/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 18:17:57,245 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 18:17:57,247 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 18:17:57,297 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 18:17:57,297 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 18:17:57,298 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 18:17:57,299 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 18:17:57,301 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 18:17:57,302 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 18:17:57,303 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 18:17:57,303 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 18:17:57,304 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 18:17:57,305 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 18:17:57,305 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 18:17:57,306 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 18:17:57,307 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 18:17:57,308 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 18:17:57,308 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 18:17:57,310 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 18:17:57,311 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 18:17:57,313 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 18:17:57,314 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 18:17:57,315 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 18:17:57,315 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 18:17:57,318 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 18:17:57,318 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 18:17:57,318 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 18:17:57,319 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 18:17:57,320 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 18:17:57,320 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 18:17:57,321 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 18:17:57,321 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 18:17:57,322 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 18:17:57,322 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 18:17:57,323 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 18:17:57,323 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 18:17:57,324 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 18:17:57,324 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 18:17:57,324 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 18:17:57,325 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 18:17:57,325 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 18:17:57,326 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf [2022-01-10 18:17:57,343 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 18:17:57,343 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 18:17:57,343 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 18:17:57,344 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 18:17:57,344 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 18:17:57,345 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 18:17:57,345 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 18:17:57,345 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 18:17:57,345 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 18:17:57,345 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 18:17:57,345 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 18:17:57,345 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 18:17:57,345 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 18:17:57,346 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 18:17:57,346 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 18:17:57,346 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 18:17:57,346 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 18:17:57,346 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 18:17:57,346 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 18:17:57,346 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 18:17:57,346 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 18:17:57,347 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:17:57,347 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 18:17:57,347 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 18:17:57,352 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 18:17:57,352 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 18:17:57,352 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 18:17:57,353 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 18:17:57,353 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 18:17:57,353 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 18:17:57,353 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 18:17:57,353 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 18:17:57,354 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 18:17:57,354 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_LAZY WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 18:17:57,521 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 18:17:57,547 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 18:17:57,550 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 18:17:57,551 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 18:17:57,553 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 18:17:57,554 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c [2022-01-10 18:17:57,604 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/733cd7873/21aeaed05a8f47ffad35c86ae5bac328/FLAGf10a818de [2022-01-10 18:17:58,075 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 18:17:58,076 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c [2022-01-10 18:17:58,087 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/733cd7873/21aeaed05a8f47ffad35c86ae5bac328/FLAGf10a818de [2022-01-10 18:17:58,581 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/733cd7873/21aeaed05a8f47ffad35c86ae5bac328 [2022-01-10 18:17:58,583 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 18:17:58,584 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 18:17:58,588 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 18:17:58,588 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 18:17:58,591 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 18:17:58,591 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:17:58" (1/1) ... [2022-01-10 18:17:58,592 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@55165ab4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:58, skipping insertion in model container [2022-01-10 18:17:58,592 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:17:58" (1/1) ... [2022-01-10 18:17:58,599 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 18:17:58,637 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:17:58,977 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c[18005,18018] [2022-01-10 18:17:58,981 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:17:58,999 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 18:17:59,006 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:17:59,055 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c[18005,18018] [2022-01-10 18:17:59,057 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:17:59,069 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 18:17:59,119 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product44.cil.c[18005,18018] [2022-01-10 18:17:59,120 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:17:59,136 INFO L208 MainTranslator]: Completed translation [2022-01-10 18:17:59,136 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59 WrapperNode [2022-01-10 18:17:59,136 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 18:17:59,137 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 18:17:59,137 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 18:17:59,138 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 18:17:59,144 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59" (1/1) ... [2022-01-10 18:17:59,157 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59" (1/1) ... [2022-01-10 18:17:59,188 INFO L137 Inliner]: procedures = 59, calls = 157, calls flagged for inlining = 54, calls inlined = 66, statements flattened = 502 [2022-01-10 18:17:59,188 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 18:17:59,189 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 18:17:59,189 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 18:17:59,189 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 18:17:59,196 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59" (1/1) ... [2022-01-10 18:17:59,196 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59" (1/1) ... [2022-01-10 18:17:59,201 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59" (1/1) ... [2022-01-10 18:17:59,201 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59" (1/1) ... [2022-01-10 18:17:59,215 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59" (1/1) ... [2022-01-10 18:17:59,229 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59" (1/1) ... [2022-01-10 18:17:59,231 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59" (1/1) ... [2022-01-10 18:17:59,234 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 18:17:59,235 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 18:17:59,235 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 18:17:59,236 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 18:17:59,236 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59" (1/1) ... [2022-01-10 18:17:59,245 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:17:59,254 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:17:59,269 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 18:17:59,279 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 18:17:59,299 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 18:17:59,299 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 18:17:59,300 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 18:17:59,300 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 18:17:59,359 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 18:17:59,360 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 18:17:59,636 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 18:17:59,643 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 18:17:59,643 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 18:17:59,645 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:17:59 BoogieIcfgContainer [2022-01-10 18:17:59,645 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 18:17:59,645 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 18:17:59,645 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 18:17:59,646 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 18:17:59,649 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:17:59" (1/1) ... [2022-01-10 18:17:59,802 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:17:59 BasicIcfg [2022-01-10 18:17:59,802 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 18:17:59,806 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 18:17:59,806 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 18:17:59,809 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 18:17:59,809 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 06:17:58" (1/4) ... [2022-01-10 18:17:59,810 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76eccfff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:17:59, skipping insertion in model container [2022-01-10 