/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 18:18:07,273 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 18:18:07,274 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 18:18:07,320 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 18:18:07,321 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 18:18:07,321 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 18:18:07,322 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 18:18:07,323 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 18:18:07,324 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 18:18:07,325 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 18:18:07,325 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 18:18:07,326 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 18:18:07,326 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 18:18:07,327 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 18:18:07,329 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 18:18:07,330 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 18:18:07,330 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 18:18:07,332 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 18:18:07,337 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 18:18:07,342 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 18:18:07,344 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 18:18:07,345 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 18:18:07,346 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 18:18:07,346 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 18:18:07,350 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 18:18:07,350 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 18:18:07,350 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 18:18:07,351 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 18:18:07,351 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 18:18:07,352 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 18:18:07,352 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 18:18:07,352 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 18:18:07,353 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 18:18:07,354 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 18:18:07,355 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 18:18:07,355 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 18:18:07,355 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 18:18:07,355 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 18:18:07,356 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 18:18:07,356 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 18:18:07,356 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 18:18:07,357 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf [2022-01-10 18:18:07,394 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 18:18:07,394 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 18:18:07,394 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 18:18:07,394 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 18:18:07,395 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 18:18:07,395 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 18:18:07,395 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 18:18:07,395 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 18:18:07,395 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 18:18:07,395 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 18:18:07,395 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 18:18:07,396 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 18:18:07,396 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 18:18:07,396 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 18:18:07,396 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 18:18:07,396 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 18:18:07,396 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 18:18:07,396 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 18:18:07,396 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 18:18:07,396 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 18:18:07,396 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 18:18:07,396 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:18:07,397 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 18:18:07,397 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 18:18:07,397 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 18:18:07,397 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 18:18:07,397 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 18:18:07,397 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 18:18:07,397 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 18:18:07,397 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 18:18:07,397 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 18:18:07,397 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 18:18:07,398 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 18:18:07,398 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_LAZY WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 18:18:07,576 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 18:18:07,592 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 18:18:07,595 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 18:18:07,595 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 18:18:07,596 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 18:18:07,597 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c [2022-01-10 18:18:07,641 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5f2eb4730/6a1b3ae6648342d09c3ed37abd46ae07/FLAGa8b381bfc [2022-01-10 18:18:08,014 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 18:18:08,027 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c [2022-01-10 18:18:08,039 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5f2eb4730/6a1b3ae6648342d09c3ed37abd46ae07/FLAGa8b381bfc [2022-01-10 18:18:08,048 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5f2eb4730/6a1b3ae6648342d09c3ed37abd46ae07 [2022-01-10 18:18:08,049 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 18:18:08,050 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 18:18:08,053 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 18:18:08,053 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 18:18:08,056 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 18:18:08,056 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,057 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@658ef836 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08, skipping insertion in model container [2022-01-10 18:18:08,057 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,062 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 18:18:08,100 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:18:08,222 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c[1605,1618] [2022-01-10 18:18:08,295 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:18:08,303 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 18:18:08,309 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:18:08,311 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c[1605,1618] [2022-01-10 18:18:08,371 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:18:08,379 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 18:18:08,387 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product50.cil.c[1605,1618] [2022-01-10 18:18:08,449 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:18:08,470 INFO L208 MainTranslator]: Completed translation [2022-01-10 18:18:08,471 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08 WrapperNode [2022-01-10 18:18:08,471 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 18:18:08,471 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 18:18:08,471 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 18:18:08,472 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 18:18:08,476 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,495 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,520 INFO L137 Inliner]: procedures = 60, calls = 158, calls flagged for inlining = 55, calls inlined = 85, statements flattened = 642 [2022-01-10 18:18:08,520 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 18:18:08,521 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 18:18:08,521 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 18:18:08,521 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 18:18:08,526 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,526 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,529 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,529 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,535 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,539 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,541 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,543 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 18:18:08,544 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 18:18:08,544 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 18:18:08,544 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 18:18:08,544 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08" (1/1) ... [2022-01-10 18:18:08,561 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:18:08,570 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:18:08,582 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 18:18:08,588 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 18:18:08,606 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 18:18:08,611 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 18:18:08,612 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 18:18:08,612 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 18:18:08,679 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 18:18:08,681 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 18:18:09,073 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 18:18:09,083 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 18:18:09,083 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 18:18:09,085 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:18:09 BoogieIcfgContainer [2022-01-10 18:18:09,085 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 18:18:09,086 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 18:18:09,086 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 18:18:09,089 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 18:18:09,091 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:18:09" (1/1) ... [2022-01-10 18:18:09,226 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:18:09 BasicIcfg [2022-01-10 18:18:09,226 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 18:18:09,227 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 18:18:09,227 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 18:18:09,229 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 18:18:09,229 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 06:18:08" (1/4) ... [2022-01-10 18:18:09,230 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f8e3129 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:18:09, skipping insertion in model container [2022-01-10 18:18:09,230 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:08" (2/4) ... [2022-01-10 18:18:09,230 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f8e3129 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:18:09, skipping insertion in model container [2022-01-10 18:18:09,230 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:18:09" (3/4) ... [2022-01-10 18:18:09,230 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f8e3129 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:18:09, skipping insertion in model container [2022-01-10 18:18:09,230 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:18:09" (4/4) ... [2022-01-10 18:18:09,231 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product50.cil.cTransformedIcfg [2022-01-10 18:18:09,234 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 18:18:09,234 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 18:18:09,278 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 18:18:09,284 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 