/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec1_product60.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-11 00:03:32,803 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-11 00:03:32,805 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-11 00:03:32,873 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-11 00:03:32,873 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-11 00:03:32,876 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-11 00:03:32,877 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-11 00:03:32,879 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-11 00:03:32,881 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-11 00:03:32,884 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-11 00:03:32,884 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-11 00:03:32,885 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-11 00:03:32,886 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-11 00:03:32,887 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-11 00:03:32,888 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-11 00:03:32,890 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-11 00:03:32,891 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-11 00:03:32,892 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-11 00:03:32,893 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-11 00:03:32,900 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-11 00:03:32,901 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-11 00:03:32,902 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-11 00:03:32,902 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-11 00:03:32,903 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-11 00:03:32,904 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-11 00:03:32,904 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-11 00:03:32,905 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-11 00:03:32,905 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-11 00:03:32,905 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-11 00:03:32,906 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-11 00:03:32,906 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-11 00:03:32,906 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-11 00:03:32,907 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-11 00:03:32,907 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-11 00:03:32,908 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-11 00:03:32,908 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-11 00:03:32,908 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-11 00:03:32,909 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-11 00:03:32,909 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-11 00:03:32,909 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-11 00:03:32,910 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-11 00:03:32,913 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf [2022-01-11 00:03:32,936 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-11 00:03:32,936 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-11 00:03:32,936 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-11 00:03:32,937 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-11 00:03:32,937 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-11 00:03:32,938 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-11 00:03:32,938 INFO L138 SettingsManager]: * Use SBE=true [2022-01-11 00:03:32,938 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-11 00:03:32,938 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-11 00:03:32,938 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-11 00:03:32,939 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-11 00:03:32,939 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-11 00:03:32,939 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-11 00:03:32,939 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-11 00:03:32,939 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-11 00:03:32,939 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-11 00:03:32,939 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-11 00:03:32,939 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-11 00:03:32,939 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-11 00:03:32,940 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-11 00:03:32,940 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-11 00:03:32,941 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:03:32,941 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-11 00:03:32,941 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-11 00:03:32,941 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-11 00:03:32,941 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-11 00:03:32,941 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-11 00:03:32,941 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-11 00:03:32,941 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-11 00:03:32,941 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-11 00:03:32,942 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-11 00:03:32,942 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-11 00:03:32,942 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-11 00:03:32,942 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_NONE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-11 00:03:33,138 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-11 00:03:33,158 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-11 00:03:33,160 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-11 00:03:33,161 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-11 00:03:33,161 INFO L275 PluginConnector]: CDTParser initialized [2022-01-11 00:03:33,162 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec1_product60.cil.c [2022-01-11 00:03:33,222 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3a4c76b74/4fb354b0a47c4bde892f6741fe132346/FLAGff72b6823 [2022-01-11 00:03:33,544 INFO L306 CDTParser]: Found 1 translation units. [2022-01-11 00:03:33,544 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec1_product60.cil.c [2022-01-11 00:03:33,555 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3a4c76b74/4fb354b0a47c4bde892f6741fe132346/FLAGff72b6823 [2022-01-11 00:03:33,982 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/3a4c76b74/4fb354b0a47c4bde892f6741fe132346 [2022-01-11 00:03:33,984 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-11 00:03:33,985 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-11 00:03:33,987 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-11 00:03:33,988 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-11 00:03:33,990 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-11 00:03:33,990 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:03:33" (1/1) ... [2022-01-11 00:03:33,991 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5ed80da7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:33, skipping insertion in model container [2022-01-11 00:03:33,991 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:03:33" (1/1) ... [2022-01-11 00:03:33,996 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-11 00:03:34,020 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:03:34,272 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2022-01-11 00:03:34,296 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:03:34,309 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-11 00:03:34,315 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:03:34,362 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2022-01-11 00:03:34,371 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:03:34,375 