point L824-13(lines 820 844) the Hoare annotation is: false [2022-01-10 18:15:24,038 INFO L854 garLoopResultBuilder]: At program point L620-10(lines 615 623) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,038 INFO L854 garLoopResultBuilder]: At program point L816-14(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,039 INFO L858 garLoopResultBuilder]: For program point L792-6(lines 792 798) no Hoare annotation was computed. [2022-01-10 18:15:24,039 INFO L854 garLoopResultBuilder]: At program point L620(lines 615 623) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 .cse4 .cse5 (<= ~methaneLevelCritical~0Int 0) .cse6) (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~methaneLevelCritical~0Int) .cse6))) [2022-01-10 18:15:24,039 INFO L858 garLoopResultBuilder]: For program point L850-2(lines 850 867) no Hoare annotation was computed. [2022-01-10 18:15:24,039 INFO L854 garLoopResultBuilder]: At program point L620-5(lines 615 623) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse4 .cse1 .cse2 .cse3))) [2022-01-10 18:15:24,039 INFO L854 garLoopResultBuilder]: At program point L927-4(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,039 INFO L858 garLoopResultBuilder]: For program point L824-8(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,039 INFO L854 garLoopResultBuilder]: At program point L1001-5(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,039 INFO L858 garLoopResultBuilder]: For program point L995-18(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,039 INFO L854 garLoopResultBuilder]: At program point L937-9(lines 930 940) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,039 INFO L858 garLoopResultBuilder]: For program point L583-6(lines 583 587) no Hoare annotation was computed. [2022-01-10 18:15:24,039 INFO L858 garLoopResultBuilder]: For program point L792-8(lines 791 810) no Hoare annotation was computed. [2022-01-10 18:15:24,040 INFO L854 garLoopResultBuilder]: At program point L937(lines 930 940) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~methaneLevelCritical~0Int) .cse6) (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 .cse4 .cse5 (<= ~methaneLevelCritical~0Int 0) .cse6))) [2022-01-10 18:15:24,040 INFO L854 garLoopResultBuilder]: At program point L675-1(lines 670 678) the Hoare annotation is: false [2022-01-10 18:15:24,040 INFO L858 garLoopResultBuilder]: For program point L824-6(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,040 INFO L858 garLoopResultBuilder]: For program point L550(lines 550 567) no Hoare annotation was computed. [2022-01-10 18:15:24,040 INFO L858 garLoopResultBuilder]: For program point L660-4(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,040 INFO L854 garLoopResultBuilder]: At program point L816-9(lines 812 818) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,040 INFO L858 garLoopResultBuilder]: For program point L828-15(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,040 INFO L858 garLoopResultBuilder]: For program point L995-20(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,040 INFO L858 garLoopResultBuilder]: For program point L912-21(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,040 INFO L854 garLoopResultBuilder]: At program point L583-8(lines 579 590) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,040 INFO L858 garLoopResultBuilder]: For program point L876-4(lines 876 893) no Hoare annotation was computed. [2022-01-10 18:15:24,040 INFO L858 garLoopResultBuilder]: For program point L799-5(lines 799 805) no Hoare annotation was computed. [2022-01-10 18:15:24,040 INFO L858 garLoopResultBuilder]: For program point L880(lines 880 888) no Hoare annotation was computed. [2022-01-10 18:15:24,040 INFO L858 garLoopResultBuilder]: For program point L1014-3(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,041 INFO L858 garLoopResultBuilder]: For program point L660-3(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,041 INFO L854 garLoopResultBuilder]: At program point L816-7(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,041 INFO L854 garLoopResultBuilder]: At program point L946(lines 941 949) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| ~pumpRunning~0Int) (<= 1 ~methaneLevelCritical~0Int)) [2022-01-10 18:15:24,041 INFO L854 garLoopResultBuilder]: At program point L550-1(lines 542 570) the Hoare annotation is: (let ((.