18:17:59,810 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:17:59" (2/4) ... [2022-01-10 18:17:59,810 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76eccfff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:17:59, skipping insertion in model container [2022-01-10 18:17:59,810 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:17:59" (3/4) ... [2022-01-10 18:17:59,810 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76eccfff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:17:59, skipping insertion in model container [2022-01-10 18:17:59,811 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:17:59" (4/4) ... [2022-01-10 18:17:59,811 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product44.cil.cTransformedIcfg [2022-01-10 18:17:59,815 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 18:17:59,816 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 18:17:59,853 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 18:17:59,858 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 18:17:59,859 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 18:17:59,872 INFO L276 IsEmpty]: Start isEmpty. Operand has 135 states, 131 states have (on average 1.381679389312977) internal successors, (181), 134 states have internal predecessors, (181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:17:59,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-01-10 18:17:59,877 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:17:59,877 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:17:59,878 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:17:59,882 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:17:59,883 INFO L85 PathProgramCache]: Analyzing trace with hash 1599545598, now seen corresponding path program 1 times [2022-01-10 18:17:59,890 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:17:59,890 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [214549079] [2022-01-10 18:17:59,890 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:17:59,891 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:00,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:00,163 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:00,164 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:00,165 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [214549079] [2022-01-10 18:18:00,165 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [214549079] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:00,165 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:00,165 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:00,167 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1347041766] [2022-01-10 18:18:00,169 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:00,172 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 18:18:00,173 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:00,201 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 18:18:00,202 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:18:00,207 INFO L87 Difference]: Start difference. First operand has 135 states, 131 states have (on average 1.381679389312977) internal successors, (181), 134 states have internal predecessors, (181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:00,259 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:00,260 INFO L93 Difference]: Finished difference Result 259 states and 350 transitions. [2022-01-10 18:18:00,263 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 18:18:00,265 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-01-10 18:18:00,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:00,274 INFO L225 Difference]: With dead ends: 259 [2022-01-10 18:18:00,274 INFO L226 Difference]: Without dead ends: 125 [2022-01-10 18:18:00,278 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:18:00,282 INFO L933 BasicCegarLoop]: 171 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:00,283 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 171 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:00,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2022-01-10 18:18:00,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 125. [2022-01-10 18:18:00,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 122 states have (on average 1.3360655737704918) internal successors, (163), 124 states have internal predecessors, (163), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:00,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 163 transitions. [2022-01-10 18:18:00,339 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 163 transitions. Word has length 21 [2022-01-10 18:18:00,340 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:00,340 INFO L470 AbstractCegarLoop]: Abstraction has 125 states and 163 transitions. [2022-01-10 18:18:00,340 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:00,341 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 163 transitions. [2022-01-10 18:18:00,343 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-01-10 18:18:00,344 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:00,344 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:00,344 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 18:18:00,344 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:00,348 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:00,349 INFO L85 PathProgramCache]: Analyzing trace with hash -1202383059, now seen corresponding path program 1 times [2022-01-10 18:18:00,349 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:00,349 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [891094057] [2022-01-10 18:18:00,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:00,350 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:00,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:00,484 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:00,484 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:00,484 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [891094057] [2022-01-10 18:18:00,485 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [891094057] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:00,485 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:00,485 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:00,485 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [974752861] [2022-01-10 18:18:00,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:00,486 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:00,486 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:00,487 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:00,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:00,487 INFO L87 Difference]: Start difference. First operand 125 states and 163 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:00,550 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:00,550 INFO L93 Difference]: Finished difference Result 312 states and 411 transitions. [2022-01-10 18:18:00,551 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:00,551 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-01-10 18:18:00,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:00,552 INFO L225 Difference]: With dead ends: 312 [2022-01-10 18:18:00,552 INFO L226 Difference]: Without dead ends: 195 [2022-01-10 18:18:00,553 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:00,554 INFO L933 BasicCegarLoop]: 160 mSDtfsCounter, 143 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 143 SdHoareTripleChecker+Valid, 246 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:00,555 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [143 Valid, 246 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:00,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2022-01-10 18:18:00,573 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 186. [2022-01-10 18:18:00,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 186 states, 183 states have (on average 1.3442622950819672) internal successors, (246), 185 states have internal predecessors, (246), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:00,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186 states to 186 states and 246 transitions. [2022-01-10 18:18:00,575 INFO L78 Accepts]: Start accepts. Automaton has 186 states and 246 transitions. Word has length 22 [2022-01-10 18:18:00,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:00,575 INFO L470 AbstractCegarLoop]: Abstraction has 186 states and 246 transitions. [2022-01-10 18:18:00,575 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:00,576 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 246 transitions. [2022-01-10 18:18:00,576 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-10 18:18:00,577 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:00,577 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:00,577 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 18:18:00,577 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:00,578 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:00,578 INFO L85 PathProgramCache]: Analyzing trace with hash 758861555, now seen corresponding path program 1 times [2022-01-10 18:18:00,578 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:00,578 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1983638861] [2022-01-10 18:18:00,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:00,578 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:00,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:00,666 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:00,666 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:00,667 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1983638861] [2022-01-10 18:18:00,668 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1983638861] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:00,668 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:00,668 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:00,668 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [565789715] [2022-01-10 18:18:00,669 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:00,669 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:00,670 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:00,670 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:00,670 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:00,671 INFO L87 Difference]: Start difference. First operand 186 states and 246 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:00,746 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:00,746 INFO L93 Difference]: Finished difference Result 430 states and 567 transitions. [2022-01-10 18:18:00,746 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:00,746 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-10 18:18:00,747 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:00,748 INFO L225 Difference]: With dead ends: 430 [2022-01-10 18:18:00,748 INFO L226 Difference]: Without dead ends: 252 [2022-01-10 18:18:00,749 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:00,751 INFO L933 BasicCegarLoop]: 163 mSDtfsCounter, 123 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 250 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:00,751 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [123 Valid, 250 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:00,752 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 252 states. [2022-01-10 18:18:00,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 252 to 246. [2022-01-10 18:18:00,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 246 states, 243 states have (on average 1.300411522633745) internal successors, (316), 245 states have internal