INFO L203 MainTranslator]: Completed pre-run [2022-01-11 00:03:34,419 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2022-01-11 00:03:34,428 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:03:34,450 INFO L208 MainTranslator]: Completed translation [2022-01-11 00:03:34,451 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34 WrapperNode [2022-01-11 00:03:34,451 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-11 00:03:34,452 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-11 00:03:34,452 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-11 00:03:34,452 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-11 00:03:34,465 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34" (1/1) ... [2022-01-11 00:03:34,493 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34" (1/1) ... [2022-01-11 00:03:34,537 INFO L137 Inliner]: procedures = 60, calls = 159, calls flagged for inlining = 56, calls inlined = 98, statements flattened = 735 [2022-01-11 00:03:34,537 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-11 00:03:34,538 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-11 00:03:34,538 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-11 00:03:34,538 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-11 00:03:34,546 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34" (1/1) ... [2022-01-11 00:03:34,547 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34" (1/1) ... [2022-01-11 00:03:34,561 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34" (1/1) ... [2022-01-11 00:03:34,561 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34" (1/1) ... [2022-01-11 00:03:34,569 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34" (1/1) ... [2022-01-11 00:03:34,589 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34" (1/1) ... [2022-01-11 00:03:34,591 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34" (1/1) ... [2022-01-11 00:03:34,593 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-11 00:03:34,594 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-11 00:03:34,594 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-11 00:03:34,594 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-11 00:03:34,607 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34" (1/1) ... [2022-01-11 00:03:34,623 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:03:34,635 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 00:03:34,697 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-11 00:03:34,717 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-11 00:03:34,741 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-11 00:03:34,741 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-11 00:03:34,741 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-11 00:03:34,742 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-11 00:03:34,818 INFO L234 CfgBuilder]: Building ICFG [2022-01-11 00:03:34,819 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-11 00:03:35,196 INFO L275 CfgBuilder]: Performing block encoding [2022-01-11 00:03:35,202 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-11 00:03:35,202 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-11 00:03:35,204 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:03:35 BoogieIcfgContainer [2022-01-11 00:03:35,204 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-11 00:03:35,204 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-11 00:03:35,205 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-11 00:03:35,205 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-11 00:03:35,207 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:03:35" (1/1) ... [2022-01-11 00:03:35,331 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:03:35 BasicIcfg [2022-01-11 00:03:35,331 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-11 00:03:35,332 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-11 00:03:35,332 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-11 00:03:35,334 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-11 00:03:35,334 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.01 12:03:33" (1/4) ... [2022-01-11 00:03:35,335 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@468bfd8f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:03:35, skipping insertion in model container [2022-01-11 00:03:35,335 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:03:34" (2/4) ... [2022-01-11 00:03:35,335 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@468bfd8f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:03:35, skipping insertion in model container [2022-01-11 00:03:35,335 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:03:35" (3/4) ... [2022-01-11 00:03:35,335 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@468bfd8f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:03:35, skipping insertion in model container [2022-01-11 00:03:35,335 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:03:35" (4/4) ... [2022-01-11 00:03:35,336 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product60.cil.cTransformedIcfg [2022-01-11 00:03:35,339 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-11 00:03:35,339 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-11 00:03:35,374 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-11 00:03:35,378 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-11 00:03:35,378 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-11 00:03:35,404 INFO L276 IsEmpty]: Start isEmpty. Operand has 194 states, 190 states have (on average 1.3736842105263158) internal successors, (261), 193 states have internal predecessors, (261), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:35,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-01-11 00:03:35,409 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:03:35,409 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:35,409 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:03:35,417 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:03:35,417 INFO L85 PathProgramCache]: Analyzing trace with hash -1837635525, now seen corresponding path program 1 times [2022-01-11 00:03:35,423 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:03:35,423 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [3068602] [2022-01-11 00:03:35,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:35,424 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:03:35,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:35,645 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:03:35,646 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:03:35,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [3068602] [2022-01-11 00:03:35,647 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [3068602] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:03:35,647 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:03:35,647 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:03:35,648 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1579542115] [2022-01-11 00:03:35,649 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:03:35,652 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-11 00:03:35,652 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:03:35,674 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-11 00:03:35,674 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:03:35,678 INFO L87 Difference]: Start difference. First operand has 194 states, 190 states have (on average 1.3736842105263158) internal successors, (261), 193 states have internal predecessors, (261), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:35,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:03:35,725 INFO L93 Difference]: Finished