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse5 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse6 .cse7 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse4 .cse0 .cse1 .cse5 .cse2 .cse6 .cse7 .cse3))) [2022-01-10 18:15:24,041 INFO L854 garLoopResultBuilder]: At program point L665-4(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,041 INFO L854 garLoopResultBuilder]: At program point L824-9(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,041 INFO L854 garLoopResultBuilder]: At program point L620-8(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,041 INFO L854 garLoopResultBuilder]: At program point L816-10(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,041 INFO L854 garLoopResultBuilder]: At program point L1001-6(lines 986 1004) the Hoare annotation is: false [2022-01-10 18:15:24,041 INFO L854 garLoopResultBuilder]: At program point L912-23(lines 905 921) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,041 INFO L854 garLoopResultBuilder]: At program point L902-7(lines 897 904) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,042 INFO L854 garLoopResultBuilder]: At program point L620-12(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,042 INFO L858 garLoopResultBuilder]: For program point L850-10(lines 850 867) no Hoare annotation was computed. [2022-01-10 18:15:24,042 INFO L854 garLoopResultBuilder]: At program point L620-17(lines 615 623) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,042 INFO L854 garLoopResultBuilder]: At program point L927(lines 922 929) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~8#1Int|)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 .cse5 .cse6 .cse7 (<= 1 ~methaneLevelCritical~0Int) .cse8) (and .cse0 .cse1 .cse2 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse4 .cse5 .cse6 .cse7 (<= ~methaneLevelCritical~0Int 0) .cse8))) [2022-01-10 18:15:24,042 INFO L858 garLoopResultBuilder]: For program point L850(lines 850 867) no Hoare annotation was computed. [2022-01-10 18:15:24,042 INFO L858 garLoopResultBuilder]: For program point L1014-5(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,042 INFO L854 garLoopResultBuilder]: At program point L665-3(lines 656 669) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-10 18:15:24,042 INFO L854 garLoopResultBuilder]: At program point L824-7(lines 820 844) the Hoare annotation is: (let ((.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-10 18:15:24,042 INFO L858 garLoopResultBuilder]: For program point L554(lines 554 564) no Hoare annotation was computed. [2022-01-10 18:15:24,043 INFO L854 garLoopResultBuilder]: At program point L809(lines 788 811) the Hoare annotation is: (let ((.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse5 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse6 .cse7 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse4 .cse0 .cse1 .cse5 .cse2 .cse6 .cse7 .cse3))) [2022-01-10 18:15:24,043 INFO L858 garLoopResultBuilder]: For program point L995-12(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,043 INFO L854 garLoopResultBuilder]: At program point L937-7(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,043 INFO L858 garLoopResultBuilder]: For program point L828-18(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,043 INFO L854 garLoopResultBuilder]: At program point L937-10(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,043 INFO L854 garLoopResultBuilder]: At program point L675-5(lines 670 678) the Hoare annotation is: false [2022-01-10 18:15:24,043 INFO L858 garLoopResultBuilder]: For program point L824-22(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,043 INFO L858 garLoopResultBuilder]: For program point L550-4(lines 550 567) no Hoare annotation was computed. [2022-01-10 18:15:24,043 INFO L854 garLoopResultBuilder]: At program point L876-1(lines 872 896) the Hoare annotation is: (let ((.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-10 18:15:24,043 INFO L854 garLoopResultBuilder]: At program point L675(lines 670 678) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,043 INFO L858 garLoopResultBuilder]: For program point L824-2(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,044 INFO L854 garLoopResultBuilder]: At program point L1020-1(lines 1005 1023) the Hoare annotation is: false [2022-01-10 18:15:24,044 INFO L858 garLoopResultBuilder]: For program point L995-9(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,044 INFO L854 garLoopResultBuilder]: At program point L850-3(lines 846 870) the Hoare annotation is: (let ((.