predecessors, (316), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:00,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246 states to 246 states and 316 transitions. [2022-01-10 18:18:00,779 INFO L78 Accepts]: Start accepts. Automaton has 246 states and 316 transitions. Word has length 25 [2022-01-10 18:18:00,779 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:00,779 INFO L470 AbstractCegarLoop]: Abstraction has 246 states and 316 transitions. [2022-01-10 18:18:00,780 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:00,780 INFO L276 IsEmpty]: Start isEmpty. Operand 246 states and 316 transitions. [2022-01-10 18:18:00,784 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-01-10 18:18:00,784 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:00,785 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:00,785 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 18:18:00,785 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:00,787 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:00,787 INFO L85 PathProgramCache]: Analyzing trace with hash -737119736, now seen corresponding path program 1 times [2022-01-10 18:18:00,788 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:00,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1205546102] [2022-01-10 18:18:00,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:00,788 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:00,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:00,907 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:00,908 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:00,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1205546102] [2022-01-10 18:18:00,908 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1205546102] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:00,908 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:00,908 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:18:00,908 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1160553590] [2022-01-10 18:18:00,909 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:00,910 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:18:00,911 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:00,912 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:18:00,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:00,912 INFO L87 Difference]: Start difference. First operand 246 states and 316 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:01,150 INFO L93 Difference]: Finished difference Result 852 states and 1077 transitions. [2022-01-10 18:18:01,150 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-10 18:18:01,150 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-01-10 18:18:01,151 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:01,153 INFO L225 Difference]: With dead ends: 852 [2022-01-10 18:18:01,153 INFO L226 Difference]: Without dead ends: 614 [2022-01-10 18:18:01,154 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 18:18:01,155 INFO L933 BasicCegarLoop]: 292 mSDtfsCounter, 561 mSDsluCounter, 600 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 561 SdHoareTripleChecker+Valid, 892 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:01,156 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [561 Valid, 892 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:01,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 614 states. [2022-01-10 18:18:01,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 614 to 240. [2022-01-10 18:18:01,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 237 states have (on average 1.2573839662447257) internal successors, (298), 239 states have internal predecessors, (298), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,183 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 298 transitions. [2022-01-10 18:18:01,183 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 298 transitions. Word has length 31 [2022-01-10 18:18:01,183 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:01,184 INFO L470 AbstractCegarLoop]: Abstraction has 240 states and 298 transitions. [2022-01-10 18:18:01,184 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 4 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,184 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 298 transitions. [2022-01-10 18:18:01,185 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-01-10 18:18:01,185 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:01,185 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:01,185 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 18:18:01,185 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:01,186 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:01,186 INFO L85 PathProgramCache]: Analyzing trace with hash -491460401, now seen corresponding path program 1 times [2022-01-10 18:18:01,186 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:01,186 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [484418715] [2022-01-10 18:18:01,186 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:01,186 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:01,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:01,236 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:01,237 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:01,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [484418715] [2022-01-10 18:18:01,237 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [484418715] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:01,250 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:01,251 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:18:01,251 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [44799374] [2022-01-10 18:18:01,251 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:01,251 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:18:01,251 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:01,252 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:18:01,252 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:01,252 INFO L87 Difference]: Start difference. First operand 240 states and 298 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:01,356 INFO L93 Difference]: Finished difference Result 709 states and 874 transitions. [2022-01-10 18:18:01,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 18:18:01,357 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-01-10 18:18:01,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:01,364 INFO L225 Difference]: With dead ends: 709 [2022-01-10 18:18:01,364 INFO L226 Difference]: Without dead ends: 477 [2022-01-10 18:18:01,365 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:18:01,370 INFO L933 BasicCegarLoop]: 214 mSDtfsCounter, 301 mSDsluCounter, 543 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 301 SdHoareTripleChecker+Valid, 757 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:01,370 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [301 Valid, 757 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:01,372 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 477 states. [2022-01-10 18:18:01,402 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 477 to 249. [2022-01-10 18:18:01,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 249 states, 246 states have (on average 1.2479674796747968) internal successors, (307), 248 states have internal predecessors, (307), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 307 transitions. [2022-01-10 18:18:01,406 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 307 transitions. Word has length 35 [2022-01-10 18:18:01,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:01,412 INFO L470 AbstractCegarLoop]: Abstraction has 249 states and 307 transitions. [2022-01-10 18:18:01,412 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,412 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 307 transitions. [2022-01-10 18:18:01,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-01-10 18:18:01,416 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:01,416 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:01,416 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 18:18:01,416 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:01,417 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:01,417 INFO L85 PathProgramCache]: Analyzing trace with hash 861849296, now seen corresponding path program 1 times [2022-01-10 18:18:01,418 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:01,418 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [89574144] [2022-01-10 18:18:01,418 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:01,418 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:01,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:01,470 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:01,471 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:01,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [89574144] [2022-01-10 18:18:01,471 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [89574144] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:01,471 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:01,471 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:18:01,471 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1858874261] [2022-01-10 18:18:01,471 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:01,472 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 18:18:01,472 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:01,472 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 18:18:01,472 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 18:18:01,472 INFO L87 Difference]: Start difference. First operand 249 states and 307 transitions. Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:01,553 INFO L93 Difference]: Finished difference Result 739 states and 904 transitions. [2022-01-10 18:18:01,553 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:18:01,554 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-01-10 18:18:01,554 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:01,556 INFO L225 Difference]: With dead ends: 739 [2022-01-10 18:18:01,556 INFO L226 Difference]: Without dead ends: 498 [2022-01-10 18:18:01,557 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:01,562 INFO L933 BasicCegarLoop]: 204 mSDtfsCounter, 261 mSDsluCounter, 360 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 564 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:01,564 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [261 Valid, 564 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:01,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2022-01-10 18:18:01,589 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 255. [2022-01-10 18:18:01,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 252 states have (on average 1.242063492063492) internal successors, (313), 254 states have internal predecessors, (313), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 313 transitions. [2022-01-10 18:18:01,590 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 313 transitions. Word has length 35 [2022-01-10 18:18:01,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:01,592 INFO L470 AbstractCegarLoop]: Abstraction has 255 states and 313 transitions. [2022-01-10 18:18:01,592 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,592 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 313 transitions. [2022-01-10 18:18:01,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-01-10 18:18:01,592 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:01,593 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:01,593 