/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec5_product57.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-10 18:18:27,454 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-10 18:18:27,455 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-10 18:18:27,490 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-10 18:18:27,490 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-10 18:18:27,491 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-10 18:18:27,492 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-10 18:18:27,494 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-10 18:18:27,495 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-10 18:18:27,496 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-10 18:18:27,497 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-10 18:18:27,498 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-10 18:18:27,498 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-10 18:18:27,521 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-10 18:18:27,522 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-10 18:18:27,523 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-10 18:18:27,523 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-10 18:18:27,524 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-10 18:18:27,526 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-10 18:18:27,527 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-10 18:18:27,529 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-10 18:18:27,530 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-10 18:18:27,531 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-10 18:18:27,531 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-10 18:18:27,534 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-10 18:18:27,534 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-10 18:18:27,535 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-10 18:18:27,535 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-10 18:18:27,536 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-10 18:18:27,537 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-10 18:18:27,537 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-10 18:18:27,537 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-10 18:18:27,538 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-10 18:18:27,539 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-10 18:18:27,540 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-10 18:18:27,540 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-10 18:18:27,540 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-10 18:18:27,541 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-10 18:18:27,541 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-10 18:18:27,542 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-10 18:18:27,542 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-10 18:18:27,543 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_LAZY.epf [2022-01-10 18:18:27,565 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-10 18:18:27,565 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-10 18:18:27,566 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-10 18:18:27,566 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-10 18:18:27,567 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-10 18:18:27,567 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-10 18:18:27,567 INFO L138 SettingsManager]: * Use SBE=true [2022-01-10 18:18:27,567 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-10 18:18:27,567 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-10 18:18:27,567 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-10 18:18:27,567 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-10 18:18:27,568 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-10 18:18:27,568 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-10 18:18:27,568 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-10 18:18:27,568 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-10 18:18:27,568 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-10 18:18:27,568 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-10 18:18:27,568 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-10 18:18:27,569 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-10 18:18:27,569 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-10 18:18:27,569 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-10 18:18:27,569 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:18:27,569 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-10 18:18:27,569 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-10 18:18:27,569 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-10 18:18:27,570 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-10 18:18:27,570 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-10 18:18:27,570 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-10 18:18:27,570 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-10 18:18:27,570 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-10 18:18:27,570 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-10 18:18:27,570 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-10 18:18:27,571 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-10 18:18:27,571 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_LAZY WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-10 18:18:27,753 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-10 18:18:27,771 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-10 18:18:27,773 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-10 18:18:27,774 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-10 18:18:27,774 INFO L275 PluginConnector]: CDTParser initialized [2022-01-10 18:18:27,775 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec5_product57.cil.c [2022-01-10 18:18:27,833 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b03e63704/e0c92b1d56d644c6bd8cb69984fe01fb/FLAGccb51934c [2022-01-10 18:18:28,289 INFO L306 CDTParser]: Found 1 translation units. [2022-01-10 18:18:28,289 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product57.cil.c [2022-01-10 18:18:28,302 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b03e63704/e0c92b1d56d644c6bd8cb69984fe01fb/FLAGccb51934c [2022-01-10 18:18:28,321 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b03e63704/e0c92b1d56d644c6bd8cb69984fe01fb [2022-01-10 18:18:28,324 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-10 18:18:28,327 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-10 18:18:28,330 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-10 18:18:28,330 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-10 18:18:28,333 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-10 18:18:28,334 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,335 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5d10992c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28, skipping insertion in model container [2022-01-10 18:18:28,335 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,341 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-10 18:18:28,380 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:18:28,528 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product57.cil.c[1605,1618] [2022-01-10 18:18:28,632 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:18:28,642 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-10 18:18:28,649 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-10 18:18:28,652 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product57.cil.c[1605,1618] [2022-01-10 18:18:28,714 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:18:28,720 INFO L203 MainTranslator]: Completed pre-run [2022-01-10 18:18:28,731 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product57.cil.c[1605,1618] [2022-01-10 18:18:28,794 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-10 18:18:28,815 INFO L208 MainTranslator]: Completed translation [2022-01-10 18:18:28,816 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28 WrapperNode [2022-01-10 18:18:28,816 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-10 18:18:28,817 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-10 18:18:28,817 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-10 18:18:28,817 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-10 18:18:28,823 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,847 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,881 INFO L137 Inliner]: procedures = 60, calls = 159, calls flagged for inlining = 56, calls inlined = 102, statements flattened = 765 [2022-01-10 18:18:28,881 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-10 18:18:28,882 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-10 18:18:28,882 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-10 18:18:28,882 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-10 18:18:28,890 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,890 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,894 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,894 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,907 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,924 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,926 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,930 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-10 18:18:28,931 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-10 18:18:28,931 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-10 18:18:28,931 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-10 18:18:28,948 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28" (1/1) ... [2022-01-10 18:18:28,963 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-10 18:18:28,975 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:18:28,992 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-10 18:18:29,019 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-10 18:18:29,031 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-10 18:18:29,032 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-10 18:18:29,032 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-10 18:18:29,033 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-10 18:18:29,135 INFO L234 CfgBuilder]: Building ICFG [2022-01-10 18:18:29,137 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-10 18:18:29,583 INFO L275 CfgBuilder]: Performing block encoding [2022-01-10 18:18:29,591 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-10 18:18:29,591 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-10 18:18:29,593 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:18:29 BoogieIcfgContainer [2022-01-10 18:18:29,593 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-10 18:18:29,594 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-10 18:18:29,594 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-10 18:18:29,607 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-10 18:18:29,610 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:18:29" (1/1) ... [2022-01-10 18:18:29,852 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:18:29 BasicIcfg [2022-01-10 18:18:29,853 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-10 18:18:29,854 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-10 18:18:29,855 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-10 18:18:29,857 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-10 18:18:29,857 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.01 06:18:28" (1/4) ... [2022-01-10 18:18:29,858 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1f1a042f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:18:29, skipping insertion in model container [2022-01-10 18:18:29,858 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.01 06:18:28" (2/4) ... [2022-01-10 18:18:29,858 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1f1a042f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.01 06:18:29, skipping insertion in model container [2022-01-10 18:18:29,858 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.01 06:18:29" (3/4) ... [2022-01-10 18:18:29,859 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1f1a042f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:18:29, skipping insertion in model container [2022-01-10 18:18:29,859 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 10.01 06:18:29" (4/4) ... [2022-01-10 18:18:29,869 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product57.cil.cTransformedIcfg [2022-01-10 18:18:29,878 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-10 18:18:29,878 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-10 18:18:29,914 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-10 18:18:29,920 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-10 18:18:29,921 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-10 18:18:29,935 INFO L276 IsEmpty]: Start isEmpty. Operand has 199 states, 195 states have (on average 1.3743589743589744) internal successors, (268), 198 states have internal predecessors, (268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:29,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-01-10 18:18:29,940 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:29,941 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:29,941 