18:18:09,285 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 18:18:09,299 INFO L276 IsEmpty]: Start isEmpty. Operand has 176 states, 172 states have (on average 1.3895348837209303) internal successors, (239), 175 states have internal predecessors, (239), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:09,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-01-10 18:18:09,304 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:09,304 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:09,304 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:09,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:09,308 INFO L85 PathProgramCache]: Analyzing trace with hash -1179483662, now seen corresponding path program 1 times [2022-01-10 18:18:09,313 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:09,313 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [688317017] [2022-01-10 18:18:09,313 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:09,314 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:09,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:09,486 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:09,486 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:09,487 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [688317017] [2022-01-10 18:18:09,487 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [688317017] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:09,487 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:09,487 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:09,488 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1948202558] [2022-01-10 18:18:09,489 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:09,491 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 18:18:09,492 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:09,512 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 18:18:09,513 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:18:09,514 INFO L87 Difference]: Start difference. First operand has 176 states, 172 states have (on average 1.3895348837209303) internal successors, (239), 175 states have internal predecessors, (239), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:09,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:09,539 INFO L93 Difference]: Finished difference Result 341 states and 466 transitions. [2022-01-10 18:18:09,544 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 18:18:09,545 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-01-10 18:18:09,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:09,551 INFO L225 Difference]: With dead ends: 341 [2022-01-10 18:18:09,551 INFO L226 Difference]: Without dead ends: 166 [2022-01-10 18:18:09,553 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:18:09,555 INFO L933 BasicCegarLoop]: 229 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:09,556 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 229 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:09,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2022-01-10 18:18:09,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2022-01-10 18:18:09,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 163 states have (on average 1.3558282208588956) internal successors, (221), 165 states have internal predecessors, (221), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:09,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 221 transitions. [2022-01-10 18:18:09,592 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 221 transitions. Word has length 21 [2022-01-10 18:18:09,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:09,592 INFO L470 AbstractCegarLoop]: Abstraction has 166 states and 221 transitions. [2022-01-10 18:18:09,592 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:09,593 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 221 transitions. [2022-01-10 18:18:09,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-01-10 18:18:09,594 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:09,594 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:09,594 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 18:18:09,594 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:09,595 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:09,595 INFO L85 PathProgramCache]: Analyzing trace with hash -1034226222, now seen corresponding path program 1 times [2022-01-10 18:18:09,595 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:09,596 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2038159528] [2022-01-10 18:18:09,596 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:09,596 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:09,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:09,676 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:09,676 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:09,677 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2038159528] [2022-01-10 18:18:09,677 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2038159528] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:09,677 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:09,677 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:09,677 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1142807041] [2022-01-10 18:18:09,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:09,678 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:09,678 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:09,679 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:09,679 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:09,679 INFO L87 Difference]: Start difference. First operand 166 states and 221 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:09,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:09,725 INFO L93 Difference]: Finished difference Result 324 states and 434 transitions. [2022-01-10 18:18:09,725 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:09,725 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-01-10 18:18:09,726 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:09,729 INFO L225 Difference]: With dead ends: 324 [2022-01-10 18:18:09,729 INFO L226 Difference]: Without dead ends: 166 [2022-01-10 18:18:09,730 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:09,731 INFO L933 BasicCegarLoop]: 215 mSDtfsCounter, 203 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 203 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:09,731 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [203 Valid, 215 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:09,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2022-01-10 18:18:09,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2022-01-10 18:18:09,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 163 states have (on average 1.3374233128834356) internal successors, (218), 165 states have internal predecessors, (218), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:09,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 218 transitions. [2022-01-10 18:18:09,744 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 218 transitions. Word has length 22 [2022-01-10 18:18:09,744 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:09,744 INFO L470 AbstractCegarLoop]: Abstraction has 166 states and 218 transitions. [2022-01-10 18:18:09,744 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:09,744 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 218 transitions. [2022-01-10 18:18:09,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-01-10 18:18:09,745 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:09,745 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:09,745 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 18:18:09,745 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:09,746 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:09,746 INFO L85 PathProgramCache]: Analyzing trace with hash -1476929860, now seen corresponding path program 1 times [2022-01-10 18:18:09,746 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:09,746 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1490464727] [2022-01-10 18:18:09,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:09,746 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:09,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:09,827 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:09,828 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:09,828 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1490464727] [2022-01-10 18:18:09,828 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1490464727] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:09,828 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:09,828 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:09,828 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [338611883] [2022-01-10 18:18:09,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:09,828 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:09,829 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:09,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:09,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:09,829 INFO L87 Difference]: Start difference. First operand 166 states and 218 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:09,918 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:09,918 INFO L93 Difference]: Finished difference Result 395 states and 518 transitions. [2022-01-10 18:18:09,919 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:09,919 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-01-10 18:18:09,919 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:09,920 INFO L225 Difference]: With dead ends: 395 [2022-01-10 18:18:09,920 INFO L226 Difference]: Without dead ends: 237 [2022-01-10 18:18:09,921 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:09,922 INFO L933 BasicCegarLoop]: 236 mSDtfsCounter, 138 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 347 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:09,922 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [138 Valid, 347 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:09,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237 states. [2022-01-10 18:18:09,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237 to 231. [2022-01-10 18:18:09,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 228 states have (on average 1.2982456140350878) internal successors, (296), 230 states have internal predecessors, (296), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:09,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 296 transitions. [2022-01-10 18:18:09,948 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 296 transitions. Word has length 27 [2022-01-10 18:18:09,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:09,948 INFO L470 AbstractCegarLoop]: Abstraction has 231 states and 296 transitions. [2022-01-10 18:18:09,948 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:09,949 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 296 transitions. [2022-01-10 18:18:09,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 18:18:09,950 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:09,950 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:09,950 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 18:18:09,950 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:09,951 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:09,951 INFO L85 PathProgramCache]: Analyzing trace with hash -1469427615, now seen corresponding path program 1 times [2022-01-10 18:18:09,951 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:09,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [238259335] [2022-01-10 18:18:09,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:09,951 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:09,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:10,058 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:10,059 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:10,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [238259335] [2022-01-10 18:18:10,059 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [238259335] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:10,059 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:10,059 