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 18:18:01,593 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:01,593 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:01,593 INFO L85 PathProgramCache]: Analyzing trace with hash 17377425, now seen corresponding path program 1 times [2022-01-10 18:18:01,594 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:01,594 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [842159042] [2022-01-10 18:18:01,594 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:01,594 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:01,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:01,677 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:01,677 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:01,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [842159042] [2022-01-10 18:18:01,678 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [842159042] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:01,678 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:01,678 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:01,678 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1938564645] [2022-01-10 18:18:01,678 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:01,678 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:01,679 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:01,679 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:01,679 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:01,679 INFO L87 Difference]: Start difference. First operand 255 states and 313 transitions. Second operand has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 2 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:01,779 INFO L93 Difference]: Finished difference Result 635 states and 777 transitions. [2022-01-10 18:18:01,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:01,780 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 2 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-01-10 18:18:01,780 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:01,782 INFO L225 Difference]: With dead ends: 635 [2022-01-10 18:18:01,782 INFO L226 Difference]: Without dead ends: 316 [2022-01-10 18:18:01,783 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:01,786 INFO L933 BasicCegarLoop]: 156 mSDtfsCounter, 85 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 294 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:01,786 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [85 Valid, 294 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:01,787 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-01-10 18:18:01,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 316. [2022-01-10 18:18:01,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 313 states have (on average 1.2364217252396166) internal successors, (387), 315 states have internal predecessors, (387), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 387 transitions. [2022-01-10 18:18:01,819 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 387 transitions. Word has length 35 [2022-01-10 18:18:01,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:01,820 INFO L470 AbstractCegarLoop]: Abstraction has 316 states and 387 transitions. [2022-01-10 18:18:01,820 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 2 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:01,820 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 387 transitions. [2022-01-10 18:18:01,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-01-10 18:18:01,820 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:01,821 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:01,821 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 18:18:01,822 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:01,822 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:01,822 INFO L85 PathProgramCache]: Analyzing trace with hash 1916980708, now seen corresponding path program 1 times [2022-01-10 18:18:01,822 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:01,822 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [670454891] [2022-01-10 18:18:01,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:01,823 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:01,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:01,960 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:01,960 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:01,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [670454891] [2022-01-10 18:18:01,960 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [670454891] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:01,960 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:01,960 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:18:01,960 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2038886131] [2022-01-10 18:18:01,961 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:01,961 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 18:18:01,961 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:01,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 18:18:01,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 18:18:01,962 INFO L87 Difference]: Start difference. First operand 316 states and 387 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:02,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:02,317 INFO L93 Difference]: Finished difference Result 1554 states and 1920 transitions. [2022-01-10 18:18:02,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-01-10 18:18:02,318 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-01-10 18:18:02,319 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:02,323 INFO L225 Difference]: With dead ends: 1554 [2022-01-10 18:18:02,323 INFO L226 Difference]: Without dead ends: 1161 [2022-01-10 18:18:02,324 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2022-01-10 18:18:02,326 INFO L933 BasicCegarLoop]: 316 mSDtfsCounter, 796 mSDsluCounter, 805 mSDsCounter, 0 mSdLazyCounter, 130 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 796 SdHoareTripleChecker+Valid, 1121 SdHoareTripleChecker+Invalid, 189 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 130 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:02,329 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [796 Valid, 1121 Invalid, 189 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:02,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1161 states. [2022-01-10 18:18:02,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1161 to 590. [2022-01-10 18:18:02,393 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 590 states, 587 states have (on average 1.2146507666098807) internal successors, (713), 589 states have internal predecessors, (713), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:02,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 590 states to 590 states and 713 transitions. [2022-01-10 18:18:02,394 INFO L78 Accepts]: Start accepts. Automaton has 590 states and 713 transitions. Word has length 44 [2022-01-10 18:18:02,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:02,395 INFO L470 AbstractCegarLoop]: Abstraction has 590 states and 713 transitions. [2022-01-10 18:18:02,395 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:02,395 INFO L276 IsEmpty]: Start isEmpty. Operand 590 states and 713 transitions. [2022-01-10 18:18:02,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-01-10 18:18:02,397 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:02,397 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:02,397 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 18:18:02,397 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:02,398 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:02,398 INFO L85 PathProgramCache]: Analyzing trace with hash -926213355, now seen corresponding path program 1 times [2022-01-10 18:18:02,398 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:02,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [662555543] [2022-01-10 18:18:02,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:02,398 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:02,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:02,464 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:02,464 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:02,464 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [662555543] [2022-01-10 18:18:02,464 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [662555543] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:02,464 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:02,465 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:18:02,465 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [208991014] [2022-01-10 18:18:02,465 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:02,466 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:02,466 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:02,466 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:02,467 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:02,467 INFO L87 Difference]: Start difference. First operand 590 states and 713 transitions. Second operand has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:02,519 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:02,519 INFO L93 Difference]: Finished difference Result 590 states and 713 transitions. [2022-01-10 18:18:02,520 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:02,520 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2022-01-10 18:18:02,521 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:02,522 INFO L225 Difference]: With dead ends: 590 [2022-01-10 18:18:02,523 INFO L226 Difference]: Without dead ends: 307 [2022-01-10 18:18:02,523 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:02,525 INFO L933 BasicCegarLoop]: 74 mSDtfsCounter, 33 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 81 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:02,525 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [33 Valid, 81 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:02,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 307 states. [2022-01-10 18:18:02,573 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 307 to 307. [2022-01-10 18:18:02,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 307 states, 306 states have (on average 1.2516339869281046) internal successors, (383), 306 states have internal predecessors, (383), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:02,574 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 383 transitions. [2022-01-10 18:18:02,574 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 383 transitions. Word has length 61 [2022-01-10 18:18:02,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:02,575 INFO L470 AbstractCegarLoop]: Abstraction has 307 states and 383 transitions. [2022-01-10 18:18:02,575 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 20.333333333333332) internal successors, (61), 3 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:02,575 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 383 transitions. [2022-01-10 18:18:02,575 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-01-10 18:18:02,575 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:02,576 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:02,576 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 18:18:02,576 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:02,576 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:02,576 INFO L85 PathProgramCache]: Analyzing trace with hash 925359092, now seen corresponding path program 1 times [2022-01-10 18:18:02,576 