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:29,945 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:29,945 INFO L85 PathProgramCache]: Analyzing trace with hash 1516733496, now seen corresponding path program 1 times [2022-01-10 18:18:29,952 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:29,953 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [979147567] [2022-01-10 18:18:29,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:29,954 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:30,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:30,224 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:30,225 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:30,225 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [979147567] [2022-01-10 18:18:30,225 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [979147567] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:30,226 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:30,226 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:30,228 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1439773941] [2022-01-10 18:18:30,230 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:30,234 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-10 18:18:30,234 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:30,265 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-10 18:18:30,265 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:18:30,271 INFO L87 Difference]: Start difference. First operand has 199 states, 195 states have (on average 1.3743589743589744) internal successors, (268), 198 states have internal predecessors, (268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:30,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:30,341 INFO L93 Difference]: Finished difference Result 387 states and 524 transitions. [2022-01-10 18:18:30,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-10 18:18:30,345 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-01-10 18:18:30,345 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:30,356 INFO L225 Difference]: With dead ends: 387 [2022-01-10 18:18:30,357 INFO L226 Difference]: Without dead ends: 189 [2022-01-10 18:18:30,360 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-10 18:18:30,364 INFO L933 BasicCegarLoop]: 258 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 258 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:30,365 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 258 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:30,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 189 states. [2022-01-10 18:18:30,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 189 to 189. [2022-01-10 18:18:30,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 189 states, 186 states have (on average 1.3440860215053763) internal successors, (250), 188 states have internal predecessors, (250), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:30,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 250 transitions. [2022-01-10 18:18:30,417 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 250 transitions. Word has length 21 [2022-01-10 18:18:30,417 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:30,417 INFO L470 AbstractCegarLoop]: Abstraction has 189 states and 250 transitions. [2022-01-10 18:18:30,417 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:30,418 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 250 transitions. [2022-01-10 18:18:30,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-01-10 18:18:30,419 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:30,419 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:30,422 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-10 18:18:30,422 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:30,425 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:30,425 INFO L85 PathProgramCache]: Analyzing trace with hash 438568467, now seen corresponding path program 1 times [2022-01-10 18:18:30,426 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:30,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1469517311] [2022-01-10 18:18:30,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:30,427 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:30,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:30,530 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:30,530 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:30,531 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1469517311] [2022-01-10 18:18:30,531 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1469517311] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:30,531 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:30,531 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:30,531 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1166378056] [2022-01-10 18:18:30,531 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:30,532 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:30,533 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:30,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:30,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:30,534 INFO L87 Difference]: Start difference. First operand 189 states and 250 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:30,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:30,560 INFO L93 Difference]: Finished difference Result 370 states and 492 transitions. [2022-01-10 18:18:30,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:30,561 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-01-10 18:18:30,561 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:30,562 INFO L225 Difference]: With dead ends: 370 [2022-01-10 18:18:30,563 INFO L226 Difference]: Without dead ends: 189 [2022-01-10 18:18:30,563 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:30,564 INFO L933 BasicCegarLoop]: 244 mSDtfsCounter, 233 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 233 SdHoareTripleChecker+Valid, 244 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:30,565 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [233 Valid, 244 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:30,566 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 189 states. [2022-01-10 18:18:30,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 189 to 189. [2022-01-10 18:18:30,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 189 states, 186 states have (on average 1.3279569892473118) internal successors, (247), 188 states have internal predecessors, (247), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:30,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 189 states to 189 states and 247 transitions. [2022-01-10 18:18:30,581 INFO L78 Accepts]: Start accepts. Automaton has 189 states and 247 transitions. Word has length 22 [2022-01-10 18:18:30,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:30,581 INFO L470 AbstractCegarLoop]: Abstraction has 189 states and 247 transitions. [2022-01-10 18:18:30,581 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:30,582 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states and 247 transitions. [2022-01-10 18:18:30,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-01-10 18:18:30,582 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:30,583 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:30,583 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-10 18:18:30,583 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:30,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:30,584 INFO L85 PathProgramCache]: Analyzing trace with hash -2071315133, now seen corresponding path program 1 times [2022-01-10 18:18:30,584 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:30,584 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1162297424] [2022-01-10 18:18:30,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:30,584 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:30,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:30,628 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:30,628 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:30,628 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1162297424] [2022-01-10 18:18:30,629 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1162297424] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:30,629 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:30,629 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:30,629 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [166261969] [2022-01-10 18:18:30,629 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:30,630 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:30,630 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:30,630 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:30,630 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:30,631 INFO L87 Difference]: Start difference. First operand 189 states and 247 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:30,719 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:30,719 INFO L93 Difference]: Finished difference Result 446 states and 581 transitions. [2022-01-10 18:18:30,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:30,720 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-01-10 18:18:30,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:30,722 INFO L225 Difference]: With dead ends: 446 [2022-01-10 18:18:30,722 INFO L226 Difference]: Without dead ends: 265 [2022-01-10 18:18:30,723 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:30,724 INFO L933 BasicCegarLoop]: 229 mSDtfsCounter, 168 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 345 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:30,724 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [168 Valid, 345 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:30,725 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 265 states. [2022-01-10 18:18:30,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 265 to 259. [2022-01-10 18:18:30,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 259 states, 256 states have (on average 1.2890625) internal successors, (330), 258 states have internal predecessors, (330), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:30,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 330 transitions. [2022-01-10 18:18:30,744 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 330 transitions. Word has length 27 [2022-01-10 18:18:30,744 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:30,744 INFO L470 AbstractCegarLoop]: Abstraction has 259 states and 330 transitions. [2022-01-10 18:18:30,745 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:30,745 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 330 transitions. [2022-01-10 18:18:30,746 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-10 18:18:30,746 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:30,746 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:30,746 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-10 18:18:30,746 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:30,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:30,747 INFO L85 PathProgramCache]: Analyzing trace with hash 1668544903, now seen corresponding path program 1 times [2022-01-10 18:18:30,747 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:30,747 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1798867283] [2022-01-10 18:18:30,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:30,748 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:30,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:30,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:30,831 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:30,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1798867283] [2022-01-10 18:18:30,831 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1798867283] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:30,831 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:30,832 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:18:30,832 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1202564952] [2022-01-10 18:18:30,832 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:30,832 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:18:30,832 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:30,833 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:18:30,833 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:30,833 INFO L87 Difference]: Start difference. First operand 259 states and 330 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,080 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:31,081 INFO L93 Difference]: Finished difference Result 916 states and 1155 transitions. [2022-01-10 18:18:31,081 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-10 18:18:31,081 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-10 18:18:31,082 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:31,084 INFO L225 Difference]: With dead ends: 916 [2022-01-10 18:18:31,084 INFO L226 Difference]: Without dead ends: 665 [2022-01-10 18:18:31,085 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-10 18:18:31,087 INFO L933 BasicCegarLoop]: 434 mSDtfsCounter, 702 mSDsluCounter, 865 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 702 SdHoareTripleChecker+Valid, 