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-10 18:15:24,044 INFO L858 garLoopResultBuilder]: For program point L555(lines 555 561) no Hoare annotation was computed. [2022-01-10 18:15:24,044 INFO L858 garLoopResultBuilder]: For program point L995-14(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,044 INFO L858 garLoopResultBuilder]: For program point L912-15(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,044 INFO L854 garLoopResultBuilder]: At program point L620-9(lines 615 623) the Hoare annotation is: false [2022-01-10 18:15:24,044 INFO L854 garLoopResultBuilder]: At program point L816-12(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,044 INFO L858 garLoopResultBuilder]: For program point L880-6(lines 880 888) no Hoare annotation was computed. [2022-01-10 18:15:24,044 INFO L858 garLoopResultBuilder]: For program point L1014-15(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,044 INFO L858 garLoopResultBuilder]: For program point L660-11(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,044 INFO L854 garLoopResultBuilder]: At program point L816-23(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,045 INFO L854 garLoopResultBuilder]: At program point L946-2(lines 941 949) the Hoare annotation is: false [2022-01-10 18:15:24,045 INFO L854 garLoopResultBuilder]: At program point L550-5(lines 542 570) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,045 INFO L858 garLoopResultBuilder]: For program point L1014(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,045 INFO L858 garLoopResultBuilder]: For program point L660-1(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,045 INFO L854 garLoopResultBuilder]: At program point L816-3(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,045 INFO L858 garLoopResultBuilder]: For program point L854-3(lines 854 862) no Hoare annotation was computed. [2022-01-10 18:15:24,045 INFO L858 garLoopResultBuilder]: For program point L995-11(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,045 INFO L858 garLoopResultBuilder]: For program point L526(line 526) no Hoare annotation was computed. [2022-01-10 18:15:24,045 INFO L854 garLoopResultBuilder]: At program point L1001-4(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,045 INFO L854 garLoopResultBuilder]: At program point L912-17(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,045 INFO L854 garLoopResultBuilder]: At program point L902-5(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,046 INFO L854 garLoopResultBuilder]: At program point L937-8(lines 930 940) the Hoare annotation is: false [2022-01-10 18:15:24,046 INFO L854 garLoopResultBuilder]: At program point L927-6(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,046 INFO L858 garLoopResultBuilder]: For program point L850-8(lines 850 867) no Hoare annotation was computed. [2022-01-10 18:15:24,046 INFO L858 garLoopResultBuilder]: For program point L1014-17(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,046 INFO L854 garLoopResultBuilder]: At program point L665-11(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,046 INFO L854 garLoopResultBuilder]: At program point L824-23(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,046 INFO L858 garLoopResultBuilder]: For program point L554-4(lines 554 564) no Hoare annotation was computed. [2022-01-10 18:15:24,046 INFO L854 garLoopResultBuilder]: At program point L809-2(lines 788 811) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,046 INFO L858 garLoopResultBuilder]: For program point L1014-2(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,046 INFO L854 garLoopResultBuilder]: At program point L665-1(lines 656 669) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:15:24,046 INFO L854 garLoopResultBuilder]: At program point L824-3(lines 820 844) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-10 18:15:24,046 INFO L854 garLoopResultBuilder]: At program point L927-2(lines 922 929) the Hoare annotation is: false [2022-01-10 18:15:24,047 INFO L858 garLoopResultBuilder]: For program point L824-4(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,047 INFO L854 garLoopResultBuilder]: At program point L1001-3(lines 986 1004) the Hoare annotation is: (let ((.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse12 (= ~methAndRunningLastTime~0Int 0)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse13 (<= ~methaneLevelCritical~0Int 0)) (.cse11 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse1 .cse2 .cse4 .cse10 .cse5 .cse11) (and .cse9 .cse1 .cse2 .cse10 .cse5 .cse12 .cse11) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse6 .cse7 .cse13 .