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:02,577 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [418742611] [2022-01-10 18:18:02,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:02,577 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:02,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:02,628 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:02,628 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:02,628 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [418742611] [2022-01-10 18:18:02,628 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [418742611] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 18:18:02,628 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2038989264] [2022-01-10 18:18:02,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:02,629 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 18:18:02,629 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:18:02,631 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 18:18:02,662 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-10 18:18:02,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:02,771 INFO L263 TraceCheckSpWp]: Trace formula consists of 597 conjuncts, 5 conjunts are in the unsatisfiable core [2022-01-10 18:18:02,777 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 18:18:02,975 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:02,975 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 18:18:03,103 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:03,104 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2038989264] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 18:18:03,104 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 18:18:03,104 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 5 [2022-01-10 18:18:03,104 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1829163923] [2022-01-10 18:18:03,104 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 18:18:03,105 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:18:03,105 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:03,106 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:18:03,106 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:03,106 INFO L87 Difference]: Start difference. First operand 307 states and 383 transitions. Second operand has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:03,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:03,209 INFO L93 Difference]: Finished difference Result 680 states and 854 transitions. [2022-01-10 18:18:03,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-10 18:18:03,210 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 68 [2022-01-10 18:18:03,211 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:03,212 INFO L225 Difference]: With dead ends: 680 [2022-01-10 18:18:03,212 INFO L226 Difference]: Without dead ends: 381 [2022-01-10 18:18:03,213 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 137 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-01-10 18:18:03,214 INFO L933 BasicCegarLoop]: 129 mSDtfsCounter, 136 mSDsluCounter, 263 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 392 SdHoareTripleChecker+Invalid, 49 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:03,214 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [136 Valid, 392 Invalid, 49 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:03,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 381 states. [2022-01-10 18:18:03,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 381 to 314. [2022-01-10 18:18:03,253 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 314 states, 313 states have (on average 1.2236421725239617) internal successors, (383), 313 states have internal predecessors, (383), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:03,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 383 transitions. [2022-01-10 18:18:03,254 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 383 transitions. Word has length 68 [2022-01-10 18:18:03,255 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:03,256 INFO L470 AbstractCegarLoop]: Abstraction has 314 states and 383 transitions. [2022-01-10 18:18:03,256 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:03,256 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 383 transitions. [2022-01-10 18:18:03,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2022-01-10 18:18:03,258 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:03,258 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:03,287 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-01-10 18:18:03,479 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-01-10 18:18:03,480 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:03,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:03,480 INFO L85 PathProgramCache]: Analyzing trace with hash 962686439, now seen corresponding path program 1 times [2022-01-10 18:18:03,480 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:03,480 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1042380614] [2022-01-10 18:18:03,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:03,480 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:03,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:03,536 INFO L134 CoverageAnalysis]: Checked inductivity of 131 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2022-01-10 18:18:03,537 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:03,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1042380614] [2022-01-10 18:18:03,537 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1042380614] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:03,537 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:03,537 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:18:03,537 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [927665860] [2022-01-10 18:18:03,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:03,538 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:03,538 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:03,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:03,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:03,538 INFO L87 Difference]: Start difference. First operand 314 states and 383 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:03,603 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:03,603 INFO L93 Difference]: Finished difference Result 626 states and 764 transitions. [2022-01-10 18:18:03,603 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:03,604 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 128 [2022-01-10 18:18:03,604 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:03,605 INFO L225 Difference]: With dead ends: 626 [2022-01-10 18:18:03,605 INFO L226 Difference]: Without dead ends: 320 [2022-01-10 18:18:03,606 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:03,606 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 28 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 167 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:03,607 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [28 Valid, 167 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:03,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 320 states. [2022-01-10 18:18:03,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 320 to 314. [2022-01-10 18:18:03,651 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 314 states, 313 states have (on average 1.2140575079872205) internal successors, (380), 313 states have internal predecessors, (380), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:03,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 314 states to 314 states and 380 transitions. [2022-01-10 18:18:03,652 INFO L78 Accepts]: Start accepts. Automaton has 314 states and 380 transitions. Word has length 128 [2022-01-10 18:18:03,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:03,652 INFO L470 AbstractCegarLoop]: Abstraction has 314 states and 380 transitions. [2022-01-10 18:18:03,652 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:03,652 INFO L276 IsEmpty]: Start isEmpty. Operand 314 states and 380 transitions. [2022-01-10 18:18:03,656 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 148 [2022-01-10 18:18:03,656 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:03,657 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:03,657 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 18:18:03,657 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:03,657 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:03,657 INFO L85 PathProgramCache]: Analyzing trace with hash 1364416583, now seen corresponding path program 1 times [2022-01-10 18:18:03,658 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:03,658 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [259362785] [2022-01-10 18:18:03,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:03,658 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:03,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:03,852 INFO L134 CoverageAnalysis]: Checked inductivity of 204 backedges. 145 proven. 2 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2022-01-10 18:18:03,852 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:03,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [259362785] [2022-01-10 18:18:03,852 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [259362785] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 18:18:03,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [420437125] [2022-01-10 18:18:03,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:03,853 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 18:18:03,853 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:18:03,854 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 18:18:03,882 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-01-10 18:18:04,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:04,028 INFO L263 TraceCheckSpWp]: Trace formula consists of 965 conjuncts, 15 conjunts are in the unsatisfiable core [2022-01-10 18:18:04,036 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 18:18:04,308 INFO L134 CoverageAnalysis]: Checked inductivity of 204 backedges. 124 proven. 6 refuted. 0 times theorem prover too weak. 74 trivial. 0 not checked. [2022-01-10 18:18:04,308 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 18:18:04,573 INFO L134 CoverageAnalysis]: Checked inductivity of 204 backedges. 126 proven. 4 refuted. 0 times theorem prover too weak. 74 trivial. 