difference Result 378 states and 511 transitions. [2022-01-11 00:03:35,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-11 00:03:35,729 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-01-11 00:03:35,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:03:35,737 INFO L225 Difference]: With dead ends: 378 [2022-01-11 00:03:35,737 INFO L226 Difference]: Without dead ends: 184 [2022-01-11 00:03:35,740 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:03:35,742 INFO L933 BasicCegarLoop]: 251 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 251 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:03:35,743 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 251 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:03:35,756 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-01-11 00:03:35,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 184. [2022-01-11 00:03:35,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 181 states have (on average 1.3425414364640884) internal successors, (243), 183 states have internal predecessors, (243), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:35,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 243 transitions. [2022-01-11 00:03:35,789 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 243 transitions. Word has length 17 [2022-01-11 00:03:35,789 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:03:35,790 INFO L470 AbstractCegarLoop]: Abstraction has 184 states and 243 transitions. [2022-01-11 00:03:35,790 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:35,791 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 243 transitions. [2022-01-11 00:03:35,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-01-11 00:03:35,792 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:03:35,792 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:35,792 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-11 00:03:35,792 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:03:35,794 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:03:35,794 INFO L85 PathProgramCache]: Analyzing trace with hash -1739885309, now seen corresponding path program 1 times [2022-01-11 00:03:35,794 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:03:35,794 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1271751342] [2022-01-11 00:03:35,795 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:35,795 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:03:35,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:35,887 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:03:35,888 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:03:35,888 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1271751342] [2022-01-11 00:03:35,888 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1271751342] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:03:35,888 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:03:35,888 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:03:35,888 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1747384401] [2022-01-11 00:03:35,889 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:03:35,890 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:03:35,890 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:03:35,891 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:03:35,894 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:03:35,894 INFO L87 Difference]: Start difference. First operand 184 states and 243 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:35,969 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:03:35,970 INFO L93 Difference]: Finished difference Result 422 states and 560 transitions. [2022-01-11 00:03:35,970 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:03:35,970 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-01-11 00:03:35,970 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:03:35,971 INFO L225 Difference]: With dead ends: 422 [2022-01-11 00:03:35,971 INFO L226 Difference]: Without dead ends: 245 [2022-01-11 00:03:35,972 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:03:35,973 INFO L933 BasicCegarLoop]: 250 mSDtfsCounter, 226 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 324 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:03:35,973 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [226 Valid, 324 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:03:35,974 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 245 states. [2022-01-11 00:03:35,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 245 to 236. [2022-01-11 00:03:35,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 233 states have (on average 1.3476394849785407) internal successors, (314), 235 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:35,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 314 transitions. [2022-01-11 00:03:35,998 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 314 transitions. Word has length 18 [2022-01-11 00:03:35,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:03:35,999 INFO L470 AbstractCegarLoop]: Abstraction has 236 states and 314 transitions. [2022-01-11 00:03:35,999 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 2 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:36,001 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 314 transitions. [2022-01-11 00:03:36,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-01-11 00:03:36,006 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:03:36,006 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:36,006 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-11 00:03:36,006 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:03:36,007 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:03:36,007 INFO L85 PathProgramCache]: Analyzing trace with hash -1491996493, now seen corresponding path program 1 times [2022-01-11 00:03:36,007 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:03:36,007 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1242434254] [2022-01-11 00:03:36,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:36,007 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:03:36,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:36,073 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:03:36,073 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:03:36,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1242434254] [2022-01-11 00:03:36,073 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1242434254] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:03:36,073 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:03:36,074 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:03:36,074 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [172668423] [2022-01-11 00:03:36,074 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:03:36,074 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:03:36,074 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:03:36,074 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:03:36,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:03:36,075 INFO L87 Difference]: Start difference. First operand 236 states and 314 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:36,144 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:03:36,144 INFO L93 Difference]: Finished difference Result 528 states and 698 transitions. [2022-01-11 00:03:36,144 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:03:36,144 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-01-11 00:03:36,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:03:36,146 INFO L225 Difference]: With dead ends: 528 [2022-01-11 00:03:36,146 INFO L226 Difference]: Without dead ends: 