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse6 .cse7 .cse12 .cse8) (and .cse9 .cse1 .cse2 .cse10 .cse5 .cse13 .cse11))) [2022-01-10 18:15:24,047 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-10 18:15:24,047 INFO L854 garLoopResultBuilder]: At program point L527(lines 522 529) the Hoare annotation is: false [2022-01-10 18:15:24,047 INFO L858 garLoopResultBuilder]: For program point L828-12(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,047 INFO L858 garLoopResultBuilder]: For program point L912-18(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,047 INFO L854 garLoopResultBuilder]: At program point L876-5(lines 872 896) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,047 INFO L854 garLoopResultBuilder]: At program point L675-4(lines 670 678) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,047 INFO L858 garLoopResultBuilder]: For program point L824-18(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,047 INFO L854 garLoopResultBuilder]: At program point L1020-5(lines 1005 1023) the Hoare annotation is: false [2022-01-10 18:15:24,048 INFO L858 garLoopResultBuilder]: For program point L995-33(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,048 INFO L854 garLoopResultBuilder]: At program point L850-11(lines 846 870) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,048 INFO L858 garLoopResultBuilder]: For program point L555-6(lines 555 561) no Hoare annotation was computed. [2022-01-10 18:15:24,048 INFO L854 garLoopResultBuilder]: At program point L1020(lines 1005 1023) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,048 INFO L858 garLoopResultBuilder]: For program point L995-3(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,048 INFO L854 garLoopResultBuilder]: At program point L850-1(lines 846 870) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-10 18:15:24,048 INFO L858 garLoopResultBuilder]: For program point L660-2(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,048 INFO L854 garLoopResultBuilder]: At program point L816-5(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,048 INFO L858 garLoopResultBuilder]: For program point L828-9(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,048 INFO L854 garLoopResultBuilder]: At program point L620-7(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,048 INFO L854 garLoopResultBuilder]: At program point L816-8(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,049 INFO L854 garLoopResultBuilder]: At program point L912-20(lines 905 921) the Hoare annotation is: false [2022-01-10 18:15:24,049 INFO L854 garLoopResultBuilder]: At program point L902-6(lines 897 904) the Hoare annotation is: false [2022-01-10 18:15:24,049 INFO L858 garLoopResultBuilder]: For program point L1014-12(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,049 INFO L858 garLoopResultBuilder]: For program point L660-9(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,049 INFO L854 garLoopResultBuilder]: At program point L816-19(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,049 INFO L858 garLoopResultBuilder]: For program point L854-15(lines 854 862) no Hoare annotation was computed. [2022-01-10 18:15:24,049 INFO L858 garLoopResultBuilder]: For program point L995-35(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,049 INFO L858 garLoopResultBuilder]: For program point L526-2(line 526) no Hoare annotation was computed. [2022-01-10 18:15:24,049 INFO L858 garLoopResultBuilder]: For program point L854(lines 854 862) no Hoare annotation was computed. [2022-01-10 18:15:24,049 INFO L858 garLoopResultBuilder]: For program point L995-5(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,049 INFO L854 garLoopResultBuilder]: At program point L665-2(lines 656 669) the Hoare annotation is: false [2022-01-10 18:15:24,049 INFO L854 garLoopResultBuilder]: At program point L824-5(lines 820 844) the Hoare annotation is: false [2022-01-10 18:15:24,050 INFO L854 garLoopResultBuilder]: At program point L620-4(lines 615 623) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse5 .cse6 .cse7 (<= 1 ~methaneLevelCritical~0Int) .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse5 .cse6 .cse7 (<= ~methaneLevelCritical~0Int 0) .cse8))) [2022-01-10 18:15:24,050 INFO L854 garLoopResultBuilder]: At program point L816-6(lines 812 818) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1))) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-10 18:15:24,050 INFO L854 garLoopResultBuilder]: At program point L937-6(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,050 INFO L858 garLoopResultBuilder]: For program point L1014-14(lines 1014 1018) no Hoare annotation was computed. [2022-01-10 18:15:24,050 INFO L854 garLoopResultBuilder]: At program point L665-9(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,050 INFO L854 garLoopResultBuilder]: At program point L824-19(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,050 INFO L854 garLoopResultBuilder]: At program point L927-8(lines 922 929) the Hoare annotation is: false [2022-01-10 18:15:24,050 INFO L858 garLoopResultBuilder]: For program point L824-20(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,050 INFO L854 garLoopResultBuilder]: At program point L1001-11(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,050 