0 not checked. [2022-01-10 18:18:04,573 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [420437125] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 18:18:04,574 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 18:18:04,574 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 15 [2022-01-10 18:18:04,574 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [700800085] [2022-01-10 18:18:04,574 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 18:18:04,575 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-01-10 18:18:04,575 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:04,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-01-10 18:18:04,575 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-01-10 18:18:04,575 INFO L87 Difference]: Start difference. First operand 314 states and 380 transitions. Second operand has 15 states, 15 states have (on average 11.466666666666667) internal successors, (172), 15 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:05,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:05,084 INFO L93 Difference]: Finished difference Result 1080 states and 1316 transitions. [2022-01-10 18:18:05,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-10 18:18:05,084 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 11.466666666666667) internal successors, (172), 15 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 147 [2022-01-10 18:18:05,084 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:05,084 INFO L225 Difference]: With dead ends: 1080 [2022-01-10 18:18:05,085 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 18:18:05,086 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 321 GetRequests, 294 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 117 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=176, Invalid=636, Unknown=0, NotChecked=0, Total=812 [2022-01-10 18:18:05,086 INFO L933 BasicCegarLoop]: 226 mSDtfsCounter, 1372 mSDsluCounter, 1206 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1372 SdHoareTripleChecker+Valid, 1432 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:05,086 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1372 Valid, 1432 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:05,087 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 18:18:05,087 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 18:18:05,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:05,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 18:18:05,087 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 147 [2022-01-10 18:18:05,087 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:05,087 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 18:18:05,088 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 11.466666666666667) internal successors, (172), 15 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:05,088 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 18:18:05,088 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 18:18:05,090 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 18:18:05,090 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 18:18:05,091 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 18:18:05,114 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-01-10 18:18:05,314 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-10 18:18:05,316 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 18:18:14,232 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 18:18:14,233 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 18:18:14,233 INFO L854 garLoopResultBuilder]: At program point L817(lines 813 819) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:18:14,233 INFO L854 garLoopResultBuilder]: At program point L810(lines 806 812) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:18:14,233 INFO L854 garLoopResultBuilder]: At program point L825(lines 820 828) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:18:14,233 INFO L858 garLoopResultBuilder]: For program point L914(lines 914 921) no Hoare annotation was computed. [2022-01-10 18:18:14,233 INFO L854 garLoopResultBuilder]: At program point L889(lines 885 891) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:18:14,233 INFO L858 garLoopResultBuilder]: For program point L914-2(lines 914 921) no Hoare annotation was computed. [2022-01-10 18:18:14,234 INFO L854 garLoopResultBuilder]: At program point L943(lines 938 945) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:18:14,234 INFO L861 garLoopResultBuilder]: At program point L923(lines 904 926) the Hoare annotation is: true [2022-01-10 18:18:14,234 INFO L854 garLoopResultBuilder]: At program point L733-2(lines 733 782) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0Int 1))) (let ((.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (or .cse11 (<= 4294967297 ~waterLevel~0Int))) (.cse10 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~systemActive~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse8 .cse3 .cse4 .cse9 .cse10) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse10) (and .cse11 .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5)))) [2022-01-10 18:18:14,234 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 18:18:14,234 INFO L854 garLoopResultBuilder]: At program point L783(lines 732 784) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 18:18:14,234 INFO L858 garLoopResultBuilder]: For program point L734(lines 733 782) no Hoare annotation was computed. [2022-01-10 18:18:14,234 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 18:18:14,234 INFO L854 garLoopResultBuilder]: At program point L639-2(lines 634 642) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:14,234 INFO L858 garLoopResultBuilder]: For program point L735(lines 735 739) no Hoare annotation was computed. [2022-01-10 18:18:14,235 INFO L854 garLoopResultBuilder]: At program point L953-1(lines 946 955) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:14,235 INFO L858 garLoopResultBuilder]: For program point L743(lines 743 749) no Hoare annotation was computed. [2022-01-10 18:18:14,235 INFO L858 garLoopResultBuilder]: For program point L536-3(lines 536 542) no Hoare annotation was computed. [2022-01-10 18:18:14,235 INFO L858 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-01-10 18:18:14,235 INFO L858 garLoopResultBuilder]: For program point L743-2(lines 743 749) no Hoare annotation was computed. [2022-01-10 18:18:14,235 INFO L858 garLoopResultBuilder]: For program point L63-3(lines 63 67) no Hoare annotation was computed. [2022-01-10 18:18:14,235 INFO L858 garLoopResultBuilder]: For program point L536-5(lines 532 554) no Hoare annotation was computed. [2022-01-10 18:18:14,235 INFO L854 garLoopResultBuilder]: At program point L75-2(lines 71 82) the Hoare annotation is: (let ((.cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1))) (.cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse4 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse9 (<= 1 ~pumpRunning~0Int)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse5 (<= ~waterLevel~0Int 2)) (.cse7 (= ~systemActive~0Int 0)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse10 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse11 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse12 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse6 .cse9) (and .cse1 .cse10 .cse11 .cse6 .cse12 .cse9) (and .cse1 .cse2 .cse5 .cse6 (<= 2 ~waterLevel~0Int)) (and .cse7 .cse8 .cse2 .cse10 .cse11 .cse6 .cse12))) [2022-01-10 18:18:14,235 INFO L858 garLoopResultBuilder]: For program point L753(lines 753 759) no Hoare annotation was computed. [2022-01-10 18:18:14,235 INFO L854 garLoopResultBuilder]: At program point L63-5(lines 59 70) the Hoare annotation is: false [2022-01-10 18:18:14,235 INFO L858 garLoopResultBuilder]: For program point L568-2(lines 568 585) no Hoare annotation was computed. [2022-01-10 18:18:14,236 INFO L858 garLoopResultBuilder]: For program point L543-3(lines 543 549) no Hoare annotation was computed. [2022-01-10 18:18:14,236 INFO L858 garLoopResultBuilder]: For program point L87(lines 87 91) no Hoare annotation was computed. [2022-01-10 18:18:14,236 INFO L858 garLoopResultBuilder]: For program point L753-2(lines 753 759) no Hoare annotation was computed. [2022-01-10 18:18:14,236 INFO L858 garLoopResultBuilder]: For program point L140-1(lines 140 146) no Hoare annotation was computed. [2022-01-10 18:18:14,236 INFO L854 garLoopResultBuilder]: At program point L560-3(lines 556 562) the Hoare annotation is: false [2022-01-10 18:18:14,236 INFO L854 garLoopResultBuilder]: At program point L132-1(lines 127 135) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 18:18:14,236 INFO L854 garLoopResultBuilder]: At program point L87-2(lines 83 94) the Hoare annotation is: (let ((.cse15 (<= ~waterLevel~0Int 1))) (let ((.cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1))) (.cse4 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse5 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse10 (or .cse15 (<= 4294967297 ~waterLevel~0Int))) (.cse12 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= 1 ~systemActive~0Int)) (.cse6 (<= ~waterLevel~0Int 2)) (.cse1 (= ~systemActive~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse13 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse14 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse1 .cse2 .cse3 .cse8 .cse9 .cse7 .cse10) (and .cse0 .cse11 .cse4 .cse5 .cse6 .cse7 .cse12) (and .cse11 .cse3 .cse8 .cse9 .cse7 .cse10) (and .cse11 .cse8 .cse9 .cse7 .cse10 .cse12) (and .cse11 .cse13 .cse9 .cse7 .cse14 .cse12) (and .cse15 .cse11 .cse3 .cse7 (<= 1 ~waterLevel~0Int)) (and .cse11 .cse3 .cse6 .cse7 (<= 2 ~waterLevel~0Int)) (and .cse1 .cse2 .cse3 .cse13 .cse9 .cse7 .cse14)))) [2022-01-10 18:18:14,236 INFO L858 garLoopResultBuilder]: For program point L763(lines 763 778) no Hoare annotation was computed. [2022-01-10 18:18:14,236 INFO L854 garLoopResultBuilder]: At program point L145-1(lines 136 149) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:14,236 INFO L854 garLoopResultBuilder]: At program point L568-3(lines 564 588) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:14,236 INFO L858 garLoopResultBuilder]: For program point L964-2(lines 964 981) no Hoare annotation was computed. [2022-01-10 18:18:14,237 INFO L854 garLoopResultBuilder]: At program point L718(lines 713 720) the Hoare annotation is: (let ((.cse8 (<= ~waterLevel~0Int 1))) (let ((.cse5 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (or .cse8 (<= 4294967297 ~waterLevel~0Int))) (.cse6 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse3 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse6 .cse2 .cse7) (and .cse0 .cse5 .cse6 .cse2 .cse7 .cse3) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse6 .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse3) (and .cse8 .cse0 .cse4 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse4 .cse1 .cse2 (<= 2 ~waterLevel~0Int))))) [2022-01-10 18:18:14,237 INFO L858 garLoopResultBuilder]: For program point L771(lines 771 777) no Hoare annotation was computed. [2022-01-10 18:18:14,237 INFO L858 garLoopResultBuilder]: For program point L688-3(lines 688 692) no Hoare annotation was computed. [2022-01-10 18:18:14,237 INFO L854 garLoopResultBuilder]: At program point L639-3(lines 634 642) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:14,237 INFO L854 garLoopResultBuilder]: At program point L964-3(lines 956 984) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 18:18:14,237 INFO L858 garLoopResultBuilder]: For program point L771-2(lines 763 778) no Hoare annotation was computed. [2022-01-10 18:18:14,237 INFO L858 garLoopResultBuilder]: For program point L702(lines 702 708) no Hoare annotation was computed. [2022-01-10 18:18:14,237 INFO L858 garLoopResultBuilder]: For program point L688-5(lines 688 692) no Hoare annotation was computed. [2022-01-10 18:18:14,237 INFO L858 garLoopResultBuilder]: For program point L968-2(lines 968 978) no Hoare annotation was computed. [2022-01-10 18:18:14,237 INFO L854 garLoopResultBuilder]: At program point L553-1(lines 529 555) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 18:18:14,237 INFO L854 garLoopResultBuilder]: At program point L639(lines 634 642) the Hoare annotation is: (let ((.cse13 (<= ~waterLevel~0Int 1))) (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse5 (<= 1 ~pumpRunning~0Int)) (.