1299 SdHoareTripleChecker+Invalid, 176 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:31,087 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [702 Valid, 1299 Invalid, 176 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 18:18:31,089 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 665 states. [2022-01-10 18:18:31,118 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 665 to 256. [2022-01-10 18:18:31,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 256 states, 253 states have (on average 1.2687747035573123) internal successors, (321), 255 states have internal predecessors, (321), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 321 transitions. [2022-01-10 18:18:31,119 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 321 transitions. Word has length 33 [2022-01-10 18:18:31,119 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:31,120 INFO L470 AbstractCegarLoop]: Abstraction has 256 states and 321 transitions. [2022-01-10 18:18:31,120 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,145 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 321 transitions. [2022-01-10 18:18:31,146 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-01-10 18:18:31,147 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:31,147 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:31,148 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-10 18:18:31,149 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:31,150 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:31,150 INFO L85 PathProgramCache]: Analyzing trace with hash -1251880163, now seen corresponding path program 1 times [2022-01-10 18:18:31,150 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:31,151 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1180930256] [2022-01-10 18:18:31,151 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:31,151 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:31,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:31,245 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:31,246 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:31,246 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1180930256] [2022-01-10 18:18:31,246 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1180930256] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:31,247 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:31,247 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:18:31,248 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [726921130] [2022-01-10 18:18:31,248 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:31,248 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:18:31,248 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:31,249 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:18:31,249 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:31,249 INFO L87 Difference]: Start difference. First operand 256 states and 321 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:31,395 INFO L93 Difference]: Finished difference Result 659 states and 815 transitions. [2022-01-10 18:18:31,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 18:18:31,396 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-01-10 18:18:31,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:31,397 INFO L225 Difference]: With dead ends: 659 [2022-01-10 18:18:31,397 INFO L226 Difference]: Without dead ends: 411 [2022-01-10 18:18:31,398 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:18:31,403 INFO L933 BasicCegarLoop]: 260 mSDtfsCounter, 350 mSDsluCounter, 717 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 977 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:31,403 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [350 Valid, 977 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:31,406 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 411 states. [2022-01-10 18:18:31,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 411 to 274. [2022-01-10 18:18:31,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 271 states have (on average 1.2509225092250922) internal successors, (339), 273 states have internal predecessors, (339), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 339 transitions. [2022-01-10 18:18:31,448 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 339 transitions. Word has length 37 [2022-01-10 18:18:31,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:31,452 INFO L470 AbstractCegarLoop]: Abstraction has 274 states and 339 transitions. [2022-01-10 18:18:31,452 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,453 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 339 transitions. [2022-01-10 18:18:31,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-01-10 18:18:31,457 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:31,457 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:31,457 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-10 18:18:31,458 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:31,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:31,460 INFO L85 PathProgramCache]: Analyzing trace with hash 2046014780, now seen corresponding path program 1 times [2022-01-10 18:18:31,460 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:31,461 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [788834761] [2022-01-10 18:18:31,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:31,461 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:31,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:31,530 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:31,531 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:31,531 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [788834761] [2022-01-10 18:18:31,531 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [788834761] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:31,531 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:31,531 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-10 18:18:31,531 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1406145649] [2022-01-10 18:18:31,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:31,533 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-10 18:18:31,533 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:31,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-10 18:18:31,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-10 18:18:31,534 INFO L87 Difference]: Start difference. First operand 274 states and 339 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:31,656 INFO L93 Difference]: Finished difference Result 716 states and 872 transitions. [2022-01-10 18:18:31,656 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-10 18:18:31,656 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-01-10 18:18:31,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:31,658 INFO L225 Difference]: With dead ends: 716 [2022-01-10 18:18:31,658 INFO L226 Difference]: Without dead ends: 450 [2022-01-10 18:18:31,659 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:31,665 INFO L933 BasicCegarLoop]: 266 mSDtfsCounter, 312 mSDsluCounter, 469 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 735 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:31,666 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [312 Valid, 735 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:31,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 450 states. [2022-01-10 18:18:31,695 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 450 to 286. [2022-01-10 18:18:31,696 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 286 states, 283 states have (on average 1.2402826855123674) internal successors, (351), 285 states have internal predecessors, (351), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,696 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 286 states to 286 states and 351 transitions. [2022-01-10 18:18:31,697 INFO L78 Accepts]: Start accepts. Automaton has 286 states and 351 transitions. Word has length 37 [2022-01-10 18:18:31,698 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:31,698 INFO L470 AbstractCegarLoop]: Abstraction has 286 states and 351 transitions. [2022-01-10 18:18:31,698 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 4 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,698 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 351 transitions. [2022-01-10 18:18:31,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-01-10 18:18:31,701 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:31,701 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:31,701 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-10 18:18:31,701 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:31,702 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:31,702 INFO L85 PathProgramCache]: Analyzing trace with hash 1637190555, now seen corresponding path program 1 times [2022-01-10 18:18:31,702 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:31,702 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [222311615] [2022-01-10 18:18:31,702 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:31,702 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:31,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:31,791 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:31,791 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:31,791 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [222311615] [2022-01-10 18:18:31,791 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [222311615] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:31,791 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:31,791 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-10 18:18:31,792 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [836547175] [2022-01-10 18:18:31,792 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:31,792 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:31,792 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:31,792 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:31,793 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:31,793 INFO L87 Difference]: Start difference. First operand 286 states and 351 transitions. Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 2 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:31,876 INFO L93 Difference]: Finished difference Result 648 states and 791 transitions. [2022-01-10 18:18:31,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:31,877 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 2 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-01-10 18:18:31,877 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:31,878 INFO L225 Difference]: With dead ends: 648 [2022-01-10 18:18:31,878 INFO L226 Difference]: Without dead ends: 321 [2022-01-10 18:18:31,879 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:31,882 INFO L933 BasicCegarLoop]: 234 mSDtfsCounter, 83 mSDsluCounter, 207 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 441 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:31,882 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [83 Valid, 441 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:31,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 321 states. [2022-01-10 18:18:31,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 321 to 321. [2022-01-10 18:18:31,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 321 states, 318 states have (on average 1.2327044025157232) internal successors, (392), 320 states have internal predecessors, (392), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 321 states to 321 states and 392 transitions. [2022-01-10 18:18:31,925 INFO L78 Accepts]: Start accepts. Automaton has 321 states and 392 transitions. Word has length 37 [2022-01-10 18:18:31,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:31,925 INFO L470 AbstractCegarLoop]: Abstraction has 321 states and 392 transitions. [2022-01-10 18:18:31,926 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 2 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:31,926 INFO L276 IsEmpty]: Start isEmpty. Operand 321 states and 392 transitions. [2022-01-10 18:18:31,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-01-10 18:18:31,927 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:31,927 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:31,927 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-10 18:18:31,927 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:31,928 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:31,928 INFO L85 PathProgramCache]: Analyzing trace with hash -2006847371, now seen corresponding path program 1 times [2022-01-10 18:18:31,928 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:31,928 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2085517508] [2022-01-10 18:18:31,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:31,928 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:31,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:32,081 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:32,081 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:32,081 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2085517508] [2022-01-10 18:18:32,081 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2085517508] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:32,082 