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-10 18:15:24,050 INFO L854 garLoopResultBuilder]: At program point L527-2(lines 522 529) the Hoare annotation is: false [2022-01-10 18:15:24,051 INFO L854 garLoopResultBuilder]: At program point L927-1(lines 922 929) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,051 INFO L858 garLoopResultBuilder]: For program point L824(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,051 INFO L854 garLoopResultBuilder]: At program point L1001-1(lines 986 1004) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int|)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 .cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:24,051 INFO L858 garLoopResultBuilder]: For program point L995-6(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,051 INFO L854 garLoopResultBuilder]: At program point L937-4(lines 930 940) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse5 .cse6 .cse7 (<= 1 ~methaneLevelCritical~0Int) .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse5 .cse6 .cse7 (<= ~methaneLevelCritical~0Int 0) .cse8))) [2022-01-10 18:15:24,051 INFO L858 garLoopResultBuilder]: For program point L912-12(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,051 INFO L854 garLoopResultBuilder]: At program point L1020-4(lines 1005 1023) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,051 INFO L858 garLoopResultBuilder]: For program point L995-27(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,051 INFO L854 garLoopResultBuilder]: At program point L850-9(lines 846 870) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,052 INFO L858 garLoopResultBuilder]: For program point L660-10(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,052 INFO L854 garLoopResultBuilder]: At program point L816-21(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,052 INFO L858 garLoopResultBuilder]: For program point L828-33(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,052 INFO L858 garLoopResultBuilder]: For program point L660(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,052 INFO L854 garLoopResultBuilder]: At program point L816-1(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,052 INFO L858 garLoopResultBuilder]: For program point L828-3(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,052 INFO L858 garLoopResultBuilder]: For program point L995-8(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,052 INFO L858 garLoopResultBuilder]: For program point L912-9(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,052 INFO L854 garLoopResultBuilder]: At program point L912-14(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,052 INFO L854 garLoopResultBuilder]: At program point L902-4(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,052 INFO L858 garLoopResultBuilder]: For program point L854-12(lines 854 862) no Hoare annotation was computed. [2022-01-10 18:15:24,052 INFO L858 garLoopResultBuilder]: For program point L995-29(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,053 INFO L854 garLoopResultBuilder]: At program point L665-10(lines 656 669) the Hoare annotation is: false [2022-01-10 18:15:24,053 INFO L854 garLoopResultBuilder]: At program point L824-21(lines 820 844) the Hoare annotation is: false [2022-01-10 18:15:24,053 INFO L854 garLoopResultBuilder]: At program point L620-16(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,053 INFO L854 garLoopResultBuilder]: At program point L816-22(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,053 INFO L854 garLoopResultBuilder]: At program point L665(lines 656 669) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:15:24,053 INFO L854 garLoopResultBuilder]: At program point L824-1(lines 820 844) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-10 18:15:24,053 INFO L854 garLoopResultBuilder]: At program point L620-2(lines 615 623) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,053 INFO L854 garLoopResultBuilder]: At program point L816-2(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:15:24,053 INFO L854 garLoopResultBuilder]: At program point L1001-2(lines 986 1004) the Hoare annotation is: false [2022-01-10 18:15:24,054 INFO L854 garLoopResultBuilder]: At program point L912-11(lines 905 921) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse6 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse4 .cse5 .cse6 (<= ~methaneLevelCritical~0Int 0) .cse7) (and .cse0 .cse1 .cse2 (= ~pumpRunning~0Int 0) .