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:18:10,059 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1412736925] [2022-01-10 18:18:10,059 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:10,061 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:18:10,062 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:10,062 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:18:10,062 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:10,062 INFO L87 Difference]: Start difference. First operand 231 states and 296 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:10,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:10,234 INFO L93 Difference]: Finished difference Result 623 states and 785 transitions. [2022-01-10 18:18:10,235 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 18:18:10,235 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 18:18:10,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:10,237 INFO L225 Difference]: With dead ends: 623 [2022-01-10 18:18:10,237 INFO L226 Difference]: Without dead ends: 400 [2022-01-10 18:18:10,239 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:18:10,247 INFO L933 BasicCegarLoop]: 245 mSDtfsCounter, 402 mSDsluCounter, 734 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 402 SdHoareTripleChecker+Valid, 979 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:10,248 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [402 Valid, 979 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:10,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 400 states. [2022-01-10 18:18:10,278 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 400 to 249. [2022-01-10 18:18:10,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 249 states, 246 states have (on average 1.2764227642276422) internal successors, (314), 248 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:10,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 314 transitions. [2022-01-10 18:18:10,279 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 314 transitions. Word has length 33 [2022-01-10 18:18:10,279 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:10,279 INFO L470 AbstractCegarLoop]: Abstraction has 249 states and 314 transitions. [2022-01-10 18:18:10,280 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:10,280 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 314 transitions. [2022-01-10 18:18:10,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 18:18:10,283 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:10,283 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:10,283 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 18:18:10,284 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:10,287 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:10,287 INFO L85 PathProgramCache]: Analyzing trace with hash 832074817, now seen corresponding path program 1 times [2022-01-10 18:18:10,287 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:10,287 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1285229443] [2022-01-10 18:18:10,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:10,288 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:10,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:10,387 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:10,387 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:10,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1285229443] [2022-01-10 18:18:10,387 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1285229443] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:10,387 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:10,388 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:18:10,388 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [425519267] [2022-01-10 18:18:10,388 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:10,388 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:18:10,389 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:10,389 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:18:10,389 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:10,389 INFO L87 Difference]: Start difference. First operand 249 states and 314 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:10,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:10,588 INFO L93 Difference]: Finished difference Result 876 states and 1091 transitions. [2022-01-10 18:18:10,589 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-10 18:18:10,589 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 18:18:10,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:10,591 INFO L225 Difference]: With dead ends: 876 [2022-01-10 18:18:10,591 INFO L226 Difference]: Without dead ends: 635 [2022-01-10 18:18:10,591 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 18:18:10,595 INFO L933 BasicCegarLoop]: 389 mSDtfsCounter, 581 mSDsluCounter, 774 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 581 SdHoareTripleChecker+Valid, 1163 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:10,595 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [581 Valid, 1163 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:10,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 635 states. [2022-01-10 18:18:10,628 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 635 to 246. [2022-01-10 18:18:10,629 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 246 states, 243 states have (on average 1.2551440329218106) internal successors, (305), 245 states have internal predecessors, (305), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:10,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246 states to 246 states and 305 transitions. [2022-01-10 18:18:10,632 INFO L78 Accepts]: Start accepts. Automaton has 246 states and 305 transitions. Word has length 33 [2022-01-10 18:18:10,632 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:10,635 INFO L470 AbstractCegarLoop]: Abstraction has 246 states and 305 transitions. [2022-01-10 18:18:10,635 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:10,636 INFO L276 IsEmpty]: Start isEmpty. Operand 246 states and 305 transitions. [2022-01-10 18:18:10,637 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 18:18:10,637 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:10,637 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:10,637 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 18:18:10,638 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:10,638 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:10,638 INFO L85 PathProgramCache]: Analyzing trace with hash -1974986240, now seen corresponding path program 1 times [2022-01-10 18:18:10,638 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:10,639 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [564010753] [2022-01-10 18:18:10,639 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:10,639 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:10,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:10,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:10,698 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:10,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [564010753] [2022-01-10 18:18:10,698 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [564010753] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:10,698 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:10,698 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:18:10,698 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [790248986] [2022-01-10 18:18:10,699 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:10,699 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 18:18:10,699 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:10,699 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 18:18:10,700 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 18:18:10,700 INFO L87 Difference]: Start difference. First operand 246 states and 305 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:10,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:10,787 INFO L93 Difference]: Finished difference Result 662 states and 806 transitions. [2022-01-10 18:18:10,787 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:18:10,787 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 18:18:10,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:10,789 INFO L225 Difference]: With dead ends: 662 [2022-01-10 18:18:10,789 INFO L226 Difference]: Without dead ends: 424 [2022-01-10 18:18:10,789 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:10,790 INFO L933 BasicCegarLoop]: 247 mSDtfsCounter, 315 mSDsluCounter, 421 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 315 SdHoareTripleChecker+Valid, 668 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:10,790 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [315 Valid, 668 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:10,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 424 states. [2022-01-10 18:18:10,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 424 to 258. [2022-01-10 18:18:10,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 255 states have (on average 1.2431372549019608) internal successors, (317), 257 states have internal predecessors, (317), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:10,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 317 transitions. [2022-01-10 18:18:10,811 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 317 transitions. Word has length 33 [2022-01-10 18:18:10,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:10,811 INFO L470 AbstractCegarLoop]: Abstraction has 258 states and 317 transitions. [2022-01-10 18:18:10,812 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:10,812 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 317 transitions. [2022-01-10 18:18:10,812 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 18:18:10,812 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:10,812 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:10,812 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 18:18:10,812 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:10,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:10,813 INFO L85 PathProgramCache]: Analyzing trace with hash 1809446879, now seen corresponding path program 1 times [2022-01-10 18:18:10,813 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:10,813 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1520558852] [2022-01-10 18:18:10,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:10,813 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:10,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:10,886 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:10,886 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:10,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1520558852] [2022-01-10 18:18:10,886 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1520558852] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:10,886 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:10,886 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:10,886 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [229429623] [2022-01-10 18:18:10,886 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:10,887 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:10,887 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:10,887 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:10,887 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:10,888 INFO L87 Difference]: Start difference. First operand 258 states and 317 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 2 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:10,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:10,987 INFO L93 Difference]: Finished difference Result 593 states and 724 transitions. [2022-01-10 18:18:10,987 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:10,987 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 2 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 18:18:10,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:10,988 INFO L225 Difference]: With dead ends: 593 [2022-01-10 18:18:10,988 INFO L226 Difference]: Without dead ends: 294 [2022-01-10 18:18:10,989 