299 [2022-01-11 00:03:36,147 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:03:36,147 INFO L933 BasicCegarLoop]: 227 mSDtfsCounter, 166 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 335 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:03:36,148 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 335 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:03:36,151 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2022-01-11 00:03:36,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 293. [2022-01-11 00:03:36,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 293 states, 290 states have (on average 1.293103448275862) internal successors, (375), 292 states have internal predecessors, (375), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:36,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 293 states to 293 states and 375 transitions. [2022-01-11 00:03:36,161 INFO L78 Accepts]: Start accepts. Automaton has 293 states and 375 transitions. Word has length 23 [2022-01-11 00:03:36,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:03:36,162 INFO L470 AbstractCegarLoop]: Abstraction has 293 states and 375 transitions. [2022-01-11 00:03:36,162 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:36,162 INFO L276 IsEmpty]: Start isEmpty. Operand 293 states and 375 transitions. [2022-01-11 00:03:36,162 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-01-11 00:03:36,162 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:03:36,163 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:36,163 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-11 00:03:36,163 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:03:36,163 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:03:36,163 INFO L85 PathProgramCache]: Analyzing trace with hash 186810986, now seen corresponding path program 1 times [2022-01-11 00:03:36,163 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:03:36,164 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2056255989] [2022-01-11 00:03:36,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:36,164 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:03:36,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:36,238 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:03:36,238 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:03:36,238 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2056255989] [2022-01-11 00:03:36,238 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2056255989] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:03:36,239 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:03:36,239 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:03:36,239 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1256559313] [2022-01-11 00:03:36,239 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:03:36,240 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:03:36,241 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:03:36,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:03:36,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:03:36,242 INFO L87 Difference]: Start difference. First operand 293 states and 375 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:36,460 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:03:36,461 INFO L93 Difference]: Finished difference Result 1327 states and 1705 transitions. [2022-01-11 00:03:36,461 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-11 00:03:36,461 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-01-11 00:03:36,461 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:03:36,465 INFO L225 Difference]: With dead ends: 1327 [2022-01-11 00:03:36,465 INFO L226 Difference]: Without dead ends: 867 [2022-01-11 00:03:36,468 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-11 00:03:36,476 INFO L933 BasicCegarLoop]: 285 mSDtfsCounter, 931 mSDsluCounter, 898 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 931 SdHoareTripleChecker+Valid, 1183 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:03:36,477 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [931 Valid, 1183 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:03:36,481 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 867 states. [2022-01-11 00:03:36,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 867 to 408. [2022-01-11 00:03:36,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 408 states, 405 states have (on average 1.2864197530864196) internal successors, (521), 407 states have internal predecessors, (521), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:36,520 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 521 transitions. [2022-01-11 00:03:36,520 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 521 transitions. Word has length 28 [2022-01-11 00:03:36,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:03:36,521 INFO L470 AbstractCegarLoop]: Abstraction has 408 states and 521 transitions. [2022-01-11 00:03:36,521 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 4 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:36,522 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 521 transitions. [2022-01-11 00:03:36,523 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-01-11 00:03:36,523 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:03:36,523 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:36,523 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-11 00:03:36,523 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:03:36,524 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:03:36,524 INFO L85 PathProgramCache]: Analyzing trace with hash 1179085572, now seen corresponding path program 1 times [2022-01-11 00:03:36,524 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:03:36,524 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1103379801] [2022-01-11 00:03:36,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:36,525 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:03:36,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:36,601 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:03:36,601 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:03:36,601 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1103379801] [2022-01-11 00:03:36,601 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1103379801] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:03:36,601 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:03:36,601 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:03:36,601 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1305609215] [2022-01-11 00:03:36,601 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:03:36,602 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:03:36,602 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:03:36,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:03:36,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:03:36,602 INFO L87 Difference]: Start difference. First operand 408 states and 521 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:36,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:03:36,807 INFO L93 Difference]: Finished difference Result 1211 states and 1535 transitions. [2022-01-11 00:03:36,807 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-11 00:03:36,808 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-01-11 00:03:36,808 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:03:36,812 INFO L225 Difference]: With dead ends: 1211 [2022-01-11 00:03:36,812 INFO L226 Difference]: Without dead ends: 1205 [2022-01-11 00:03:36,813 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-11 00:03:36,813 INFO L933 BasicCegarLoop]: 562 mSDtfsCounter, 855 mSDsluCounter, 1133 