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse8 (or .cse13 (<= 4294967297 ~waterLevel~0Int))) (.cse1 (<= 1 ~systemActive~0Int)) (.cse3 (<= ~waterLevel~0Int 2)) (.cse12 (<= 2 ~waterLevel~0Int)) (.cse9 (= ~systemActive~0Int 0)) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse7 .cse4 .cse8 .cse5) (and .cse9 .cse10 .cse11 .cse6 .cse7 .cse4 .cse8) (and .cse0 .cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 .cse4 .cse12 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse5) (and .cse10 .cse1 .cse11 .cse6 .cse7 .cse4 .cse8) (and .cse9 .cse10 .cse11 .cse3 .cse4 .cse12) (and .cse13 .cse10 .cse1 .cse11 .cse2 .cse4) (and .cse10 .cse1 .cse11 .cse3 .cse4 .cse12) (and .cse13 .cse9 .cse10 .cse11 .cse2 .cse4)))) [2022-01-10 18:18:14,238 INFO L854 garLoopResultBuilder]: At program point L620(lines 615 622) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (and (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (<= ~waterLevel~0Int 2) .cse2) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2)))) [2022-01-10 18:18:14,238 INFO L858 garLoopResultBuilder]: For program point L702-2(lines 702 708) no Hoare annotation was computed. [2022-01-10 18:18:14,238 INFO L854 garLoopResultBuilder]: At program point L694-1(lines 679 697) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0)) [2022-01-10 18:18:14,238 INFO L858 garLoopResultBuilder]: For program point L969-3(lines 969 975) no Hoare annotation was computed. [2022-01-10 18:18:14,238 INFO L854 garLoopResultBuilder]: At program point L841-2(lines 841 855) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 18:18:14,238 INFO L854 garLoopResultBuilder]: At program point L953(lines 946 955) the Hoare annotation is: (let ((.cse13 (<= ~waterLevel~0Int 1))) (let ((.cse0 (= ~systemActive~0Int 0)) (.cse9 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse7 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse6 (or .cse13 (<= 4294967297 ~waterLevel~0Int))) (.cse11 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse12 (<= 1 ~pumpRunning~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse8 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse10 (<= ~waterLevel~0Int 2)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse14 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse8 .cse9 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse10 .cse5 .cse11 .cse12) (and .cse13 .cse0 .cse1 .cse2 .cse5 (<= 1 ~waterLevel~0Int)) (and .cse1 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse10 .cse5 .cse14) (and .cse7 .cse8 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse10 .cse5 .cse14 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse11 .cse12) (and .cse13 .cse1 .cse8 .cse2 .cse9 .cse5) (and .cse7 .cse8 .cse3 .cse4 .cse5 .cse6 .cse11 .cse12) (and .cse1 .cse8 .cse2 .cse10 .cse5 .cse14)))) [2022-01-10 18:18:14,238 INFO L854 garLoopResultBuilder]: At program point L710(lines 698 712) the Hoare annotation is: (let ((.cse1 (= ~systemActive~0Int 0)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse0 (<= ~waterLevel~0Int 1))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0Int)) (and .cse1 .cse2 (<= ~waterLevel~0Int 2) .cse3 (<= 2 ~waterLevel~0Int)) (and .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse3 (or .cse0 (<= 4294967297 ~waterLevel~0Int))))) [2022-01-10 18:18:14,238 INFO L858 garLoopResultBuilder]: For program point L572-3(lines 572 580) no Hoare annotation was computed. [2022-01-10 18:18:14,238 INFO L858 garLoopResultBuilder]: For program point L932-1(line 932) no Hoare annotation was computed. [2022-01-10 18:18:14,238 INFO L861 garLoopResultBuilder]: At program point L856(lines 831 860) the Hoare annotation is: true [2022-01-10 18:18:14,239 INFO L858 garLoopResultBuilder]: For program point L842(line 842) no Hoare annotation was computed. [2022-01-10 18:18:14,239 INFO L858 garLoopResultBuilder]: For program point L536(lines 536 542) no Hoare annotation was computed. [2022-01-10 18:18:14,239 INFO L854 garLoopResultBuilder]: At program point L100-1(lines 95 103) the Hoare annotation is: false [2022-01-10 18:18:14,239 INFO L854 garLoopResultBuilder]: At program point L560-2(lines 556 562) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 0)) [2022-01-10 18:18:14,239 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-01-10 18:18:14,239 INFO L854 garLoopResultBuilder]: At program point L933-1(lines 928 935) the Hoare annotation is: false [2022-01-10 18:18:14,239 INFO L861 garLoopResultBuilder]: At program point L788(lines 723 790) the Hoare annotation is: true [2022-01-10 18:18:14,239 INFO L858 garLoopResultBuilder]: For program point L845(lines 845 849) no Hoare annotation was computed. [2022-01-10 18:18:14,239 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-01-10 18:18:14,239 INFO L858 garLoopResultBuilder]: For program point L536-2(lines 532 554) no Hoare annotation was computed. [2022-01-10 18:18:14,240 INFO L854 garLoopResultBuilder]: At program point L630-1(lines 623 633) the Hoare annotation is: false [2022-01-10 18:18:14,240 INFO L861 garLoopResultBuilder]: At program point L901(lines 893 903) the Hoare annotation is: true [2022-01-10 18:18:14,240 INFO L858 garLoopResultBuilder]: For program point L845-1(lines 845 849) no Hoare annotation was computed. [2022-01-10 18:18:14,240 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse4 .cse5))) [2022-01-10 18:18:14,240 INFO L858 garLoopResultBuilder]: For program point L568(lines 568 585) no Hoare annotation was computed. [2022-01-10 18:18:14,240 INFO L858 garLoopResultBuilder]: For program point L543-1(lines 543 549) no Hoare annotation was computed. [2022-01-10 18:18:14,240 INFO L858 garLoopResultBuilder]: For program point L605-3(lines 605 611) no Hoare annotation was computed. [2022-01-10 18:18:14,240 INFO L854 garLoopResultBuilder]: At program point L639-4(lines 634 642) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:14,240 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-01-10 18:18:14,240 INFO L854 garLoopResultBuilder]: At program point L560-1(lines 556 562) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse4 .cse5))) [2022-01-10 18:18:14,241 INFO L854 garLoopResultBuilder]: At program point L132(lines 127 135) the Hoare annotation is: (let ((.cse4 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse6 (<= 1 ~pumpRunning~0Int)) (.cse7 (= ~systemActive~0Int 0)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse5 .cse3) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) .cse0 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0Int) .cse6) (and .cse7 .cse8 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse5 .cse3 .cse6) (and .cse7 .cse8 .cse1 .cse5 (<= ~waterLevel~0Int 2) .cse3 (<= 2 ~waterLevel~0Int)))) [2022-01-10 18:18:14,241 INFO L854 garLoopResultBuilder]: At program point L605-5(lines 598 614) the Hoare annotation is: false [2022-01-10 18:18:14,241 INFO L854 garLoopResultBuilder]: At program point L594-1(lines 589 596) the Hoare annotation is: false [2022-01-10 18:18:14,241 INFO L854 garLoopResultBuilder]: At program point L953-2(lines 946 955) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:14,241 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|)) (.cse1 (<= ~waterLevel~0Int 1)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 (or .cse1 (<= 4294967297 ~waterLevel~0Int))) (and .cse2 .cse3 (<= ~waterLevel~0Int 2) .cse4 (<= 2 ~waterLevel~0Int)))) [2022-01-10 18:18:14,241 INFO L854 garLoopResultBuilder]: At program point L568-1(lines 564 588) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1))) (let ((.cse9 (or .cse0 (<= 4294967297 ~waterLevel~0Int))) (.cse8 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse10 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse7 (<= 1 ~pumpRunning~0Int)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse5 (<= ~waterLevel~0Int 2)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse4 .cse6 .cse7) (and .cse8 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 .cse9 .cse10 .cse7) (and .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 .cse9) (and .cse0 .cse8 .cse1 .cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse10 .cse7) (and .cse1 .cse2 .cse5 .cse4 .cse6)))) [2022-01-10 18:18:14,241 INFO L858 garLoopResultBuilder]: For program point L964(lines 964 981) no Hoare annotation was computed. [2022-01-10 18:18:14,241 INFO L858 garLoopResultBuilder]: For program point L536-6(lines 536 542) no Hoare annotation was computed. [2022-01-10 18:18:14,241 INFO L858 garLoopResultBuilder]: For program point L688(lines 688 692) no Hoare annotation was computed. [2022-01-10 18:18:14,242 INFO L854 garLoopResultBuilder]: At program point L639-1(lines 634 642) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse6 (<= 1 ~systemActive~0Int)) (.cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int)))) (or (and (= ~systemActive~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) .cse6 .cse2 .cse3 .cse4 .cse5 (<= 1 ~switchedOnBeforeTS~0Int) (<= 1 ~pumpRunning~0Int)))) [2022-01-10 18:18:14,242 INFO L854 garLoopResultBuilder]: At program point L964-1(lines 956 984) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse10 (<= 1 ~pumpRunning~0Int)) (.cse6 (= ~systemActive~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse8 .cse3 .cse4 .cse9 .cse10) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse10) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-01-10 18:18:14,242 INFO L858 garLoopResultBuilder]: For program point L63-6(lines 63 67) no Hoare annotation was computed. [2022-01-10 18:18:14,242 INFO L858 garLoopResultBuilder]: For program point L536-8(lines 532 554) no Hoare annotation was computed. [2022-01-10 18:18:14,242 INFO L858 garLoopResultBuilder]: For program point L688-2(lines 688 692) no Hoare annotation was computed. [2022-01-10 18:18:14,242 INFO L858 garLoopResultBuilder]: For program point L968(lines 968 978) no Hoare annotation was computed. [2022-01-10 18:18:14,242 INFO L854 garLoopResultBuilder]: At program point L553(lines 529 555) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse10 (<= 1 ~pumpRunning~0Int)) (.cse6 (= ~systemActive~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse0 .cse8 .cse3 .cse4 .cse9 .cse10) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse10) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-01-10 18:18:14,242 INFO L854 garLoopResultBuilder]: At program point L63-8(lines 59 70) the Hoare annotation is: false [2022-01-10 18:18:14,242 INFO L858 garLoopResultBuilder]: For program point L568-4(lines 568 585) no Hoare annotation was computed. [2022-01-10 18:18:14,242 INFO L858 garLoopResultBuilder]: For program point L543-5(lines 543 549) no Hoare annotation was computed. [2022-01-10 18:18:14,243 INFO L854 garLoopResultBuilder]: At program point L694(lines 679 697) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|)) (.cse5 (<= ~waterLevel~0Int 1)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6) (and .cse2 .cse3 (<= ~waterLevel~0Int 2) .cse4 (<= 2 ~waterLevel~0Int)) (and .cse0 .cse5 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse4 .cse6))) [2022-01-10 18:18:14,243 INFO L858 garLoopResultBuilder]: For program point L969(lines 969 975) no Hoare annotation was computed. [2022-01-10 18:18:14,243 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 146) no Hoare annotation was computed. [2022-01-10 18:18:14,243 INFO L854 garLoopResultBuilder]: At program point L560-5(lines 556 562) the Hoare annotation is: false [2022-01-10 18:18:14,243 INFO L854 garLoopResultBuilder]: At program point L132-2(lines 127 135) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 18:18:14,243 INFO L858 garLoopResultBuilder]: For program point L572(lines 572 580) no Hoare annotation was computed. [2022-01-10 18:18:14,243 INFO L858 garLoopResultBuilder]: For program point L932(line 932) no Hoare annotation was computed. [2022-01-10 18:18:14,243 INFO L854 garLoopResultBuilder]: At program point L145-2(lines 136 149) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:14,243 INFO L854 garLoopResultBuilder]: At program point