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:10,989 INFO L933 BasicCegarLoop]: 205 mSDtfsCounter, 84 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 383 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:10,990 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [84 Valid, 383 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:10,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-01-10 18:18:11,012 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 294. [2022-01-10 18:18:11,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 291 states have (on average 1.2336769759450172) internal successors, (359), 293 states have internal predecessors, (359), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:11,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 359 transitions. [2022-01-10 18:18:11,014 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 359 transitions. Word has length 33 [2022-01-10 18:18:11,014 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:11,014 INFO L470 AbstractCegarLoop]: Abstraction has 294 states and 359 transitions. [2022-01-10 18:18:11,014 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 2 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:11,014 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 359 transitions. [2022-01-10 18:18:11,015 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-01-10 18:18:11,015 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:11,015 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:11,015 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 18:18:11,015 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:11,015 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:11,016 INFO L85 PathProgramCache]: Analyzing trace with hash 1090044263, now seen corresponding path program 1 times [2022-01-10 18:18:11,016 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:11,016 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [556842] [2022-01-10 18:18:11,016 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:11,016 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:11,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:11,129 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:11,129 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:11,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [556842] [2022-01-10 18:18:11,130 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [556842] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:11,130 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:11,130 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:18:11,130 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1089996551] [2022-01-10 18:18:11,130 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:11,130 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 18:18:11,130 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:11,131 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 18:18:11,131 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 18:18:11,131 INFO L87 Difference]: Start difference. First operand 294 states and 359 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:11,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:11,459 INFO L93 Difference]: Finished difference Result 1428 states and 1751 transitions. [2022-01-10 18:18:11,459 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-01-10 18:18:11,459 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-01-10 18:18:11,460 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:11,463 INFO L225 Difference]: With dead ends: 1428 [2022-01-10 18:18:11,463 INFO L226 Difference]: Without dead ends: 1048 [2022-01-10 18:18:11,464 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2022-01-10 18:18:11,466 INFO L933 BasicCegarLoop]: 352 mSDtfsCounter, 989 mSDsluCounter, 989 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 989 SdHoareTripleChecker+Valid, 1341 SdHoareTripleChecker+Invalid, 222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:11,468 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [989 Valid, 1341 Invalid, 222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 18:18:11,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1048 states. [2022-01-10 18:18:11,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1048 to 539. [2022-01-10 18:18:11,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 539 states, 536 states have (on average 1.2070895522388059) internal successors, (647), 538 states have internal predecessors, (647), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:11,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 539 states to 539 states and 647 transitions. [2022-01-10 18:18:11,533 INFO L78 Accepts]: Start accepts. Automaton has 539 states and 647 transitions. Word has length 42 [2022-01-10 18:18:11,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:11,533 INFO L470 AbstractCegarLoop]: Abstraction has 539 states and 647 transitions. [2022-01-10 18:18:11,533 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:11,533 INFO L276 IsEmpty]: Start isEmpty. Operand 539 states and 647 transitions. [2022-01-10 18:18:11,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-01-10 18:18:11,535 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:11,535 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:11,535 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 18:18:11,535 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:11,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:11,536 INFO L85 PathProgramCache]: Analyzing trace with hash -299980011, now seen corresponding path program 1 times [2022-01-10 18:18:11,536 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:11,536 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [218614347] [2022-01-10 18:18:11,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:11,536 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:11,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:11,599 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:11,599 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:11,599 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [218614347] [2022-01-10 18:18:11,599 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [218614347] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:11,599 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:11,599 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:18:11,599 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1205776022] [2022-01-10 18:18:11,599 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:11,600 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:11,600 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:11,601 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:11,601 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:11,601 INFO L87 Difference]: Start difference. First operand 539 states and 647 transitions. Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:11,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:11,643 INFO L93 Difference]: Finished difference Result 539 states and 647 transitions. [2022-01-10 18:18:11,643 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:11,643 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 66 [2022-01-10 18:18:11,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:11,645 INFO L225 Difference]: With dead ends: 539 [2022-01-10 18:18:11,645 INFO L226 Difference]: Without dead ends: 256 [2022-01-10 18:18:11,646 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:11,647 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 48 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:11,647 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [48 Valid, 94 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:11,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2022-01-10 18:18:11,677 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 256. [2022-01-10 18:18:11,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 256 states, 255 states have (on average 1.2352941176470589) internal successors, (315), 255 states have internal predecessors, (315), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:11,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 315 transitions. [2022-01-10 18:18:11,678 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 315 transitions. Word has length 66 [2022-01-10 18:18:11,679 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:11,679 INFO L470 AbstractCegarLoop]: Abstraction has 256 states and 315 transitions. [2022-01-10 18:18:11,679 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:11,679 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 315 transitions. [2022-01-10 18:18:11,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-01-10 18:18:11,679 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:11,679 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:11,680 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 18:18:11,680 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:11,680 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:11,680 INFO L85 PathProgramCache]: Analyzing trace with hash 1153758127, now seen corresponding path program 1 times [2022-01-10 18:18:11,680 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:11,680 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [885936748] [2022-01-10 18:18:11,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:11,680 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:11,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:11,734 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:11,734 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:11,734 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [885936748] [2022-01-10 18:18:11,734 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [885936748] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 18:18:11,735 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1004513923] [2022-01-10 18:18:11,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:11,735 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 18:18:11,735 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:18:11,736 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 18:18:11,737 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-10 18:18:11,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:11,841 INFO L263 TraceCheckSpWp]: Trace formula consists of 618 conjuncts, 5 conjunts are in the unsatisfiable core [2022-01-10 18:18:11,845 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 18:18:11,981 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:11,981 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 18:18:12,087 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:12,087 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1004513923] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 18:18:12,087 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 18:18:12,087 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 5 [2022-01-10 18:18:12,087 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [381713981] [2022-01-10 18:18:12,087 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 18:18:12,088 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:18:12,088 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:12,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:18:12,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:12,089 INFO L87 Difference]: Start difference. First operand 256 states and 315 transitions. Second operand has 5 states, 5 states have (on average 14.6) internal successors, (73), 5 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:12,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:12,207 INFO L93 Difference]: Finished difference Result 636 states and 802 transitions. [2022-01-10 18:18:12,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-01-10 18:18:12,207 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.6) internal successors, (73), 5 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 73 [2022-01-10 18:18:12,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:12,210 INFO L225 Difference]: With dead ends: 636 [2022-01-10 18:18:12,210 INFO L226 Difference]: Without dead ends: 388 [2022-01-10 18:18:12,211 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 