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 .cse5 .cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~9#1Int|) (<= 1 ~methaneLevelCritical~0Int) .cse7))) [2022-01-10 18:15:24,054 INFO L854 garLoopResultBuilder]: At program point L902-3(lines 897 904) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,054 INFO L854 garLoopResultBuilder]: At program point L927-7(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,054 INFO L858 garLoopResultBuilder]: For program point L824-16(lines 824 841) no Hoare annotation was computed. [2022-01-10 18:15:24,054 INFO L854 garLoopResultBuilder]: At program point L1001-9(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,054 INFO L858 garLoopResultBuilder]: For program point L995-30(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,054 INFO L854 garLoopResultBuilder]: At program point L937-14(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,054 INFO L858 garLoopResultBuilder]: For program point L995(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,054 INFO L854 garLoopResultBuilder]: At program point L937-2(lines 930 940) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,054 INFO L858 garLoopResultBuilder]: For program point L828-6(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,054 INFO L858 garLoopResultBuilder]: For program point L660-8(lines 660 666) no Hoare annotation was computed. [2022-01-10 18:15:24,054 INFO L854 garLoopResultBuilder]: At program point L816-17(lines 812 818) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,055 INFO L858 garLoopResultBuilder]: For program point L828-27(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,055 INFO L858 garLoopResultBuilder]: For program point L995-32(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,055 INFO L858 garLoopResultBuilder]: For program point L912-33(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,055 INFO L858 garLoopResultBuilder]: For program point L995-2(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,055 INFO L858 garLoopResultBuilder]: For program point L912-3(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,055 INFO L854 garLoopResultBuilder]: At program point L620-3(lines 615 623) the Hoare annotation is: false [2022-01-10 18:15:24,055 INFO L854 garLoopResultBuilder]: At program point L816-4(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,055 INFO L854 garLoopResultBuilder]: At program point L665-8(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,055 INFO L854 garLoopResultBuilder]: At program point L824-17(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,055 INFO L854 garLoopResultBuilder]: At program point L620-14(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,055 INFO L854 garLoopResultBuilder]: At program point L816-18(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,055 INFO L854 garLoopResultBuilder]: At program point L1001-10(lines 986 1004) the Hoare annotation is: false [2022-01-10 18:15:24,056 INFO L854 garLoopResultBuilder]: At program point L912-35(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,056 INFO L854 garLoopResultBuilder]: At program point L902-11(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,056 INFO L854 garLoopResultBuilder]: At program point L1001(lines 986 1004) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int|)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 .cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-10 18:15:24,056 INFO L854 garLoopResultBuilder]: At program point L912-5(lines 905 921) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,056 INFO L854 garLoopResultBuilder]: At program point L902-1(lines 897 904) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,056 INFO L854 garLoopResultBuilder]: At program point L937-3(lines 930 940) the Hoare annotation is: false [2022-01-10 18:15:24,056 INFO L858 garLoopResultBuilder]: For program point L995-24(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,056 INFO L854 garLoopResultBuilder]: At program point L937-12(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,056 INFO L858 garLoopResultBuilder]: For program point L828-30(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,056 INFO L858 garLoopResultBuilder]: For program point L828(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,056 INFO L858 garLoopResultBuilder]: For program point L912-6(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,056 INFO L858 garLoopResultBuilder]: For program point L995-26(lines 995 999) no Hoare annotation was computed. [2022-01-10 18:15:24,057 INFO L858 garLoopResultBuilder]: For program point L912-27(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,057 INFO L854 garLoopResultBuilder]: At program point L620-15(lines 615 623) the Hoare annotation is: false [2022-01-10 18:15:24,057 INFO L854 garLoopResultBuilder]: At program point L816-20(lines 812 818) the Hoare annotation is: false [2022-01-10 18:15:24,057 INFO L854 