L568-5(lines 564 588) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:14,243 INFO L858 garLoopResultBuilder]: For program point L964-4(lines 964 981) no Hoare annotation was computed. [2022-01-10 18:18:14,243 INFO L854 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 2 ~waterLevel~0Int)) [2022-01-10 18:18:14,244 INFO L854 garLoopResultBuilder]: At program point L560(lines 556 562) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse2 .cse3 (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5) (and .cse0 .cse1 (<= ~waterLevel~0Int 2) .cse2 .cse3 (<= 2 ~waterLevel~0Int) .cse5) (and .cse4 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse2 .cse3 .cse5))) [2022-01-10 18:18:14,244 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-01-10 18:18:14,244 INFO L854 garLoopResultBuilder]: At program point L933(lines 928 935) the Hoare annotation is: false [2022-01-10 18:18:14,244 INFO L858 garLoopResultBuilder]: For program point L688-6(lines 688 692) no Hoare annotation was computed. [2022-01-10 18:18:14,244 INFO L854 garLoopResultBuilder]: At program point L639-5(lines 634 642) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:14,244 INFO L854 garLoopResultBuilder]: At program point L964-5(lines 956 984) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 18:18:14,244 INFO L854 garLoopResultBuilder]: At program point L630(lines 623 633) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 2 ~waterLevel~0Int)) [2022-01-10 18:18:14,244 INFO L858 garLoopResultBuilder]: For program point L688-8(lines 688 692) no Hoare annotation was computed. [2022-01-10 18:18:14,244 INFO L858 garLoopResultBuilder]: For program point L968-4(lines 968 978) no Hoare annotation was computed. [2022-01-10 18:18:14,244 INFO L854 garLoopResultBuilder]: At program point L553-2(lines 529 555) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0))) (.cse2 (= ~pumpRunning~0Int 0))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse1 .cse2) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2))) [2022-01-10 18:18:14,244 INFO L858 garLoopResultBuilder]: For program point L605(lines 605 611) no Hoare annotation was computed. [2022-01-10 18:18:14,245 INFO L854 garLoopResultBuilder]: At program point L694-2(lines 679 697) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~5#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0)) [2022-01-10 18:18:14,245 INFO L858 garLoopResultBuilder]: For program point L969-6(lines 969 975) no Hoare annotation was computed. [2022-01-10 18:18:14,245 INFO L854 garLoopResultBuilder]: At program point L605-2(lines 598 614) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~pumpRunning~0Int)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-10 18:18:14,245 INFO L854 garLoopResultBuilder]: At program point L594(lines 589 596) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 2 ~waterLevel~0Int) (<= 1 ~pumpRunning~0Int)) [2022-01-10 18:18:14,245 INFO L858 garLoopResultBuilder]: For program point L572-6(lines 572 580) no Hoare annotation was computed. [2022-01-10 18:18:14,245 INFO L858 garLoopResultBuilder]: For program point L932-2(line 932) no Hoare annotation was computed. [2022-01-10 18:18:14,245 INFO L854 garLoopResultBuilder]: At program point L100-2(lines 95 103) the Hoare annotation is: false [2022-01-10 18:18:14,245 INFO L854 garLoopResultBuilder]: At program point L560-4(lines 556 562) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~3#1Int| 0)) [2022-01-10 18:18:14,245 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-01-10 18:18:14,245 INFO L854 garLoopResultBuilder]: At program point L933-2(lines 928 935) the Hoare annotation is: false [2022-01-10 18:18:14,245 INFO L854 garLoopResultBuilder]: At program point L630-2(lines 623 633) the Hoare annotation is: false [2022-01-10 18:18:14,246 INFO L858 garLoopResultBuilder]: For program point L605-6(lines 605 611) no Hoare annotation was computed. [2022-01-10 18:18:14,246 INFO L854 garLoopResultBuilder]: At program point L605-8(lines 598 614) the Hoare annotation is: false [2022-01-10 18:18:14,246 INFO L854 garLoopResultBuilder]: At program point L594-2(lines 589 596) the Hoare annotation is: false [2022-01-10 18:18:14,248 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:14,249 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 18:18:14,384 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:18:14 BasicIcfg [2022-01-10 18:18:14,384 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 18:18:14,384 INFO L158 Benchmark]: Toolchain (without parser) took 15800.34ms. Allocated memory was 179.3MB in the beginning and 606.1MB in the end (delta: 426.8MB). Free memory was 121.8MB in the beginning and 502.0MB in the end (delta: -380.1MB). Peak memory consumption was 344.2MB. Max. memory is 8.0GB. [2022-01-10 18:18:14,384 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 179.3MB. Free memory was 139.6MB in the beginning and 139.5MB in the end (delta: 117.0kB). There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 18:18:14,386 INFO L158 Benchmark]: CACSL2BoogieTranslator took 548.25ms. Allocated memory was 179.3MB in the beginning and 264.2MB in the end (delta: 84.9MB). Free memory was 121.6MB in the beginning and 223.9MB in the end (delta: -102.3MB). Peak memory consumption was 18.4MB. Max. memory is 8.0GB. [2022-01-10 18:18:14,387 INFO L158 Benchmark]: Boogie Procedure Inliner took 51.06ms. Allocated memory is still 264.2MB. Free memory was 223.9MB in the beginning and 220.8MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 18:18:14,387 INFO L158 Benchmark]: Boogie Preprocessor took 45.34ms. Allocated memory is still 264.2MB. Free memory was 220.8MB in the beginning and 218.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 18:18:14,387 INFO L158 Benchmark]: RCFGBuilder took 409.53ms. Allocated memory is still 264.2MB. Free memory was 218.7MB in the beginning and 197.7MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 8.0GB. [2022-01-10 18:18:14,387 INFO L158 Benchmark]: IcfgTransformer took 156.90ms. Allocated memory is still 264.2MB. Free memory was 197.7MB in the beginning and 189.9MB in the end (delta: 7.9MB). Peak memory consumption was 7.3MB. Max. memory is 8.0GB. [2022-01-10 18:18:14,388 INFO L158 Benchmark]: TraceAbstraction took 14577.63ms. Allocated memory was 264.2MB in the beginning and 606.1MB in the end (delta: 341.8MB). Free memory was 189.3MB in the beginning and 502.0MB in the end (delta: -312.6MB). Peak memory consumption was 325.4MB. Max. memory is 8.0GB. [2022-01-10 18:18:14,389 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 179.3MB. Free memory was 139.6MB in the beginning and 139.5MB in the end (delta: 117.0kB). There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 548.25ms. Allocated memory was 179.3MB in the beginning and 264.2MB in the end (delta: 84.9MB). Free memory was 121.6MB in the beginning and 223.9MB in the end (delta: -102.3MB). Peak memory consumption was 18.4MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 51.06ms. Allocated memory is still 264.2MB. Free memory was 223.9MB in the beginning and 220.8MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 45.34ms. Allocated memory is still 264.2MB. Free memory was 220.8MB in the beginning and 218.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 409.53ms. Allocated memory is still 264.2MB. Free memory was 218.7MB in the beginning and 197.7MB in the end (delta: 21.0MB). Peak memory consumption was 21.0MB. Max. memory is 8.0GB. * IcfgTransformer took 156.90ms. Allocated memory is still 264.2MB. Free memory was 197.7MB in the beginning and 189.9MB in the end (delta: 7.9MB). Peak memory consumption was 7.3MB. Max. memory is 8.0GB. * TraceAbstraction took 14577.63ms. Allocated memory was 264.2MB in the beginning and 606.1MB in the end (delta: 341.8MB). Free memory was 189.3MB in the beginning and 502.0MB in the end (delta: -312.6MB). Peak memory consumption was 325.4MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 135 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 14.4s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3839 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3839 mSDsluCounter, 6367 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4164 mSDsCounter, 191 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 566 IncrementalHoareTripleChecker+Invalid, 757 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 191 mSolverCounterUnsat, 2203 mSDtfsCounter, 566 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 513 GetRequests, 450 SyntacticMatches, 1 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 132 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=590occurred in iteration=8, InterpolantAutomatonStates: 72, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 1504 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 68 LocationsWithAnnotation, 68 PreInvPairs, 478 NumberOfFragments, 3574 HoareAnnotationTreeSize, 68 FomulaSimplifications, 35859 FormulaSimplificationTreeSizeReduction, 2.9s HoareSimplificationTime, 68 FomulaSimplificationsInter, 189709 FormulaSimplificationTreeSizeReductionInter, 6.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 867 NumberOfCodeBlocks, 867 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1066 ConstructedInterpolants, 0 QuantifiedInterpolants, 2602 SizeOfPredicates, 9 NumberOfNonLiveVariables, 1562 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 778/802 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 698]: Loop Invariant Derived loop invariant: (((((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 806]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 564]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 83]: Loop Invariant Derived loop invariant: (((((((((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) || ((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 529]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 885]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 732]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 529]: Loop Invariant Derived loop invariant: ((((((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 564]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 564]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32)) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) && waterLevel == tmp)) || (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 713]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 529]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: (((((((((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && ~bvule32(waterLevel, 2bv32))) || (((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 938]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: ((((((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: (((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 813]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result)) || ((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) || (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2)) - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 831]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 723]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: (((((((((((systemActive == 0bv32 && 2bv32 == \result) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: (((((((((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || (((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && ~bvule32(waterLevel, 2bv32))) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp) - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2022-01-10 18:18:14,460 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...