148 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-01-10 18:18:12,212 INFO L933 BasicCegarLoop]: 158 mSDtfsCounter, 171 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:12,212 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [171 Valid, 443 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:12,213 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 388 states. [2022-01-10 18:18:12,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 388 to 241. [2022-01-10 18:18:12,251 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 241 states, 240 states have (on average 1.2125) internal successors, (291), 240 states have internal predecessors, (291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:12,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 241 states to 241 states and 291 transitions. [2022-01-10 18:18:12,252 INFO L78 Accepts]: Start accepts. Automaton has 241 states and 291 transitions. Word has length 73 [2022-01-10 18:18:12,253 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:12,253 INFO L470 AbstractCegarLoop]: Abstraction has 241 states and 291 transitions. [2022-01-10 18:18:12,253 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 14.6) internal successors, (73), 5 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:12,253 INFO L276 IsEmpty]: Start isEmpty. Operand 241 states and 291 transitions. [2022-01-10 18:18:12,257 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2022-01-10 18:18:12,257 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:12,257 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:12,278 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-01-10 18:18:12,467 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-01-10 18:18:12,468 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:12,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:12,468 INFO L85 PathProgramCache]: Analyzing trace with hash -1187607473, now seen corresponding path program 1 times [2022-01-10 18:18:12,468 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:12,468 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [51886865] [2022-01-10 18:18:12,468 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:12,468 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:12,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:12,549 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 77 proven. 0 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-01-10 18:18:12,549 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:12,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [51886865] [2022-01-10 18:18:12,549 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [51886865] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:12,549 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:12,549 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:18:12,549 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2108497550] [2022-01-10 18:18:12,549 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:12,550 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:18:12,550 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:12,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:18:12,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:12,551 INFO L87 Difference]: Start difference. First operand 241 states and 291 transitions. Second operand has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:12,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:12,622 INFO L93 Difference]: Finished difference Result 600 states and 733 transitions. [2022-01-10 18:18:12,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 18:18:12,622 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 132 [2022-01-10 18:18:12,623 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:12,624 INFO L225 Difference]: With dead ends: 600 [2022-01-10 18:18:12,624 INFO L226 Difference]: Without dead ends: 367 [2022-01-10 18:18:12,625 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:18:12,625 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 172 mSDsluCounter, 286 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:12,625 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [172 Valid, 396 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:12,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 367 states. [2022-01-10 18:18:12,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 367 to 247. [2022-01-10 18:18:12,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 247 states, 246 states have (on average 1.2073170731707317) internal successors, (297), 246 states have internal predecessors, (297), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:12,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 247 states to 247 states and 297 transitions. [2022-01-10 18:18:12,658 INFO L78 Accepts]: Start accepts. Automaton has 247 states and 297 transitions. Word has length 132 [2022-01-10 18:18:12,658 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:12,658 INFO L470 AbstractCegarLoop]: Abstraction has 247 states and 297 transitions. [2022-01-10 18:18:12,658 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.6) internal successors, (93), 5 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:12,659 INFO L276 IsEmpty]: Start isEmpty. Operand 247 states and 297 transitions. [2022-01-10 18:18:12,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 133 [2022-01-10 18:18:12,659 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:12,659 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:12,660 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 18:18:12,660 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:12,660 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:12,660 INFO L85 PathProgramCache]: Analyzing trace with hash -1636304112, now seen corresponding path program 1 times [2022-01-10 18:18:12,660 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:12,660 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1525576946] [2022-01-10 18:18:12,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:12,660 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:12,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:12,804 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 113 proven. 2 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-01-10 18:18:12,804 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:12,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1525576946] [2022-01-10 18:18:12,804 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1525576946] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 18:18:12,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [226860518] [2022-01-10 18:18:12,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:12,804 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 18:18:12,804 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:18:12,805 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 18:18:12,806 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-01-10 18:18:12,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:12,938 INFO L263 TraceCheckSpWp]: Trace formula consists of 904 conjuncts, 15 conjunts are in the unsatisfiable core [2022-01-10 18:18:12,943 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 18:18:13,173 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 72 proven. 2 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2022-01-10 18:18:13,173 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 18:18:13,361 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 72 proven. 2 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2022-01-10 18:18:13,361 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [226860518] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 18:18:13,361 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 18:18:13,361 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 15 [2022-01-10 18:18:13,361 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1446446445] [2022-01-10 18:18:13,361 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 18:18:13,362 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-01-10 18:18:13,362 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:13,362 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-01-10 18:18:13,362 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-01-10 18:18:13,363 INFO L87 Difference]: Start difference. First operand 247 states and 297 transitions. Second operand has 15 states, 15 states have (on average 11.4) internal successors, (171), 15 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:13,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:13,776 INFO L93 Difference]: Finished difference Result 867 states and 1049 transitions. [2022-01-10 18:18:13,776 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-01-10 18:18:13,776 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 11.4) internal successors, (171), 15 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 132 [2022-01-10 18:18:13,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:13,777 INFO L225 Difference]: With dead ends: 867 [2022-01-10 18:18:13,777 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 18:18:13,778 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 289 GetRequests, 264 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 90 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=154, Invalid=548, Unknown=0, NotChecked=0, Total=702 [2022-01-10 18:18:13,778 INFO L933 BasicCegarLoop]: 231 mSDtfsCounter, 1431 mSDsluCounter, 1163 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1431 SdHoareTripleChecker+Valid, 1394 SdHoareTripleChecker+Invalid, 197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:13,778 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1431 Valid, 1394 Invalid, 197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:13,779 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 18:18:13,779 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 18:18:13,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:13,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 18:18:13,779 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 132 [2022-01-10 18:18:13,779 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:13,779 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 18:18:13,779 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 11.4) internal successors, (171), 15 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:13,780 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 18:18:13,780 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 18:18:13,782 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 18:18:13,782 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 18:18:13,782 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 18:18:13,802 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-01-10 18:18:13,995 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-10 18:18:13,997 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 18:18:22,380 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 18:18:22,380 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 18:18:22,380 INFO L854 garLoopResultBuilder]: At program point L894(lines 890 896) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (div (+ 4294967295 ~waterLevel~0Int) 4294967296))) [2022-01-10 18:18:22,381 INFO L854 garLoopResultBuilder]: At program point L887(lines 883 889) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (div (+ 4294967295 ~waterLevel~0Int) 4294967296))) [2022-01-10 18:18:22,381 INFO L854 garLoopResultBuilder]: At program point L902(lines 897 905) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (div (+ 4294967295 ~waterLevel~0Int) 4294967296))) [2022-01-10 18:18:22,381 INFO L858 garLoopResultBuilder]: For program point L990(lines 990 997) no Hoare annotation was computed. [2022-01-10 18:18:22,381 INFO L854 garLoopResultBuilder]: At program point L966(lines 962 968) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (div (+ 4294967295 ~waterLevel~0Int) 4294967296))) [2022-01-10 18:18:22,381 INFO L858 garLoopResultBuilder]: For program point L990-2(lines 990 997) no Hoare annotation was computed. [2022-01-10 18:18:22,382 INFO L854 garLoopResultBuilder]: At program point L826(lines 821 828) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (div (+ 4294967295 ~waterLevel~0Int) 4294967296))) [2022-01-10 18:18:22,383 INFO L861 garLoopResultBuilder]: At program point L999(lines 980 1002) the Hoare annotation is: true [2022-01-10 18:18:22,383 INFO L854 garLoopResultBuilder]: At program point L293-2(lines 293 340) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2)) (.cse8 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse4 .cse7) (and .cse0 .cse6 .cse3 .cse4 .cse7 .cse8) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse8) (and .cse9 .cse0 .cse1 .cse4 (<= 1 ~waterLevel~0Int))))) [2022-01-10 18:18:22,383 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 18:18:22,383 INFO L854 garLoopResultBuilder]: At program point L341(lines 292 342) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,383 INFO L858 garLoopResultBuilder]: For program point L294(lines 293 340) no Hoare annotation was computed. [2022-01-10 18:18:22,383 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L854 garLoopResultBuilder]: At program point L193-2(lines 188 196) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L295(lines 295 299) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L854 garLoopResultBuilder]: At program point L836-1(lines 829 838) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L303(lines 303 309) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L82-3(lines 82 88) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L369(lines 369 373) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L303-2(lines 303 309) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L357-3(lines 357 361) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L82-5(lines 78 100) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L854 garLoopResultBuilder]: At program point L369-2(lines 365 376) the Hoare annotation is: (let ((.cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1))) (.cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse4 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse7 (<= 1 ~pumpRunning~0Int)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse5 (<= ~waterLevel~0Int 2)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse5 .cse6 .cse8 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse7) (and .cse1 .cse2 .cse5 .cse6 .cse8))) [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L313(lines 313 319) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L854 garLoopResultBuilder]: At program point L357-5(lines 353 364) the Hoare annotation is: false [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 157) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L89-3(lines 89 95) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L381(lines 381 385) no Hoare annotation was computed. [2022-01-10 18:18:22,384 INFO L858 garLoopResultBuilder]: For program point L313-2(lines 313 319) no Hoare annotation was computed. [2022-01-10 18:18:22,385 INFO L854 garLoopResultBuilder]: At program point L449-1(lines 444 452) the Hoare annotation is: false [2022-01-10 18:18:22,385 INFO L858 garLoopResultBuilder]: For program point L114-6(lines 114 131) no Hoare annotation was computed. [2022-01-10 18:18:22,385 INFO L854 garLoopResultBuilder]: At program point L426-1(lines 421 429) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,385 INFO L854 garLoopResultBuilder]: At program point L381-2(lines 377 388) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse8 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse3 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse5 (= ~pumpRunning~0Int 0)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 2 ~waterLevel~0Int))) (or (and (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse1 .cse2 .cse3) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2 .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse3) (and .cse0 .cse5 .cse6 .cse7 .cse2 .cse8) (and .cse0 .cse6 .cse7 .cse2 .cse8 .cse3) (and .cse9 .cse0 .cse5 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse5 .cse1 .cse2 .cse4)))) [2022-01-10 18:18:22,385 INFO L858 garLoopResultBuilder]: For program point L323(lines 323 336) no Hoare annotation was computed. [2022-01-10 18:18:22,385 INFO L858 garLoopResultBuilder]: For program point L261-3(lines 261 265) no Hoare annotation was computed. [2022-01-10 18:18:22,385 INFO L858 garLoopResultBuilder]: For program point L434-3(lines 434 440) no Hoare annotation was computed. [2022-01-10 18:18:22,385 INFO L854 garLoopResultBuilder]: At program point L106-7(lines 102 108) the Hoare annotation is: false [2022-01-10 18:18:22,385 INFO L858 garLoopResultBuilder]: For program point L847-2(lines 847 864) no Hoare annotation was computed. [2022-01-10 18:18:22,385 INFO L854 garLoopResultBuilder]: At program point L276(lines 271 278) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse8 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse3 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse5 (= ~pumpRunning~0Int 0)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 2 ~waterLevel~0Int))) (or (and (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse1 .cse2 .cse3) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2 .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse3) (and .cse0 .cse5 .cse6 .cse7 .cse2 .cse8) (and .cse0 .cse6 .cse7 .cse2 .cse8 .cse3) (and .cse9 .cse0 .cse5 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse5 .cse1 .cse2 .cse4)))) [2022-01-10 18:18:22,385 INFO L858 garLoopResultBuilder]: For program point L331(lines 331 335) no Hoare annotation was computed. [2022-01-10 18:18:22,385 INFO L858 garLoopResultBuilder]: For program point L261-5(lines 261 265) no Hoare annotation was computed. [2022-01-10 18:18:22,385 INFO L854 garLoopResultBuilder]: At program point L439-3(lines 430 443) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,385 INFO L854 garLoopResultBuilder]: At program point L114-7(lines 110 134) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) [2022-01-10 18:18:22,385 INFO L854 garLoopResultBuilder]: At program point L193-3(lines 188 196) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,385 INFO L854 garLoopResultBuilder]: At program point L847-3(lines 839 867) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,385 INFO L858 garLoopResultBuilder]: For program point L331-2(lines 323 336) no Hoare annotation was computed. [2022-01-10 18:18:22,386 INFO L854 garLoopResultBuilder]: At program point L267-1(lines 252 270) the Hoare annotation is: false [2022-01-10 18:18:22,386 INFO L858 garLoopResultBuilder]: For program point L242-9(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,386 INFO L854 garLoopResultBuilder]: At program point L140-3(lines 136 160) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,386 INFO L858 garLoopResultBuilder]: For program point L851-2(lines 851 861) no Hoare annotation was computed. [2022-01-10 18:18:22,386 INFO L854 garLoopResultBuilder]: At program point L99-1(lines 75 101) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,386 INFO L854 garLoopResultBuilder]: At program point L193(lines 188 196) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0Int 1))) (let ((.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse8 (or .cse11 (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int)) (.cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse10 (= ~pumpRunning~0Int 0)) (.cse3 (<= ~waterLevel~0Int 2)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse7 .cse4 .cse8 .cse5) (and .cse9 .cse1 .cse10 .cse6 .cse7 .cse4 .cse8) (and .cse0 .cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse7 .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse5) (and .cse11 .cse9 .cse1 .cse10 .cse2 .cse4) (and .cse9 .cse1 .cse10 .cse3 .cse4 (<= 2 ~waterLevel~0Int))))) [2022-01-10 18:18:22,386 INFO L858 garLoopResultBuilder]: For program point L144-3(lines 144 152) no Hoare annotation was computed. [2022-01-10 18:18:22,386 INFO L858 garLoopResultBuilder]: For program point L242-11(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,386 INFO L858 garLoopResultBuilder]: For program point L852-3(lines 852 858) no Hoare annotation was computed. [2022-01-10 18:18:22,386 INFO L854 garLoopResultBuilder]: At program point L918-2(lines 918 932) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,386 INFO L854 garLoopResultBuilder]: At program point L836(lines 829 838) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1))) (let ((.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse10 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse11 (or .cse0 (<= 4294967297 ~waterLevel~0Int))) (.cse7 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse8 (<= 1 ~pumpRunning~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (<= ~waterLevel~0Int 2)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse5 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse6 .cse4 .cse7 .cse8) (and .cse5 .cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse9 .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse7 .cse8) (and .cse1 .cse2 .cse3 .cse10 .cse9 .cse4 .cse11) (and .cse5 .cse2 .cse10 .cse9 .cse4 .cse11 .cse7 .cse8) (and .cse1 .cse2 .cse3 .cse6 .cse4 (<= 2 ~waterLevel~0Int))))) [2022-01-10 18:18:22,386 INFO L854 garLoopResultBuilder]: At program point L174-1(lines 169 176) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:22,386 INFO L858 garLoopResultBuilder]: For program point L114-4(lines 114 131) no Hoare annotation was computed. [2022-01-10 18:18:22,386 INFO L854 garLoopResultBuilder]: At program point L248-3(lines 233 251) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~2#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0)) [2022-01-10 18:18:22,387 INFO L858 garLoopResultBuilder]: For program point L54-1(line 54) no Hoare annotation was computed. [2022-01-10 18:18:22,387 INFO L861 garLoopResultBuilder]: At program point L933(lines 908 937) the Hoare annotation is: true [2022-01-10 18:18:22,388 INFO L858 garLoopResultBuilder]: For program point L919(line 919) no Hoare annotation was computed. [2022-01-10 18:18:22,388 INFO L858 garLoopResultBuilder]: For program point L82(lines 82 88) no Hoare annotation was computed. [2022-01-10 18:18:22,388 INFO L858 garLoopResultBuilder]: For program point L434-2(lines 434 440) no Hoare annotation was computed. [2022-01-10 18:18:22,388 INFO L854 garLoopResultBuilder]: At program point L106-5(lines 102 108) the Hoare annotation is: false [2022-01-10 18:18:22,388 INFO L858 garLoopResultBuilder]: For program point L118-9(lines 118 126) no Hoare annotation was computed. [2022-01-10 18:18:22,388 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-01-10 18:18:22,388 INFO L854 garLoopResultBuilder]: At program point L55-1(lines 50 57) the Hoare annotation is: false [2022-01-10 18:18:22,388 INFO L861 garLoopResultBuilder]: At program point L346(lines 283 348) the Hoare annotation is: true [2022-01-10 18:18:22,388 INFO L858 garLoopResultBuilder]: For program point L922(lines 922 926) no Hoare annotation was computed. [2022-01-10 18:18:22,388 INFO L858 garLoopResultBuilder]: For program point L357(lines 357 361) no Hoare annotation was computed. [2022-01-10 18:18:22,388 INFO L858 garLoopResultBuilder]: For program point L82-2(lines 78 100) no Hoare annotation was computed. [2022-01-10 18:18:22,388 INFO L854 garLoopResultBuilder]: At program point L439-2(lines 430 443) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:22,388 INFO L854 garLoopResultBuilder]: At program point L114-5(lines 110 134) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1)) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:22,388 INFO L854 garLoopResultBuilder]: At program point L166-3(lines 161 168) the Hoare annotation is: false [2022-01-10 18:18:22,388 INFO L854 garLoopResultBuilder]: At program point L106-6(lines 102 108) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) [2022-01-10 18:18:22,388 INFO L861 garLoopResultBuilder]: At program point L977(lines 969 979) the Hoare annotation is: true [2022-01-10 18:18:22,389 INFO L858 garLoopResultBuilder]: For program point L922-1(lines 922 926) no Hoare annotation was computed. [2022-01-10 18:18:22,389 INFO L854 garLoopResultBuilder]: At program point L357-2(lines 353 364) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse4 .cse5))) [2022-01-10 18:18:22,389 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 157) no Hoare annotation was computed. [2022-01-10 18:18:22,389 INFO L858 garLoopResultBuilder]: For program point L89-1(lines 89 95) no Hoare annotation was computed. [2022-01-10 18:18:22,389 INFO L858 garLoopResultBuilder]: For program point L242-6(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,389 INFO L854 garLoopResultBuilder]: At program point L193-4(lines 188 196) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,389 INFO L854 garLoopResultBuilder]: At program point L449(lines 444 452) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse4 .cse5))) [2022-01-10 18:18:22,389 INFO L858 garLoopResultBuilder]: For program point L114-2(lines 114 131) no Hoare annotation was computed. [2022-01-10 18:18:22,389 INFO L854 garLoopResultBuilder]: At program point L426(lines 421 429) the Hoare annotation is: (let ((.cse3 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse5 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse6 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~pumpRunning~0Int))) (or (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1)) (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0) .