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:32,082 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:18:32,082 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1177004209] [2022-01-10 18:18:32,082 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:32,083 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-10 18:18:32,083 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:32,084 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-10 18:18:32,084 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-10 18:18:32,084 INFO L87 Difference]: Start difference. First operand 321 states and 392 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:32,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:32,489 INFO L93 Difference]: Finished difference Result 1525 states and 1871 transitions. [2022-01-10 18:18:32,489 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-01-10 18:18:32,489 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-01-10 18:18:32,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:32,494 INFO L225 Difference]: With dead ends: 1525 [2022-01-10 18:18:32,494 INFO L226 Difference]: Without dead ends: 1117 [2022-01-10 18:18:32,496 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2022-01-10 18:18:32,497 INFO L933 BasicCegarLoop]: 417 mSDtfsCounter, 1024 mSDsluCounter, 1143 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1024 SdHoareTripleChecker+Valid, 1560 SdHoareTripleChecker+Invalid, 227 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:32,500 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1024 Valid, 1560 Invalid, 227 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 163 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-10 18:18:32,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1117 states. [2022-01-10 18:18:32,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1117 to 578. [2022-01-10 18:18:32,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 578 states, 575 states have (on average 1.208695652173913) internal successors, (695), 577 states have internal predecessors, (695), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:32,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 578 states to 578 states and 695 transitions. [2022-01-10 18:18:32,571 INFO L78 Accepts]: Start accepts. Automaton has 578 states and 695 transitions. Word has length 45 [2022-01-10 18:18:32,573 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:32,573 INFO L470 AbstractCegarLoop]: Abstraction has 578 states and 695 transitions. [2022-01-10 18:18:32,573 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:32,573 INFO L276 IsEmpty]: Start isEmpty. Operand 578 states and 695 transitions. [2022-01-10 18:18:32,574 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-01-10 18:18:32,574 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:32,574 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:32,574 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-10 18:18:32,575 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:32,575 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:32,575 INFO L85 PathProgramCache]: Analyzing trace with hash -1621749117, now seen corresponding path program 1 times [2022-01-10 18:18:32,575 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:32,575 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [203211709] [2022-01-10 18:18:32,575 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:32,576 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:32,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:32,629 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:32,629 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:32,629 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [203211709] [2022-01-10 18:18:32,629 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [203211709] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:32,629 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:32,630 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-10 18:18:32,630 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2110330202] [2022-01-10 18:18:32,630 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:32,630 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-10 18:18:32,630 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:32,631 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-10 18:18:32,631 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:32,631 INFO L87 Difference]: Start difference. First operand 578 states and 695 transitions. Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:32,677 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:32,677 INFO L93 Difference]: Finished difference Result 578 states and 695 transitions. [2022-01-10 18:18:32,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-10 18:18:32,678 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2022-01-10 18:18:32,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:32,679 INFO L225 Difference]: With dead ends: 578 [2022-01-10 18:18:32,679 INFO L226 Difference]: Without dead ends: 265 [2022-01-10 18:18:32,680 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-10 18:18:32,681 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 54 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:32,682 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [54 Valid, 103 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:32,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 265 states. [2022-01-10 18:18:32,715 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 265 to 265. [2022-01-10 18:18:32,716 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 264 states have (on average 1.2386363636363635) internal successors, (327), 264 states have internal predecessors, (327), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:32,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 327 transitions. [2022-01-10 18:18:32,717 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 327 transitions. Word has length 69 [2022-01-10 18:18:32,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:32,718 INFO L470 AbstractCegarLoop]: Abstraction has 265 states and 327 transitions. [2022-01-10 18:18:32,718 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 3 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:32,718 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 327 transitions. [2022-01-10 18:18:32,718 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-10 18:18:32,718 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:32,719 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:32,719 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-10 18:18:32,719 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:32,719 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:32,719 INFO L85 PathProgramCache]: Analyzing trace with hash 1983405902, now seen corresponding path program 1 times [2022-01-10 18:18:32,720 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:32,720 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1298460425] [2022-01-10 18:18:32,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:32,720 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:32,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:32,804 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 14 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:32,804 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:32,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1298460425] [2022-01-10 18:18:32,804 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1298460425] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 18:18:32,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1208165691] [2022-01-10 18:18:32,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:32,805 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 18:18:32,805 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:18:32,811 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 18:18:32,818 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-10 18:18:32,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:32,950 INFO L263 TraceCheckSpWp]: Trace formula consists of 639 conjuncts, 5 conjunts are in the unsatisfiable core [2022-01-10 18:18:32,954 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 18:18:33,122 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 14 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:33,122 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 18:18:33,245 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 14 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-10 18:18:33,246 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1208165691] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 18:18:33,246 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 18:18:33,246 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 5 [2022-01-10 18:18:33,246 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1830868126] [2022-01-10 18:18:33,247 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 18:18:33,247 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:18:33,247 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:33,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:18:33,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:33,248 INFO L87 Difference]: Start difference. First operand 265 states and 327 transitions. Second operand has 5 states, 5 states have (on average 15.0) internal successors, (75), 5 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:33,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:33,357 INFO L93 Difference]: Finished difference Result 640 states and 811 transitions. [2022-01-10 18:18:33,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-01-10 18:18:33,358 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 5 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-10 18:18:33,358 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:33,361 INFO L225 Difference]: With dead ends: 640 [2022-01-10 18:18:33,361 INFO L226 Difference]: Without dead ends: 383 [2022-01-10 18:18:33,361 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 152 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-01-10 18:18:33,362 INFO L933 BasicCegarLoop]: 160 mSDtfsCounter, 167 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 454 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:33,362 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [167 Valid, 454 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:33,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 383 states. [2022-01-10 18:18:33,395 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 383 to 245. [2022-01-10 18:18:33,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 245 states, 244 states have (on average 1.2172131147540983) internal successors, (297), 244 states have internal predecessors, (297), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:33,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 245 states to 245 states and 297 transitions. [2022-01-10 18:18:33,397 INFO L78 Accepts]: Start accepts. Automaton has 245 states and 297 transitions. Word has length 75 [2022-01-10 18:18:33,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:33,397 INFO L470 AbstractCegarLoop]: Abstraction has 245 states and 297 transitions. [2022-01-10 18:18:33,397 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 5 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:33,397 INFO L276 IsEmpty]: Start isEmpty. Operand 245 states and 297 transitions. [2022-01-10 18:18:33,398 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 137 [2022-01-10 18:18:33,398 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:33,398 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:33,426 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-01-10 18:18:33,616 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-01-10 18:18:33,616 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:33,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:33,617 INFO L85 PathProgramCache]: Analyzing trace with hash 736305427, now seen corresponding path program 1 times [2022-01-10 18:18:33,617 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:33,617 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [757876313] [2022-01-10 18:18:33,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:33,618 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:33,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:33,713 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-01-10 18:18:33,713 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:33,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [757876313] [2022-01-10 18:18:33,714 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [757876313] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-10 18:18:33,714 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-10 18:18:33,714 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-10 18:18:33,714 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1026636205] [2022-01-10 18:18:33,714 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-10 18:18:33,714 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-10 18:18:33,715 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:33,715 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-10 18:18:33,715 