garLoopResultBuilder]: At program point L620-1(lines 615 623) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,057 INFO L854 garLoopResultBuilder]: At program point L816(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-10 18:15:24,057 INFO L854 garLoopResultBuilder]: At program point L912-8(lines 905 921) the Hoare annotation is: false [2022-01-10 18:15:24,057 INFO L854 garLoopResultBuilder]: At program point L902-2(lines 897 904) the Hoare annotation is: false [2022-01-10 18:15:24,057 INFO L854 garLoopResultBuilder]: At program point L1001-8(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,057 INFO L854 garLoopResultBuilder]: At program point L912-29(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,057 INFO L854 garLoopResultBuilder]: At program point L902-9(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,057 INFO L854 garLoopResultBuilder]: At program point L937-13(lines 930 940) the Hoare annotation is: false [2022-01-10 18:15:24,057 INFO L854 garLoopResultBuilder]: At program point L937-1(lines 930 940) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,058 INFO L858 garLoopResultBuilder]: For program point L828-24(lines 828 836) no Hoare annotation was computed. [2022-01-10 18:15:24,058 INFO L858 garLoopResultBuilder]: For program point L912-30(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,058 INFO L858 garLoopResultBuilder]: For program point L912(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,058 INFO L854 garLoopResultBuilder]: At program point L620-13(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,058 INFO L854 garLoopResultBuilder]: At program point L816-16(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,058 INFO L854 garLoopResultBuilder]: At program point L912-32(lines 905 921) the Hoare annotation is: false [2022-01-10 18:15:24,058 INFO L854 garLoopResultBuilder]: At program point L902-10(lines 897 904) the Hoare annotation is: false [2022-01-10 18:15:24,058 INFO L854 garLoopResultBuilder]: At program point L912-2(lines 905 921) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,058 INFO L854 garLoopResultBuilder]: At program point L902(lines 897 904) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-10 18:15:24,058 INFO L854 garLoopResultBuilder]: At program point L937-11(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,058 INFO L858 garLoopResultBuilder]: For program point L912-24(lines 912 918) no Hoare annotation was computed. [2022-01-10 18:15:24,058 INFO L854 garLoopResultBuilder]: At program point L912-26(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,059 INFO L854 garLoopResultBuilder]: At program point L902-8(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-10 18:15:24,061 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:15:24,063 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 18:15:24,188 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:15:24 BasicIcfg [2022-01-10 18:15:24,188 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 18:15:24,189 INFO L158 Benchmark]: Toolchain (without parser) took 34605.53ms. Allocated memory was 191.9MB in the beginning and 427.8MB in the end (delta: 235.9MB). Free memory was 132.8MB in the beginning and 271.6MB in the end (delta: -138.8MB). Peak memory consumption was 235.9MB. Max. memory is 8.0GB. [2022-01-10 18:15:24,189 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 191.9MB. Free memory is still 150.0MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 18:15:24,189 INFO L158 Benchmark]: CACSL2BoogieTranslator took 524.28ms. Allocated memory was 191.9MB in the beginning and 243.3MB in the end (delta: 51.4MB). Free memory was 132.6MB in the beginning and 199.9MB in the end (delta: -67.3MB). Peak memory consumption was 18.4MB. Max. memory is 8.0GB. [2022-01-10 18:15:24,189 INFO L158 Benchmark]: Boogie Procedure Inliner took 88.24ms. Allocated memory is still 243.3MB. Free memory was 199.9MB in the beginning and 194.7MB in the end (delta: 5.2MB). Peak memory consumption was 5.2MB. Max. memory is 8.0GB. [2022-01-10 18:15:24,190 INFO L158 Benchmark]: Boogie Preprocessor took 63.41ms. Allocated memory is still 243.3MB. Free memory was 194.7MB in the beginning and 191.0MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2022-01-10 18:15:24,190 INFO L158 Benchmark]: RCFGBuilder took 819.16ms. Allocated memory is still 243.3MB. Free memory was 191.0MB in the beginning and 153.3MB in the end (delta: 37.7MB). Peak memory consumption was 37.7MB. Max. memory is 8.0GB. [2022-01-10 18:15:24,190 INFO L158 Benchmark]: IcfgTransformer took 187.61ms. Allocated memory is still 243.3MB. Free memory was 153.3MB in the beginning and 137.0MB in the end (delta: 16.3MB). Peak