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0Int) .cse4) (and .cse0 .cse5 .cse1 .cse2 .cse3) (and .cse0 .cse5 .cse6 (<= ~waterLevel~0Int 2) .cse2 (<= 2 ~waterLevel~0Int)) (and .cse0 .cse1 .cse6 .cse2 .cse4))) [2022-01-10 18:18:22,390 INFO L858 garLoopResultBuilder]: For program point L242-8(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,390 INFO L854 garLoopResultBuilder]: At program point L836-2(lines 829 838) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,390 INFO L858 garLoopResultBuilder]: For program point L261(lines 261 265) no Hoare annotation was computed. [2022-01-10 18:18:22,390 INFO L858 garLoopResultBuilder]: For program point L434-1(lines 434 440) no Hoare annotation was computed. [2022-01-10 18:18:22,390 INFO L854 garLoopResultBuilder]: At program point L106-3(lines 102 108) the Hoare annotation is: false [2022-01-10 18:18:22,390 INFO L858 garLoopResultBuilder]: For program point L847(lines 847 864) no Hoare annotation was computed. [2022-01-10 18:18:22,390 INFO L854 garLoopResultBuilder]: At program point L248-2(lines 233 251) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~2#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:22,390 INFO L858 garLoopResultBuilder]: For program point L82-6(lines 82 88) no Hoare annotation was computed. [2022-01-10 18:18:22,390 INFO L858 garLoopResultBuilder]: For program point L261-2(lines 261 265) no Hoare annotation was computed. [2022-01-10 18:18:22,390 INFO L854 garLoopResultBuilder]: At program point L439-1(lines 430 443) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|)) (.cse1 (<= ~waterLevel~0Int 1)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 (or .cse1 (<= 4294967297 ~waterLevel~0Int))) (and .cse2 .cse3 (<= ~waterLevel~0Int 2) .cse4 (<= 2 ~waterLevel~0Int)))) [2022-01-10 18:18:22,390 INFO L854 garLoopResultBuilder]: At program point L114-3(lines 110 134) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (<= ~waterLevel~0Int 2)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) (.cse7 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= 1 ~waterLevel~0Int)) (and .cse2 .cse6 .cse4 .cse7 (<= 1 ~pumpRunning~0Int)) (and .cse0 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 .cse5 (or .cse1 (<= 4294967297 ~waterLevel~0Int))) (and .cse0 .cse2 .cse3 .cse6 .cse4 .cse5 .cse7))) [2022-01-10 18:18:22,390 INFO L854 garLoopResultBuilder]: At program point L193-1(lines 188 196) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int)))) (or (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1)) (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0Int) (<= 1 ~pumpRunning~0Int)) (and (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3 .cse4))) [2022-01-10 18:18:22,390 INFO L854 garLoopResultBuilder]: At program point L847-1(lines 839 867) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2)) (.cse8 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse4 .cse7) (and .cse0 .cse6 .cse3 .cse4 .cse7 .cse8) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse8))) [2022-01-10 18:18:22,390 INFO L858 garLoopResultBuilder]: For program point L118-6(lines 118 126) no Hoare annotation was computed. [2022-01-10 18:18:22,390 INFO L858 garLoopResultBuilder]: For program point L357-6(lines 357 361) no Hoare annotation was computed. [2022-01-10 18:18:22,391 INFO L858 garLoopResultBuilder]: For program point L82-8(lines 78 100) no Hoare annotation was computed. [2022-01-10 18:18:22,391 INFO L854 garLoopResultBuilder]: At program point L267(lines 252 270) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse4 .cse5))) [2022-01-10 18:18:22,391 INFO L858 garLoopResultBuilder]: For program point L242-3(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,391 INFO L854 garLoopResultBuilder]: At program point L140-1(lines 136 160) the Hoare annotation is: (let ((.cse13 (<= ~waterLevel~0Int 1))) (let ((.cse8 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1))) (.cse9 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse10 (or .cse13 (<= 4294967297 ~waterLevel~0Int))) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse4 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse12 (= ~pumpRunning~0Int 0)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse8 .cse0 .cse9 .cse2 .cse10 .cse11 .cse4) (and .cse8 .cse0 .cse12 .cse9 .cse2 .cse10) (and .cse5 .cse13 .cse6 .cse7 .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse11 .cse4) (and .cse13 .cse0 .cse12 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse12 .cse1 .cse2 .cse3)))) [2022-01-10 18:18:22,391 INFO L858 garLoopResultBuilder]: For program point L851(lines 851 861) no Hoare annotation was computed. [2022-01-10 18:18:22,391 INFO L854 garLoopResultBuilder]: At program point L99(lines 75 101) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2)) (.cse8 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse4 .cse7) (and .cse0 .cse6 .cse3 .cse4 .cse7 .cse8) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse8))) [2022-01-10 18:18:22,391 INFO L854 garLoopResultBuilder]: At program point L166-2(lines 161 168) the Hoare annotation is: false [2022-01-10 18:18:22,391 INFO L854 garLoopResultBuilder]: At program point L106-4(lines 102 108) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1)) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:22,391 INFO L854 garLoopResultBuilder]: At program point L357-8(lines 353 364) the Hoare annotation is: false [2022-01-10 18:18:22,391 INFO L858 garLoopResultBuilder]: For program point L140-4(lines 140 157) no Hoare annotation was computed. [2022-01-10 18:18:22,391 INFO L858 garLoopResultBuilder]: For program point L89-5(lines 89 95) no Hoare annotation was computed. [2022-01-10 18:18:22,391 INFO L858 garLoopResultBuilder]: For program point L144(lines 144 152) no Hoare annotation was computed. [2022-01-10 18:18:22,391 INFO L858 garLoopResultBuilder]: For program point L242-5(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,392 INFO L858 garLoopResultBuilder]: For program point L852(lines 852 858) no Hoare annotation was computed. [2022-01-10 18:18:22,392 INFO L854 garLoopResultBuilder]: At program point L449-2(lines 444 452) the Hoare annotation is: false [2022-01-10 18:18:22,392 INFO L858 garLoopResultBuilder]: For program point L114-10(lines 114 131) no Hoare annotation was computed. [2022-01-10 18:18:22,392 INFO L854 garLoopResultBuilder]: At program point L426-2(lines 421 429) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,392 INFO L854 garLoopResultBuilder]: At program point L174(lines 169 176) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse0 (<= ~waterLevel~0Int 1)) (.cse5 (<= 1 ~switchedOnBeforeTS~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse5) (and .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse2 .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse0 (<= 4294967297 ~waterLevel~0Int)) .cse5))) [2022-01-10 18:18:22,392 INFO L858 garLoopResultBuilder]: For program point L114(lines 114 131) no Hoare annotation was computed. [2022-01-10 18:18:22,392 INFO L854 garLoopResultBuilder]: At program point L248-1(lines 233 251) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~2#1Int|)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse3 (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5 .cse6) (and .cse4 .cse0 .cse1 .cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse3 .cse5 .cse6) (and .cse1 .cse2 (<= ~waterLevel~0Int 2) .cse3 (<= 2 ~waterLevel~0Int)))) [2022-01-10 18:18:22,392 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-01-10 18:18:22,392 INFO L858 garLoopResultBuilder]: For program point L261-6(lines 261 265) no Hoare annotation was computed. [2022-01-10 18:18:22,392 INFO L858 garLoopResultBuilder]: For program point L434-5(lines 434 440) no Hoare annotation was computed. [2022-01-10 18:18:22,392 INFO L854 garLoopResultBuilder]: At program point L106-11(lines 102 108) the Hoare annotation is: false [2022-01-10 18:18:22,392 INFO L858 garLoopResultBuilder]: For program point L847-4(lines 847 864) no Hoare annotation was computed. [2022-01-10 18:18:22,392 INFO L858 garLoopResultBuilder]: For program point L434(lines 434 440) no Hoare annotation was computed. [2022-01-10 18:18:22,392 INFO L854 garLoopResultBuilder]: At program point L106-1(lines 102 108) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse5 (<= ~waterLevel~0Int 1)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse3 (<= 1 ~systemActive~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse7 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6 .cse7) (and .cse0 .cse5 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse6 .cse7))) [2022-01-10 18:18:22,392 INFO L858 garLoopResultBuilder]: For program point L118-3(lines 118 126) no Hoare annotation was computed. [2022-01-10 18:18:22,392 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: false [2022-01-10 18:18:22,393 INFO L858 garLoopResultBuilder]: For program point L261-8(lines 261 265) no Hoare annotation was computed. [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L439-5(lines 430 443) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L114-11(lines 110 134) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L193-5(lines 188 196) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L847-5(lines 839 867) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L439(lines 430 443) the Hoare annotation is: false [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L114-1(lines 110 134) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse5 (<= ~waterLevel~0Int 1)) (.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse3 (<= 1 ~systemActive~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse7 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 1)) .