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-10 18:18:33,715 INFO L87 Difference]: Start difference. First operand 245 states and 297 transitions. Second operand has 5 states, 5 states have (on average 19.8) internal successors, (99), 5 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:33,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:33,782 INFO L93 Difference]: Finished difference Result 603 states and 740 transitions. [2022-01-10 18:18:33,783 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-10 18:18:33,783 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 19.8) internal successors, (99), 5 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 136 [2022-01-10 18:18:33,783 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:33,784 INFO L225 Difference]: With dead ends: 603 [2022-01-10 18:18:33,784 INFO L226 Difference]: Without dead ends: 366 [2022-01-10 18:18:33,785 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-10 18:18:33,786 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 168 mSDsluCounter, 296 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 409 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:33,786 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [168 Valid, 409 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-10 18:18:33,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 366 states. [2022-01-10 18:18:33,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 366 to 251. [2022-01-10 18:18:33,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 251 states, 250 states have (on average 1.212) internal successors, (303), 250 states have internal predecessors, (303), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:33,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 251 states to 251 states and 303 transitions. [2022-01-10 18:18:33,818 INFO L78 Accepts]: Start accepts. Automaton has 251 states and 303 transitions. Word has length 136 [2022-01-10 18:18:33,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:33,818 INFO L470 AbstractCegarLoop]: Abstraction has 251 states and 303 transitions. [2022-01-10 18:18:33,819 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.8) internal successors, (99), 5 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:33,819 INFO L276 IsEmpty]: Start isEmpty. Operand 251 states and 303 transitions. [2022-01-10 18:18:33,819 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 137 [2022-01-10 18:18:33,820 INFO L506 BasicCegarLoop]: Found error trace [2022-01-10 18:18:33,820 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:33,820 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-10 18:18:33,820 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-10 18:18:33,820 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-10 18:18:33,820 INFO L85 PathProgramCache]: Analyzing trace with hash -447041870, now seen corresponding path program 1 times [2022-01-10 18:18:33,821 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-10 18:18:33,821 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1929677801] [2022-01-10 18:18:33,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:33,821 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-10 18:18:33,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:33,989 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 112 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-01-10 18:18:33,989 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-10 18:18:33,989 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1929677801] [2022-01-10 18:18:33,990 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1929677801] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-10 18:18:33,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1867132885] [2022-01-10 18:18:33,990 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-10 18:18:33,990 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-10 18:18:33,990 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-10 18:18:33,991 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-10 18:18:34,020 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-01-10 18:18:34,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-10 18:18:34,172 INFO L263 TraceCheckSpWp]: Trace formula consists of 946 conjuncts, 15 conjunts are in the unsatisfiable core [2022-01-10 18:18:34,179 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-10 18:18:34,455 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 73 proven. 2 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-01-10 18:18:34,455 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-10 18:18:34,666 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 73 proven. 2 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-01-10 18:18:34,666 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1867132885] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-10 18:18:34,667 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-10 18:18:34,667 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 15 [2022-01-10 18:18:34,667 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1248980994] [2022-01-10 18:18:34,667 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-10 18:18:34,668 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-01-10 18:18:34,668 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-10 18:18:34,668 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-01-10 18:18:34,668 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-01-10 18:18:34,668 INFO L87 Difference]: Start difference. First operand 251 states and 303 transitions. Second operand has 15 states, 15 states have (on average 11.933333333333334) internal successors, (179), 15 states have internal predecessors, (179), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:35,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-10 18:18:35,122 INFO L93 Difference]: Finished difference Result 878 states and 1067 transitions. [2022-01-10 18:18:35,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-01-10 18:18:35,123 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 11.933333333333334) internal successors, (179), 15 states have internal predecessors, (179), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 136 [2022-01-10 18:18:35,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-10 18:18:35,123 INFO L225 Difference]: With dead ends: 878 [2022-01-10 18:18:35,123 INFO L226 Difference]: Without dead ends: 0 [2022-01-10 18:18:35,125 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 297 GetRequests, 272 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 90 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=154, Invalid=548, Unknown=0, NotChecked=0, Total=702 [2022-01-10 18:18:35,125 INFO L933 BasicCegarLoop]: 241 mSDtfsCounter, 1512 mSDsluCounter, 1159 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1512 SdHoareTripleChecker+Valid, 1400 SdHoareTripleChecker+Invalid, 194 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-10 18:18:35,125 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1512 Valid, 1400 Invalid, 194 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-10 18:18:35,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-10 18:18:35,126 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-10 18:18:35,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:35,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-10 18:18:35,126 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 136 [2022-01-10 18:18:35,126 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-10 18:18:35,126 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-10 18:18:35,126 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 11.933333333333334) internal successors, (179), 15 states have internal predecessors, (179), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-10 18:18:35,127 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-10 18:18:35,127 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-10 18:18:35,129 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-10 18:18:35,129 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-10 18:18:35,129 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-10 18:18:35,154 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-01-10 18:18:35,343 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-10 18:18:35,345 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-10 18:18:44,507 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-10 18:18:44,507 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-10 18:18:44,508 INFO L854 garLoopResultBuilder]: At program point L84(lines 80 86) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:18:44,508 INFO L854 garLoopResultBuilder]: At program point L77(lines 73 79) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:18:44,508 INFO L854 garLoopResultBuilder]: At program point L92(lines 87 95) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:18:44,508 INFO L858 garLoopResultBuilder]: For program point L186(lines 186 193) no Hoare annotation was computed. [2022-01-10 18:18:44,508 INFO L854 garLoopResultBuilder]: At program point L160(lines 156 162) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:18:44,508 INFO L858 garLoopResultBuilder]: For program point L186-2(lines 186 193) no Hoare annotation was computed. [2022-01-10 18:18:44,508 INFO L854 garLoopResultBuilder]: At program point L682(lines 677 684) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-10 18:18:44,508 INFO L861 garLoopResultBuilder]: At program point L195(lines 176 198) the Hoare annotation is: true [2022-01-10 18:18:44,509 INFO L854 garLoopResultBuilder]: At program point L735-2(lines 735 780) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2)) (.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse7 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse8 (<= 1 ~pumpRunning~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse7 .cse5) (and .cse0 .cse2 .cse3 .cse4 .cse8 .cse5) (and .cse0 .cse6 .cse3 .cse7 .cse8 .cse5) (and .cse9 .cse0 .cse1 .cse3 (<= 1 ~waterLevel~0Int))))) [2022-01-10 18:18:44,509 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-10 18:18:44,509 INFO L854 garLoopResultBuilder]: At program point L781(lines 734 782) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,509 INFO L858 garLoopResultBuilder]: For program point L736(lines 735 780) no Hoare annotation was computed. [2022-01-10 18:18:44,509 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-10 18:18:44,510 INFO L854 garLoopResultBuilder]: At program point L931-2(lines 926 934) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,510 INFO L858 garLoopResultBuilder]: For program point L737(lines 737 741) no Hoare annotation was computed. [2022-01-10 18:18:44,510 INFO L854 garLoopResultBuilder]: At program point L692-1(lines 685 694) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,511 INFO L858 garLoopResultBuilder]: For program point L745(lines 745 751) no Hoare annotation was computed. [2022-01-10 18:18:44,511 INFO L858 garLoopResultBuilder]: For program point L802-3(lines 802 808) no Hoare annotation was computed. [2022-01-10 18:18:44,511 INFO L858 garLoopResultBuilder]: For program point L224(lines 224 228) no Hoare annotation was computed. [2022-01-10 18:18:44,511 INFO L858 garLoopResultBuilder]: For program point L745-2(lines 745 751) no Hoare annotation was computed. [2022-01-10 18:18:44,511 INFO L858 garLoopResultBuilder]: For program point L212-3(lines 212 216) no Hoare annotation was computed. [2022-01-10 18:18:44,511 INFO L858 garLoopResultBuilder]: For program point L802-5(lines 798 820) no Hoare annotation was computed. [2022-01-10 18:18:44,511 INFO L854 garLoopResultBuilder]: At program point L224-2(lines 220 231) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0Int)) (.cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1))) (.cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse7 (= ~pumpRunning~0Int 0)) (.cse4 (<= ~waterLevel~0Int 2)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) .cse6 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse4 .cse5 (<= 2 ~waterLevel~0Int)))) [2022-01-10 18:18:44,511 INFO L858 garLoopResultBuilder]: For program point L755(lines 755 761) no Hoare annotation was computed. [2022-01-10 18:18:44,511 INFO L854 garLoopResultBuilder]: At program point L212-5(lines 208 219) the Hoare annotation is: false [2022-01-10 18:18:44,512 INFO L858 garLoopResultBuilder]: For program point L860-2(lines 860 877) no Hoare annotation was computed. [2022-01-10 18:18:44,512 INFO L858 garLoopResultBuilder]: For program point L809-3(lines 809 815) no Hoare annotation was computed. [2022-01-10 18:18:44,512 INFO L858 garLoopResultBuilder]: For program point L236(lines 236 240) no Hoare annotation was computed. [2022-01-10 18:18:44,512 INFO L858 garLoopResultBuilder]: For program point L755-2(lines 755 761) no Hoare annotation was computed. [2022-01-10 18:18:44,512 INFO L854 garLoopResultBuilder]: At program point L304-1(lines 299 307) the Hoare annotation is: false [2022-01-10 18:18:44,512 INFO L858 garLoopResultBuilder]: For program point L834-6(lines 834 851) no Hoare annotation was computed. [2022-01-10 18:18:44,512 INFO L854 garLoopResultBuilder]: At program point L281-1(lines 276 284) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,512 INFO L854 garLoopResultBuilder]: At program