memory consumption was 15.7MB. Max. memory is 8.0GB. [2022-01-10 18:15:24,190 INFO L158 Benchmark]: TraceAbstraction took 32914.70ms. Allocated memory was 243.3MB in the beginning and 427.8MB in the end (delta: 184.5MB). Free memory was 136.5MB in the beginning and 271.6MB in the end (delta: -135.2MB). Peak memory consumption was 187.8MB. Max. memory is 8.0GB. [2022-01-10 18:15:24,192 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 191.9MB. Free memory is still 150.0MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 524.28ms. Allocated memory was 191.9MB in the beginning and 243.3MB in the end (delta: 51.4MB). Free memory was 132.6MB in the beginning and 199.9MB in the end (delta: -67.3MB). Peak memory consumption was 18.4MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 88.24ms. Allocated memory is still 243.3MB. Free memory was 199.9MB in the beginning and 194.7MB in the end (delta: 5.2MB). Peak memory consumption was 5.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 63.41ms. Allocated memory is still 243.3MB. Free memory was 194.7MB in the beginning and 191.0MB in the end (delta: 3.7MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * RCFGBuilder took 819.16ms. Allocated memory is still 243.3MB. Free memory was 191.0MB in the beginning and 153.3MB in the end (delta: 37.7MB). Peak memory consumption was 37.7MB. Max. memory is 8.0GB. * IcfgTransformer took 187.61ms. Allocated memory is still 243.3MB. Free memory was 153.3MB in the beginning and 137.0MB in the end (delta: 16.3MB). Peak memory consumption was 15.7MB. Max. memory is 8.0GB. * TraceAbstraction took 32914.70ms. Allocated memory was 243.3MB in the beginning and 427.8MB in the end (delta: 184.5MB). Free memory was 136.5MB in the beginning and 271.6MB in the end (delta: -135.2MB). Peak memory consumption was 187.8MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 326 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 32.7s, OverallIterations: 13, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 28.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4658 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4658 mSDsluCounter, 9517 SdHoareTripleChecker+Invalid, 0.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5707 mSDsCounter, 232 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 706 IncrementalHoareTripleChecker+Invalid, 938 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 232 mSolverCounterUnsat, 3810 mSDtfsCounter, 706 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 98 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 73 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=860occurred in iteration=7, InterpolantAutomatonStates: 77, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 13 MinimizatonAttempts, 2576 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 177 LocationsWithAnnotation, 177 PreInvPairs, 491 NumberOfFragments, 4671 HoareAnnotationTreeSize, 177 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 20.5s HoareSimplificationTime, 177 FomulaSimplificationsInter, 4593693 FormulaSimplificationTreeSizeReductionInter, 8.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.6s InterpolantComputationTime, 758 NumberOfCodeBlocks, 758 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 745 ConstructedInterpolants, 0 QuantifiedInterpolants, 1416 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 13 InterpolantComputations, 13 PerfectInterpolantSequences, 186/186 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 716]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || ((((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, tmp) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 698]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || ((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || (((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp___0, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(tmp___0, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning)) || ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp___0, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning)) || ((((((~bvule32(tmp___0, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning)) || ((((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || (((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 591]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 603]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp___0, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 1024]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning RESULT: Ultimate proved your program to be correct! [2022-01-10 18:15:24,318 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...