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6 .cse7) (and .cse0 .cse5 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) .cse6 .cse7))) [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L166-1(lines 161 168) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 2 ~waterLevel~0Int) (<= 1 ~pumpRunning~0Int)) [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L106-2(lines 102 108) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| ~waterLevel~0Int) .cse4 .cse5 (or .cse1 (<= 4294967297 ~waterLevel~0Int))) (and .cse0 .cse2 .cse3 (<= ~waterLevel~0Int 2) .cse4 .cse5 (<= 2 ~waterLevel~0Int)))) [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L267-2(lines 252 270) the Hoare annotation is: false [2022-01-10 18:18:22,393 INFO L858 garLoopResultBuilder]: For program point L242-15(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L140-5(lines 136 160) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,393 INFO L858 garLoopResultBuilder]: For program point L851-4(lines 851 861) no Hoare annotation was computed. [2022-01-10 18:18:22,393 INFO L854 garLoopResultBuilder]: At program point L99-2(lines 75 101) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:22,393 INFO L858 garLoopResultBuilder]: For program point L242(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,393 INFO L858 garLoopResultBuilder]: For program point L144-6(lines 144 152) no Hoare annotation was computed. [2022-01-10 18:18:22,394 INFO L858 garLoopResultBuilder]: For program point L242-17(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,394 INFO L858 garLoopResultBuilder]: For program point L852-6(lines 852 858) no Hoare annotation was computed. [2022-01-10 18:18:22,394 INFO L858 garLoopResultBuilder]: For program point L242-2(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,394 INFO L854 garLoopResultBuilder]: At program point L174-2(lines 169 176) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:22,394 INFO L858 garLoopResultBuilder]: For program point L114-8(lines 114 131) no Hoare annotation was computed. [2022-01-10 18:18:22,394 INFO L854 garLoopResultBuilder]: At program point L248-5(lines 233 251) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~2#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0)) [2022-01-10 18:18:22,394 INFO L858 garLoopResultBuilder]: For program point L54-2(line 54) no Hoare annotation was computed. [2022-01-10 18:18:22,394 INFO L854 garLoopResultBuilder]: At program point L248(lines 233 251) the Hoare annotation is: false [2022-01-10 18:18:22,394 INFO L858 garLoopResultBuilder]: For program point L434-4(lines 434 440) no Hoare annotation was computed. [2022-01-10 18:18:22,394 INFO L854 garLoopResultBuilder]: At program point L106-9(lines 102 108) the Hoare annotation is: false [2022-01-10 18:18:22,394 INFO L858 garLoopResultBuilder]: For program point L118-15(lines 118 126) no Hoare annotation was computed. [2022-01-10 18:18:22,394 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-01-10 18:18:22,394 INFO L854 garLoopResultBuilder]: At program point L55-2(lines 50 57) the Hoare annotation is: false [2022-01-10 18:18:22,394 INFO L858 garLoopResultBuilder]: For program point L118(lines 118 126) no Hoare annotation was computed. [2022-01-10 18:18:22,394 INFO L854 garLoopResultBuilder]: At program point L439-4(lines 430 443) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:22,394 INFO L854 garLoopResultBuilder]: At program point L114-9(lines 110 134) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1)) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:22,394 INFO L854 garLoopResultBuilder]: At program point L166-5(lines 161 168) the Hoare annotation is: false [2022-01-10 18:18:22,394 INFO L854 garLoopResultBuilder]: At program point L106-10(lines 102 108) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) [2022-01-10 18:18:22,395 INFO L854 garLoopResultBuilder]: At program point L166(lines 161 168) the Hoare annotation is: false [2022-01-10 18:18:22,395 INFO L854 garLoopResultBuilder]: At program point L106(lines 102 108) the Hoare annotation is: false [2022-01-10 18:18:22,395 INFO L858 garLoopResultBuilder]: For program point L242-12(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,395 INFO L858 garLoopResultBuilder]: For program point L242-14(lines 242 246) no Hoare annotation was computed. [2022-01-10 18:18:22,395 INFO L854 garLoopResultBuilder]: At program point L248-4(lines 233 251) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~2#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:22,395 INFO L858 garLoopResultBuilder]: For program point L118-12(lines 118 126) no Hoare annotation was computed. [2022-01-10 18:18:22,395 INFO L854 garLoopResultBuilder]: At program point L166-4(lines 161 168) the Hoare annotation is: false [2022-01-10 18:18:22,395 INFO L854 garLoopResultBuilder]: At program point L106-8(lines 102 108) the Hoare annotation is: (and (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0) (<= ~waterLevel~0Int 1) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1)) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~8#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:22,398 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:22,399 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 18:18:22,498 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:18:22 BasicIcfg [2022-01-10 18:18:22,498 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 18:18:22,498 INFO L158 Benchmark]: Toolchain (without parser) took 14448.02ms. Allocated memory was 191.9MB in the beginning and 627.0MB in the end (delta: 435.2MB). Free memory was 135.3MB in the beginning and 425.8MB in the end (delta: -290.5MB). Peak memory consumption was 359.3MB. Max. memory is 8.0GB. [2022-01-10 18:18:22,499 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 191.9MB. Free memory is still 152.9MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 18:18:22,499 INFO L158 Benchmark]: CACSL2BoogieTranslator took 417.55ms. Allocated memory was 191.9MB in the beginning and 235.9MB in the end (delta: 44.0MB). Free memory was 135.1MB in the beginning and 192.5MB in the end (delta: -57.3MB). Peak memory consumption was 6.7MB. Max. memory is 8.0GB. [2022-01-10 18:18:22,499 INFO L158 Benchmark]: Boogie Procedure Inliner took 48.93ms. Allocated memory is still 235.9MB. Free memory was 192.5MB in the beginning and 188.8MB in the end (delta: 3.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-10 18:18:22,499 INFO L158 Benchmark]: Boogie Preprocessor took 22.42ms. Allocated memory is still 235.9MB. Free memory was 188.8MB in the beginning and 186.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 18:18:22,499 INFO L158 Benchmark]: RCFGBuilder took 541.72ms. Allocated memory is still 235.9MB. Free memory was 186.2MB in the beginning and 162.1MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. [2022-01-10 18:18:22,499 INFO L158 Benchmark]: IcfgTransformer took 140.17ms. Allocated memory is still 235.9MB. Free memory was 162.1MB in the beginning and 152.6MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. [2022-01-10 18:18:22,500 INFO L158 Benchmark]: TraceAbstraction took 13270.70ms. Allocated memory was 235.9MB in the beginning and 627.0MB in the end (delta: 391.1MB). Free memory was 152.1MB in the beginning and 425.8MB in the end (delta: -273.7MB). Peak memory consumption was 332.4MB. Max. memory is 8.0GB. [2022-01-10 18:18:22,501 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 191.9MB. Free memory is still 152.9MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 417.55ms. Allocated memory was 191.9MB in the beginning and 235.9MB in the end (delta: 44.0MB). Free memory was 135.1MB in the beginning and 192.5MB in the end (delta: -57.3MB). Peak memory consumption was 6.7MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 48.93ms. Allocated memory is still 235.9MB. Free memory was 192.5MB in the beginning and 188.8MB in the end (delta: 3.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 22.42ms. Allocated memory is still 235.9MB. Free memory was 188.8MB in the beginning and 186.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 541.72ms. Allocated memory is still 235.9MB. Free memory was 186.2MB in the beginning and 162.1MB in the end (delta: 24.1MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. * IcfgTransformer took 140.17ms. Allocated memory is still 235.9MB. Free memory was 162.1MB in the beginning and 152.6MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. * TraceAbstraction took 13270.70ms. Allocated memory was 235.9MB in the beginning and 627.0MB in the end (delta: 391.1MB). Free memory was 152.1MB in the beginning and 425.8MB in the end (delta: -273.7MB). Peak memory consumption was 332.4MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 176 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 13.1s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4534 SdHoareTripleChecker+Valid, 0.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4534 mSDsluCounter, 7652 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4948 mSDsCounter, 218 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 724 IncrementalHoareTripleChecker+Invalid, 942 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 218 mSolverCounterUnsat, 2704 mSDtfsCounter, 724 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 497 GetRequests, 432 SyntacticMatches, 1 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 105 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=539occurred in iteration=8, InterpolantAutomatonStates: 72, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 1488 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 87 LocationsWithAnnotation, 87 PreInvPairs, 431 NumberOfFragments, 3476 HoareAnnotationTreeSize, 87 FomulaSimplifications, 21444 FormulaSimplificationTreeSizeReduction, 3.1s HoareSimplificationTime, 87 FomulaSimplificationsInter, 333536 FormulaSimplificationTreeSizeReductionInter, 5.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 852 NumberOfCodeBlocks, 852 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1041 ConstructedInterpolants, 0 QuantifiedInterpolants, 2550 SizeOfPredicates, 9 NumberOfNonLiveVariables, 1522 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 585/603 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((((((((~bvult64(1bv32, tmp) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv1, ~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32])) && 0bv32 == pumpRunning - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((((((~bvult64(1bv32, tmp) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 365]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && waterLevel == tmp) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((((((((~bvult64(1bv32, tmp) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp) - InvariantResult [Line: 377]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp)) || ((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: ((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv1, ~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32])) && 0bv32 == pumpRunning - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv1, ~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32])) && 0bv32 == pumpRunning - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: ((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && waterLevel == \result) && waterLevel == tmp) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (((((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 75]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && 0bv32 == pumpRunning) && waterLevel == tmp)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: ((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) || (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 75]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 283]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32)) || ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && 0bv32 == pumpRunning)) || (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (((((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 75]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && waterLevel == \result)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((((((~bvult64(1bv32, tmp) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 821]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv1, ~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32])) && 0bv32 == pumpRunning - InvariantResult [Line: 980]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv1, ~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32])) && 0bv32 == pumpRunning - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 188]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) && waterLevel == tmp) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && waterLevel == tmp)) || (((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule32(waterLevel, 2bv32))) || ((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && tmp == 2bv32) && waterLevel == tmp) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && 0bv32 == pumpRunning) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && tmp == 2bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: ((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 233]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((~bvult64(1bv32, tmp) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvule32(tmp, 2bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning RESULT: Ultimate proved your program to be correct! [2022-01-10 18:18:22,579 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...