point L236-2(lines 232 243) the Hoare annotation is: (let ((.cse8 (<= ~waterLevel~0Int 1))) (let ((.cse5 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse6 (or .cse8 (<= 4294967297 ~waterLevel~0Int))) (.cse3 (<= 1 ~pumpRunning~0Int)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse6 .cse7) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) .cse3 .cse7) (and .cse0 .cse5 .cse2 .cse6 .cse3 .cse7) (and .cse8 .cse0 .cse4 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse4 .cse1 .cse2 (<= 2 ~waterLevel~0Int))))) [2022-01-10 18:18:44,512 INFO L858 garLoopResultBuilder]: For program point L765(lines 765 776) no Hoare annotation was computed. [2022-01-10 18:18:44,512 INFO L858 garLoopResultBuilder]: For program point L999-3(lines 999 1003) no Hoare annotation was computed. [2022-01-10 18:18:44,512 INFO L858 garLoopResultBuilder]: For program point L289-3(lines 289 295) no Hoare annotation was computed. [2022-01-10 18:18:44,513 INFO L854 garLoopResultBuilder]: At program point L826-7(lines 822 828) the Hoare annotation is: false [2022-01-10 18:18:44,514 INFO L858 garLoopResultBuilder]: For program point L703-2(lines 703 720) no Hoare annotation was computed. [2022-01-10 18:18:44,514 INFO L858 garLoopResultBuilder]: For program point L771-2(lines 765 776) no Hoare annotation was computed. [2022-01-10 18:18:44,514 INFO L858 garLoopResultBuilder]: For program point L771(lines 771 775) no Hoare annotation was computed. [2022-01-10 18:18:44,514 INFO L858 garLoopResultBuilder]: For program point L999-5(lines 999 1003) no Hoare annotation was computed. [2022-01-10 18:18:44,514 INFO L854 garLoopResultBuilder]: At program point L294-3(lines 285 298) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,514 INFO L854 garLoopResultBuilder]: At program point L834-7(lines 830 854) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,514 INFO L854 garLoopResultBuilder]: At program point L931-3(lines 926 934) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,515 INFO L854 garLoopResultBuilder]: At program point L703-3(lines 695 723) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,515 INFO L854 garLoopResultBuilder]: At program point L931(lines 926 934) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse5 (<= 1 ~pumpRunning~0Int)) (.cse3 (<= ~waterLevel~0Int 2)) (.cse12 (<= 2 ~waterLevel~0Int)) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse11 (= ~pumpRunning~0Int 0)) (.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse8 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and .cse0 .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse4 .cse7 .cse5 .cse8) (and .cse9 .cse10 .cse1 .cse11 .cse2 .cse4) (and .cse0 .cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 .cse4 .cse12 .cse5 .cse8) (and .cse10 .cse1 .cse11 .cse3 .cse4 .cse12) (and .cse10 .cse1 .cse11 .cse6 .cse4 .cse7 .cse8)))) [2022-01-10 18:18:44,515 INFO L854 garLoopResultBuilder]: At program point L1005-1(lines 990 1008) the Hoare annotation is: false [2022-01-10 18:18:44,515 INFO L858 garLoopResultBuilder]: For program point L980-9(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,515 INFO L854 garLoopResultBuilder]: At program point L860-3(lines 856 880) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,515 INFO L858 garLoopResultBuilder]: For program point L707-2(lines 707 717) no Hoare annotation was computed. [2022-01-10 18:18:44,515 INFO L854 garLoopResultBuilder]: At program point L819-1(lines 795 821) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,516 INFO L854 garLoopResultBuilder]: At program point L692(lines 685 694) the Hoare annotation is: (let ((.cse10 (<= ~waterLevel~0Int 1))) (let ((.cse8 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse9 (<= ~waterLevel~0Int 2)) (.cse13 (<= 2 ~waterLevel~0Int)) (.cse5 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse6 (<= 1 ~pumpRunning~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse12 (= ~pumpRunning~0Int 0)) (.cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (or .cse10 (<= 4294967297 ~waterLevel~0Int))) (.cse7 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse8 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse9 .cse3 .cse5 .cse6) (and .cse10 .cse11 .cse1 .cse12 .cse8 .cse3) (and .cse11 .cse1 .cse12 .cse9 .cse3 .cse13) (and .cse0 .cse1 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse9 .cse3 .cse13 .cse5 .cse6 .cse7) (and .cse11 .cse1 .cse12 .cse2 .cse3 .cse4 .cse7)))) [2022-01-10 18:18:44,516 INFO L858 garLoopResultBuilder]: For program point L864-3(lines 864 872) no Hoare annotation was computed. [2022-01-10 18:18:44,517 INFO L858 garLoopResultBuilder]: For program point L980-11(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,517 INFO L858 garLoopResultBuilder]: For program point L708-3(lines 708 714) no Hoare annotation was computed. [2022-01-10 18:18:44,517 INFO L854 garLoopResultBuilder]: At program point L109-2(lines 109 123) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,517 INFO L858 garLoopResultBuilder]: For program point L802(lines 802 808) no Hoare annotation was computed. [2022-01-10 18:18:44,518 INFO L854 garLoopResultBuilder]: At program point L912-1(lines 907 914) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:44,518 INFO L858 garLoopResultBuilder]: For program point L834-4(lines 834 851) no Hoare annotation was computed. [2022-01-10 18:18:44,519 INFO L854 garLoopResultBuilder]: At program point L986-3(lines 971 989) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~9#1Int|)) [2022-01-10 18:18:44,519 INFO L858 garLoopResultBuilder]: For program point L54-1(line 54) no Hoare annotation was computed. [2022-01-10 18:18:44,519 INFO L861 garLoopResultBuilder]: At program point L124(lines 99 128) the Hoare annotation is: true [2022-01-10 18:18:44,519 INFO L858 garLoopResultBuilder]: For program point L110(line 110) no Hoare annotation was computed. [2022-01-10 18:18:44,519 INFO L858 garLoopResultBuilder]: For program point L212(lines 212 216) no Hoare annotation was computed. [2022-01-10 18:18:44,519 INFO L858 garLoopResultBuilder]: For program point L802-2(lines 798 820) no Hoare annotation was computed. [2022-01-10 18:18:44,519 INFO L858 garLoopResultBuilder]: For program point L289-2(lines 289 295) no Hoare annotation was computed. [2022-01-10 18:18:44,519 INFO L854 garLoopResultBuilder]: At program point L826-5(lines 822 828) the Hoare annotation is: false [2022-01-10 18:18:44,519 INFO L858 garLoopResultBuilder]: For program point L838-9(lines 838 846) no Hoare annotation was computed. [2022-01-10 18:18:44,520 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-01-10 18:18:44,520 INFO L854 garLoopResultBuilder]: At program point L55-1(lines 50 57) the Hoare annotation is: false [2022-01-10 18:18:44,520 INFO L861 garLoopResultBuilder]: At program point L786(lines 725 788) the Hoare annotation is: true [2022-01-10 18:18:44,520 INFO L858 garLoopResultBuilder]: For program point L113(lines 113 117) no Hoare annotation was computed. [2022-01-10 18:18:44,520 INFO L854 garLoopResultBuilder]: At program point L212-2(lines 208 219) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse0 (<= ~waterLevel~0Int 1)) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) .cse4 .cse5) (and .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse3 (or .cse0 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5))) [2022-01-10 18:18:44,520 INFO L858 garLoopResultBuilder]: For program point L860(lines 860 877) no Hoare annotation was computed. [2022-01-10 18:18:44,520 INFO L858 garLoopResultBuilder]: For program point L809-1(lines 809 815) no Hoare annotation was computed. [2022-01-10 18:18:44,520 INFO L854 garLoopResultBuilder]: At program point L294-2(lines 285 298) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:44,520 INFO L854 garLoopResultBuilder]: At program point L834-5(lines 830 854) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:44,520 INFO L854 garLoopResultBuilder]: At program point L249-3(lines 244 252) the Hoare annotation is: false [2022-01-10 18:18:44,521 INFO L854 garLoopResultBuilder]: At program point L826-6(lines 822 828) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,521 INFO L861 garLoopResultBuilder]: At program point L173(lines 165 175) the Hoare annotation is: true [2022-01-10 18:18:44,521 INFO L858 garLoopResultBuilder]: For program point L113-1(lines 113 117) no Hoare annotation was computed. [2022-01-10 18:18:44,521 INFO L854 garLoopResultBuilder]: At program point L304(lines 299 307) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse0 (<= ~waterLevel~0Int 1)) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 1 ~waterLevel~0Int) .cse4 .cse5) (and .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse3 (or .cse0 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5))) [2022-01-10 18:18:44,521 INFO L858 garLoopResultBuilder]: For program point L834-2(lines 834 851) no Hoare annotation was computed. [2022-01-10 18:18:44,521 INFO L854 garLoopResultBuilder]: At program point L281(lines 276 284) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse6 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 (<= ~waterLevel~0Int 2) .cse3 (<= 2 ~waterLevel~0Int)) (and .cse0 .cse2 .cse5 .cse3 .cse6) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 1)) .cse0 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 0) .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0Int) .cse6))) [2022-01-10 18:18:44,522 INFO L858 garLoopResultBuilder]: For program point L980-6(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,522 INFO L854 garLoopResultBuilder]: At program point L922-3(lines 915 925) the Hoare annotation is: false [2022-01-10 18:18:44,522 INFO L854 garLoopResultBuilder]: At program point L931-4(lines 926 934) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,522 INFO L858 garLoopResultBuilder]: For program point L999(lines 999 1003) no Hoare annotation was computed. [2022-01-10 18:18:44,523 INFO L858 garLoopResultBuilder]: For program point L289-1(lines 289 295) no Hoare annotation was computed. [2022-01-10 18:18:44,523 INFO L854 garLoopResultBuilder]: At program point L826-3(lines 822 828) the Hoare annotation is: false [2022-01-10 18:18:44,523 INFO L858 garLoopResultBuilder]: For program point L703(lines 703 720) no Hoare annotation was computed. [2022-01-10 18:18:44,523 INFO L858 garLoopResultBuilder]: For program point L980-8(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,524 INFO L858 garLoopResultBuilder]: For program point L897-9(lines 897 903) no Hoare annotation was computed. [2022-01-10 18:18:44,524 INFO L854 garLoopResultBuilder]: At program point L692-2(lines 685 694) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,524 INFO L858 garLoopResultBuilder]: For program point L999-2(lines 999 1003) no Hoare annotation was computed. [2022-01-10 18:18:44,524 INFO L854 garLoopResultBuilder]: At program point L294-1(lines 285 298) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|)) (.cse4 (<= ~waterLevel~0Int 1)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 (or .cse4 (<= 4294967297 ~waterLevel~0Int)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (and .cse0 .cse4 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0Int)) (and .cse1 .cse2 (<= ~waterLevel~0Int 2) .cse3 (<= 2 ~waterLevel~0Int)))) [2022-01-10 18:18:44,524 INFO L854 garLoopResultBuilder]: At program point L834-3(lines 830 854) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse2) (and .cse0 .cse4 .cse2 .cse5 (<= 1 ~pumpRunning~0Int)) (and .cse0 .cse1 .cse4 .cse2 .cse5))) [2022-01-10 18:18:44,524 INFO L854 garLoopResultBuilder]: At program point L931-1(lines 926 934) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 1)) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 0) .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0Int) (<= 1 ~pumpRunning~0Int) .cse4) (and (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3 .cse4))) [2022-01-10 18:18:44,524 INFO L854 garLoopResultBuilder]: At program point L703-1(lines 695 723) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse8 (<= 1 ~pumpRunning~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse7 .cse5) (and .cse0 .cse2 .cse3 .cse4 .cse8 .cse5) (and .cse0 .cse6 .cse3 .cse7 .cse8 .cse5))) [2022-01-10 18:18:44,525 INFO L854 garLoopResultBuilder]: At program point L986-2(lines 971 989) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) (<= 1 ~waterLevel~0Int) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~9#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:44,525 INFO L854 garLoopResultBuilder]: At program point L897-11(lines 890 906) the Hoare annotation is: false [2022-01-10 18:18:44,525 INFO L854 garLoopResultBuilder]: At program point L886-3(lines 881 888) the Hoare annotation is: false [2022-01-10 18:18:44,525 INFO L858 garLoopResultBuilder]: For program point L802-6(lines 802 808) no Hoare annotation was computed. [2022-01-10 18:18:44,525 INFO L854 garLoopResultBuilder]: At program point L1005(lines 990 1008) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse0 (<= ~waterLevel~0Int 1)) (.cse4 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 1 ~waterLevel~0Int) .cse4 .cse5) (and .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse3 (or .cse0 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5))) [2022-01-10 18:18:44,525 INFO L858 garLoopResultBuilder]: For program point L980-3(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,525 INFO L854 garLoopResultBuilder]: At program point L860-1(lines 856 880) the Hoare annotation is: (let ((.cse13 (<= ~waterLevel~0Int 1))) (let ((.cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1))) (.cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse5 (or .cse13 (<= 4294967297 ~waterLevel~0Int))) (.cse1 (= ~pumpRunning~0Int 0)) (.cse6 (<= ~waterLevel~0Int 2)) (.cse7 (<= 2 ~waterLevel~0Int)) (.cse9 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse11 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse14 (<= 1 ~waterLevel~0Int)) (.cse12 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse8 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse4 .cse7 .cse8) (and .cse9 .cse10 .cse0 .cse2 .cse11 .cse3 .cse4 .cse5 .cse12 .cse8) (and .cse13 .cse0 .cse1 .cse4 .cse14) (and .cse0 .cse1 .cse6 .cse4 .cse7) (and .cse13 .cse9 .cse10 .cse0 .cse11 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) .cse14 .cse12 .cse8)))) [2022-01-10 18:18:44,525 INFO L858 garLoopResultBuilder]: For program point L707(lines 707 717) no Hoare annotation was computed. [2022-01-10 18:18:44,525 INFO L854 garLoopResultBuilder]: At program point L819(lines 795 821) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse8 (<= 1 ~pumpRunning~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse7 .cse5) (and .cse0 .cse2 .cse3 .cse4 .cse8 .cse5) (and .cse0 .cse6 .cse3 .cse7 .cse8 .cse5))) [2022-01-10 18:18:44,525 INFO L858 garLoopResultBuilder]: For program point L838-6(lines 838 846) no Hoare annotation was computed. [2022-01-10 18:18:44,525 INFO L858 garLoopResultBuilder]: For program point L212-6(lines 212 216) no Hoare annotation was computed. [2022-01-10 18:18:44,525 INFO L858 garLoopResultBuilder]: For program point L802-8(lines 798 820) no Hoare annotation was computed. [2022-01-10 18:18:44,525 INFO L858 garLoopResultBuilder]: For program point L864(lines 864 872) no Hoare annotation was computed. [2022-01-10 18:18:44,526 INFO L858 garLoopResultBuilder]: For program point L980-5(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,526 INFO L858 garLoopResultBuilder]: For program point L708(lines 708 714) no Hoare annotation was computed. [2022-01-10 18:18:44,526 INFO L854 garLoopResultBuilder]: At program point L249-2(lines 244 252) the Hoare annotation is: false [2022-01-10 18:18:44,526 INFO L854 garLoopResultBuilder]: At program point L826-4(lines 822 828) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:44,526 INFO L854 garLoopResultBuilder]: At program point L212-8(lines 208 219) the Hoare annotation is: false [2022-01-10 18:18:44,526 INFO L858 garLoopResultBuilder]: For program point L860-4(lines 860 877) no Hoare annotation was computed. [2022-01-10 18:18:44,526 INFO L858 garLoopResultBuilder]: For program point L809-5(lines 809 815) no Hoare annotation was computed. [2022-01-10 18:18:44,526 INFO L854 garLoopResultBuilder]: At program point L912(lines 907 914) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~switchedOnBeforeTS~0Int))) (or (and .cse0 .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse3 (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5) (and .cse4 .cse0 .cse1 .cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) .cse5))) [2022-01-10 18:18:44,527 INFO L858 garLoopResultBuilder]: For program point L834(lines 834 851) no Hoare annotation was computed. [2022-01-10 18:18:44,527 INFO L854 garLoopResultBuilder]: At program point L986-1(lines 971 989) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~9#1Int|))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)) (and .cse1 .cse2 (<= ~waterLevel~0Int 2) .cse4 (<= 2 ~waterLevel~0Int)) (and .cse5 .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int) .cse6))) [2022-01-10 18:18:44,527 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-01-10 18:18:44,528 INFO L854 garLoopResultBuilder]: At program point L922-2(lines 915 925) the Hoare annotation is: false [2022-01-10 18:18:44,528 INFO L854 garLoopResultBuilder]: At program point L304-2(lines 299 307) the Hoare annotation is: false [2022-01-10 18:18:44,528 INFO L858 garLoopResultBuilder]: For program point L834-10(lines 834 851) no Hoare annotation was computed. [2022-01-10 18:18:44,528 INFO L854 garLoopResultBuilder]: At program point L281-2(lines 276 284) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,528 INFO L858 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2022-01-10 18:18:44,528 INFO L854 garLoopResultBuilder]: At program point L826-1(lines 822 828) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 1))) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse7 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6 .cse7) (and .cse5 .cse0 .cse1 .cse2 .cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 1 ~waterLevel~0Int) .cse6 .cse7))) [2022-01-10 18:18:44,528 INFO L858 garLoopResultBuilder]: For program point L838-3(lines 838 846) no Hoare annotation was computed. [2022-01-10 18:18:44,528 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-01-10 18:18:44,528 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: false [2022-01-10 18:18:44,528 INFO L858 garLoopResultBuilder]: For program point L897-6(lines 897 903) no Hoare annotation was computed. [2022-01-10 18:18:44,528 INFO L858 garLoopResultBuilder]: For program point L999-6(lines 999 1003) no Hoare annotation was computed. [2022-01-10 18:18:44,529 INFO L858 garLoopResultBuilder]: For program point L289-5(lines 289 295) no Hoare annotation was computed. [2022-01-10 18:18:44,529 INFO L854 garLoopResultBuilder]: At program point L826-11(lines 822 828) the Hoare annotation is: false [2022-01-10 18:18:44,529 INFO L858 garLoopResultBuilder]: For program point L703-4(lines 703 720) no Hoare annotation was computed. [2022-01-10 18:18:44,529 INFO L854 garLoopResultBuilder]: At program point L294(lines 285 298) the Hoare annotation is: false [2022-01-10 18:18:44,529 INFO L854 garLoopResultBuilder]: At program point L834-1(lines 830 854) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 1))) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int| 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse7 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 1)) .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6 .cse7) (and .cse5 .cse0 .cse1 .cse2 .cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 1 ~waterLevel~0Int) .cse6 .cse7))) [2022-01-10 18:18:44,529 INFO L854 garLoopResultBuilder]: At program point L249-1(lines 244 252) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 2 ~waterLevel~0Int)) [2022-01-10 18:18:44,531 INFO L854 garLoopResultBuilder]: At program point L826-2(lines 822 828) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1))) (.cse3 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse1 (<= ~waterLevel~0Int 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse5) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0Int 2) .cse5 (<= 2 ~waterLevel~0Int)) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse5 (or .cse1 (<= 4294967297 ~waterLevel~0Int)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| ~waterLevel~0Int)))) [2022-01-10 18:18:44,531 INFO L854 garLoopResultBuilder]: At program point L897-8(lines 890 906) the Hoare annotation is: false [2022-01-10 18:18:44,531 INFO L854 garLoopResultBuilder]: At program point L886-2(lines 881 888) the Hoare annotation is: false [2022-01-10 18:18:44,531 INFO L858 garLoopResultBuilder]: For program point L999-8(lines 999 1003) no Hoare annotation was computed. [2022-01-10 18:18:44,531 INFO L854 garLoopResultBuilder]: At program point L294-5(lines 285 298) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,531 INFO L854 garLoopResultBuilder]: At program point L834-11(lines 830 854) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,531 INFO L854 garLoopResultBuilder]: At program point L931-5(lines 926 934) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,531 INFO L854 garLoopResultBuilder]: At program point L703-5(lines 695 723) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,531 INFO L858 garLoopResultBuilder]: For program point L980(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,532 INFO L854 garLoopResultBuilder]: At program point L922-1(lines 915 925) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 2 ~waterLevel~0Int)) [2022-01-10 18:18:44,532 INFO L854 garLoopResultBuilder]: At program point L1005-2(lines 990 1008) the Hoare annotation is: false [2022-01-10 18:18:44,532 INFO L858 garLoopResultBuilder]: For program point L980-15(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,532 INFO L854 garLoopResultBuilder]: At program point L860-5(lines 856 880) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,533 INFO L858 garLoopResultBuilder]: For program point L707-4(lines 707 717) no Hoare annotation was computed. [2022-01-10 18:18:44,533 INFO L854 garLoopResultBuilder]: At program point L819-2(lines 795 821) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,533 INFO L858 garLoopResultBuilder]: For program point L980-2(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,533 INFO L858 garLoopResultBuilder]: For program point L897-3(lines 897 903) no Hoare annotation was computed. [2022-01-10 18:18:44,533 INFO L858 garLoopResultBuilder]: For program point L864-6(lines 864 872) no Hoare annotation was computed. [2022-01-10 18:18:44,533 INFO L858 garLoopResultBuilder]: For program point L980-17(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,533 INFO L858 garLoopResultBuilder]: For program point L708-6(lines 708 714) no Hoare annotation was computed. [2022-01-10 18:18:44,533 INFO L854 garLoopResultBuilder]: At program point L986(lines 971 989) the Hoare annotation is: false [2022-01-10 18:18:44,533 INFO L854 garLoopResultBuilder]: At program point L897-5(lines 890 906) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= 2 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~pumpRunning~0Int)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-10 18:18:44,533 INFO L854 garLoopResultBuilder]: At program point L886-1(lines 881 888) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~waterLevel~0Int 2) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 2 ~waterLevel~0Int) (<= 1 ~pumpRunning~0Int)) [2022-01-10 18:18:44,534 INFO L854 garLoopResultBuilder]: At program point L912-2(lines 907 914) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:44,534 INFO L858 garLoopResultBuilder]: For program point L834-8(lines 834 851) no Hoare annotation was computed. [2022-01-10 18:18:44,534 INFO L854 garLoopResultBuilder]: At program point L986-5(lines 971 989) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~9#1Int|)) [2022-01-10 18:18:44,534 INFO L858 garLoopResultBuilder]: For program point L54-2(line 54) no Hoare annotation was computed. [2022-01-10 18:18:44,534 INFO L858 garLoopResultBuilder]: For program point L838(lines 838 846) no Hoare annotation was computed. [2022-01-10 18:18:44,534 INFO L858 garLoopResultBuilder]: For program point L289-4(lines 289 295) no Hoare annotation was computed. [2022-01-10 18:18:44,534 INFO L854 garLoopResultBuilder]: At program point L826-9(lines 822 828) the Hoare annotation is: false [2022-01-10 18:18:44,534 INFO L858 garLoopResultBuilder]: For program point L838-15(lines 838 846) no Hoare annotation was computed. [2022-01-10 18:18:44,534 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-01-10 18:18:44,534 INFO L854 garLoopResultBuilder]: At program point L55-2(lines 50 57) the Hoare annotation is: false [2022-01-10 18:18:44,534 INFO L854 garLoopResultBuilder]: At program point L249(lines 244 252) the Hoare annotation is: false [2022-01-10 18:18:44,535 INFO L854 garLoopResultBuilder]: At program point L826(lines 822 828) the Hoare annotation is: false [2022-01-10 18:18:44,535 INFO L854 garLoopResultBuilder]: At program point L294-4(lines 285 298) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:44,535 INFO L854 garLoopResultBuilder]: At program point L834-9(lines 830 854) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:44,535 INFO L854 garLoopResultBuilder]: At program point L249-5(lines 244 252) the Hoare annotation is: false [2022-01-10 18:18:44,535 INFO L854 garLoopResultBuilder]: At program point L826-10(lines 822 828) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (not (<= (+ (div ~waterLevel~0Int 2147483648) 1) 0)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-10 18:18:44,535 INFO L854 garLoopResultBuilder]: At program point L922(lines 915 925) the Hoare annotation is: false [2022-01-10 18:18:44,535 INFO L858 garLoopResultBuilder]: For program point L980-12(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,535 INFO L854 garLoopResultBuilder]: At program point L922-5(lines 915 925) the Hoare annotation is: false [2022-01-10 18:18:44,535 INFO L858 garLoopResultBuilder]: For program point L897(lines 897 903) no Hoare annotation was computed. [2022-01-10 18:18:44,535 INFO L858 garLoopResultBuilder]: For program point L980-14(lines 980 984) no Hoare annotation was computed. [2022-01-10 18:18:44,535 INFO L858 garLoopResultBuilder]: For program point L897-15(lines 897 903) no Hoare annotation was computed. [2022-01-10 18:18:44,535 INFO L854 garLoopResultBuilder]: At program point L897-2(lines 890 906) the Hoare annotation is: false [2022-01-10 18:18:44,536 INFO L854 garLoopResultBuilder]: At program point L886(lines 881 888) the Hoare annotation is: false [2022-01-10 18:18:44,536 INFO L854 garLoopResultBuilder]: At program point L986-4(lines 971 989) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) (<= 1 ~waterLevel~0Int) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~9#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:44,536 INFO L854 garLoopResultBuilder]: At program point L897-17(lines 890 906) the Hoare annotation is: false [2022-01-10 18:18:44,536 INFO L854 garLoopResultBuilder]: At program point L886-5(lines 881 888) the Hoare annotation is: false [2022-01-10 18:18:44,536 INFO L858 garLoopResultBuilder]: For program point L838-12(lines 838 846) no Hoare annotation was computed. [2022-01-10 18:18:44,536 INFO L854 garLoopResultBuilder]: At program point L249-4(lines 244 252) the Hoare annotation is: false [2022-01-10 18:18:44,536 INFO L854 garLoopResultBuilder]: At program point L826-8(lines 822 828) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (<= ~waterLevel~0Int 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int| 2) (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~4#1Int|) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) [2022-01-10 18:18:44,536 INFO L854 garLoopResultBuilder]: At program point L922-4(lines 915 925) the Hoare annotation is: false [2022-01-10 18:18:44,536 INFO L858 garLoopResultBuilder]: For program point L897-12(lines 897 903) no Hoare annotation was computed. [2022-01-10 18:18:44,536 INFO L854 garLoopResultBuilder]: At program point L897-14(lines 890 906) the Hoare annotation is: false [2022-01-10 18:18:44,536 INFO L854 garLoopResultBuilder]: At program point L886-4(lines 881 888) the Hoare annotation is: false [2022-01-10 18:18:44,539 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-10 18:18:44,540 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-10 18:18:44,707 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 10.01 06:18:44 BasicIcfg [2022-01-10 18:18:44,708 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-10 18:18:44,708 INFO L158 Benchmark]: Toolchain (without parser) took 16380.93ms. Allocated memory was 187.7MB in the beginning and 672.1MB in the end (delta: 484.4MB). Free memory was 130.1MB in the beginning and 355.3MB in the end (delta: -225.2MB). Peak memory consumption was 386.4MB. Max. memory is 8.0GB. [2022-01-10 18:18:44,708 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 187.7MB. Free memory is still 147.2MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-10 18:18:44,709 INFO L158 Benchmark]: CACSL2BoogieTranslator took 486.60ms. Allocated memory was 187.7MB in the beginning and 292.6MB in the end (delta: 104.9MB). Free memory was 129.8MB in the beginning and 247.8MB in the end (delta: -118.0MB). Peak memory consumption was 8.3MB. Max. memory is 8.0GB. [2022-01-10 18:18:44,709 INFO L158 Benchmark]: Boogie Procedure Inliner took 64.53ms. Allocated memory is still 292.6MB. Free memory was 247.3MB in the beginning and 243.1MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2022-01-10 18:18:44,709 INFO L158 Benchmark]: Boogie Preprocessor took 47.66ms. Allocated memory is still 292.6MB. Free memory was 243.1MB in the beginning and 240.5MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-10 18:18:44,709 INFO L158 Benchmark]: RCFGBuilder took 662.63ms. Allocated memory is still 292.6MB. Free memory was 240.5MB in the beginning and 213.2MB in the end (delta: 27.3MB). Peak memory consumption was 27.3MB. Max. memory is 8.0GB. [2022-01-10 18:18:44,710 INFO L158 Benchmark]: IcfgTransformer took 259.20ms. Allocated memory is still 292.6MB. Free memory was 213.2MB in the beginning and 202.8MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. [2022-01-10 18:18:44,710 INFO L158 Benchmark]: TraceAbstraction took 14853.14ms. Allocated memory was 292.6MB in the beginning and 672.1MB in the end (delta: 379.6MB). Free memory was 202.2MB in the beginning and 355.3MB in the end (delta: -153.1MB). Peak memory consumption was 353.9MB. Max. memory is 8.0GB. [2022-01-10 18:18:44,712 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 187.7MB. Free memory is still 147.2MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 486.60ms. Allocated memory was 187.7MB in the beginning and 292.6MB in the end (delta: 104.9MB). Free memory was 129.8MB in the beginning and 247.8MB in the end (delta: -118.0MB). Peak memory consumption was 8.3MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 64.53ms. Allocated memory is still 292.6MB. Free memory was 247.3MB in the beginning and 243.1MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 47.66ms. Allocated memory is still 292.6MB. Free memory was 243.1MB in the beginning and 240.5MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 662.63ms. Allocated memory is still 292.6MB. Free memory was 240.5MB in the beginning and 213.2MB in the end (delta: 27.3MB). Peak memory consumption was 27.3MB. Max. memory is 8.0GB. * IcfgTransformer took 259.20ms. Allocated memory is still 292.6MB. Free memory was 213.2MB in the beginning and 202.8MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. * TraceAbstraction took 14853.14ms. Allocated memory was 292.6MB in the beginning and 672.1MB in the end (delta: 379.6MB). Free memory was 202.2MB in the beginning and 355.3MB in the end (delta: -153.1MB). Peak memory consumption was 353.9MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 199 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 14.6s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4773 SdHoareTripleChecker+Valid, 0.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4773 mSDsluCounter, 8225 SdHoareTripleChecker+Invalid, 0.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5273 mSDsCounter, 225 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 714 IncrementalHoareTripleChecker+Invalid, 939 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 225 mSolverCounterUnsat, 2952 mSDtfsCounter, 714 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 509 GetRequests, 444 SyntacticMatches, 1 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 105 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=578occurred in iteration=8, InterpolantAutomatonStates: 72, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 1508 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 104 LocationsWithAnnotation, 104 PreInvPairs, 450 NumberOfFragments, 3317 HoareAnnotationTreeSize, 104 FomulaSimplifications, 17224 FormulaSimplificationTreeSizeReduction, 3.7s HoareSimplificationTime, 104 FomulaSimplificationsInter, 253748 FormulaSimplificationTreeSizeReductionInter, 5.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 886 NumberOfCodeBlocks, 886 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 1081 ConstructedInterpolants, 0 QuantifiedInterpolants, 2633 SizeOfPredicates, 9 NumberOfNonLiveVariables, 1585 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 16 InterpolantComputations, 10 PerfectInterpolantSequences, 574/592 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning) - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || (((((((~bvule32(1bv32, pumpRunning) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32))) || ((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 795]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: ((((((((~bvule32(tmp, 0bv32) && ~bvule32(tmp, 2bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) || ((((~bvule32(1bv32, pumpRunning) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((2bv32 == \result && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: ((((((~bvule32(tmp, 2bv32) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 685]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 990]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 685]: Loop Invariant Derived loop invariant: (((((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result)) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32))) || ((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32))) || ((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: ((((((~bvule32(tmp, 2bv32) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: (((((((((~bvule32(tmp___0, 0bv32) && ~bvule32(tmp, 2bv32)) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp) - InvariantResult [Line: 685]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: (((((((tmp == 2bv32 && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((tmp == 2bv32 && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 795]: Loop Invariant Derived loop invariant: (((((((tmp == 2bv32 && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((tmp == 2bv32 && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 2bv32) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) || ((((((((((tmp == 2bv32 && ~bvule32(1bv32, switchedOnBeforeTS)) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, waterLevel)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 990]: Loop Invariant Derived loop invariant: ((((((((tmp == 2bv32 && ~bvule32(1bv32, switchedOnBeforeTS)) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: ((((((((~bvule32(tmp, 0bv32) && ~bvule32(tmp, 2bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 232]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result)) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((tmp == 2bv32 && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) || ((((((((((tmp == 2bv32 && ~bvule32(1bv32, switchedOnBeforeTS)) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, waterLevel)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: ((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: ((((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) || ((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning)) || ((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 990]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 2bv32) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: ((((((~bvule32(tmp, 2bv32) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 99]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((((~bvule32(tmp___0, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp))) || ((((((((~bvule32(tmp___0, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32) - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(1bv32, \result)) && waterLevel == \result) && 0bv32 == pumpRunning) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 156]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 220]: Loop Invariant Derived loop invariant: ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((((~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && ~bvule32(waterLevel, 2bv32))) || (((((tmp == 2bv32 && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: ((((((((tmp == 2bv32 && ~bvule32(1bv32, switchedOnBeforeTS)) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: ((((((~bvule32(tmp, 2bv32) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && 0bv32 == pumpRunning - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: (((((((((~bvule32(tmp___0, 0bv32) && ~bvule32(tmp, 2bv32)) && ~bvule32(\result, 2bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(2bv32, \result)) && ~bvult64(1bv32, tmp)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp) - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32)))) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((((((tmp == 2bv32 && ~bvule32(1bv32, switchedOnBeforeTS)) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, waterLevel)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32))) || ((((((~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 795]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 87]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((~bvule32(\result, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, switchedOnBeforeTS) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && 0bv32 == pumpRunning) || ((((((((tmp == 2bv32 && ~bvule32(1bv32, switchedOnBeforeTS)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && 0bv32 == pumpRunning) - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: ((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: ((((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning) || (((((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, \result)) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) - InvariantResult [Line: 735]: Loop Invariant Derived loop invariant: (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((tmp == 2bv32 && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result)) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && waterLevel == tmp) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && 0bv32 == pumpRunning)) || (((((tmp == 2bv32 && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 2bv32)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && !~bvule2(~bvadd16(~zero_extendFrom1To2(waterLevel[31:31]), 1bv2), 0bv2) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: ((((((((tmp == 2bv32 && ~bvule32(1bv32, switchedOnBeforeTS)) && ~bvule32(1bv32, pumpRunning)) && 2bv32 == \result) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) || (((((((~bvule32(1bv32, switchedOnBeforeTS) && ~bvule32(1bv32, pumpRunning)) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2022-01-10 18:18:44,828 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...