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 855 SdHoareTripleChecker+Valid, 1695 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:03:36,813 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [855 Valid, 1695 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:03:36,814 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1205 states. [2022-01-11 00:03:36,860 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1205 to 408. [2022-01-11 00:03:36,862 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 408 states, 405 states have (on average 1.271604938271605) internal successors, (515), 407 states have internal predecessors, (515), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:36,865 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 515 transitions. [2022-01-11 00:03:36,865 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 515 transitions. Word has length 30 [2022-01-11 00:03:36,866 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:03:36,866 INFO L470 AbstractCegarLoop]: Abstraction has 408 states and 515 transitions. [2022-01-11 00:03:36,866 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 4 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:36,866 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 515 transitions. [2022-01-11 00:03:36,871 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-01-11 00:03:36,871 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:03:36,871 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:36,872 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-11 00:03:36,872 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:03:36,873 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:03:36,873 INFO L85 PathProgramCache]: Analyzing trace with hash 1236910685, now seen corresponding path program 1 times [2022-01-11 00:03:36,873 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:03:36,873 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [670790193] [2022-01-11 00:03:36,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:36,873 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:03:36,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:36,946 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:03:36,947 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:03:36,947 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [670790193] [2022-01-11 00:03:36,947 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [670790193] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:03:36,947 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:03:36,947 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:03:36,947 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [570426700] [2022-01-11 00:03:36,947 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:03:36,948 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:03:36,948 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:03:36,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:03:36,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:03:36,948 INFO L87 Difference]: Start difference. First operand 408 states and 515 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:03:37,083 INFO L93 Difference]: Finished difference Result 1161 states and 1451 transitions. [2022-01-11 00:03:37,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 00:03:37,084 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-01-11 00:03:37,084 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:03:37,086 INFO L225 Difference]: With dead ends: 1161 [2022-01-11 00:03:37,086 INFO L226 Difference]: Without dead ends: 760 [2022-01-11 00:03:37,087 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:03:37,088 INFO L933 BasicCegarLoop]: 296 mSDtfsCounter, 351 mSDsluCounter, 775 mSDsCounter, 0 mSdLazyCounter, 87 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 351 SdHoareTripleChecker+Valid, 1071 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 87 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:03:37,088 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [351 Valid, 1071 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 87 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:03:37,089 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 760 states. [2022-01-11 00:03:37,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 760 to 432. [2022-01-11 00:03:37,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 432 states, 429 states have (on average 1.2564102564102564) internal successors, (539), 431 states have internal predecessors, (539), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 432 states to 432 states and 539 transitions. [2022-01-11 00:03:37,122 INFO L78 Accepts]: Start accepts. Automaton has 432 states and 539 transitions. Word has length 42 [2022-01-11 00:03:37,122 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:03:37,122 INFO L470 AbstractCegarLoop]: Abstraction has 432 states and 539 transitions. [2022-01-11 00:03:37,122 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,122 INFO L276 IsEmpty]: Start isEmpty. Operand 432 states and 539 transitions. [2022-01-11 00:03:37,122 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-01-11 00:03:37,123 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:03:37,123 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:37,123 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-11 00:03:37,123 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:03:37,123 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:03:37,123 INFO L85 PathProgramCache]: Analyzing trace with hash -1704746914, now seen corresponding path program 1 times [2022-01-11 00:03:37,124 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:03:37,124 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1706067284] [2022-01-11 00:03:37,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:37,124 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:03:37,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:37,155 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:03:37,156 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:03:37,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1706067284] [2022-01-11 00:03:37,156 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1706067284] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:03:37,156 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:03:37,156 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:03:37,156 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [210530782] [2022-01-11 00:03:37,156 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:03:37,156 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-11 00:03:37,157 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:03:37,157 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-11 00:03:37,157 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-11 00:03:37,157 INFO L87 Difference]: Start difference. First operand 432 states and 539 transitions. Second operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:03:37,261 INFO L93 Difference]: Finished difference Result 1067 states and 1323 transitions. [2022-01-11 00:03:37,261 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-11 00:03:37,261 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-01-11 00:03:37,261 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:03:37,263 INFO L225 Difference]: With dead ends: 1067 [2022-01-11 00:03:37,263 INFO L226 Difference]: Without dead ends: 642 [2022-01-11 00:03:37,264 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:03:37,264 INFO L933 BasicCegarLoop]: 297 mSDtfsCounter, 216 mSDsluCounter, 426 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 216 SdHoareTripleChecker+Valid, 723 SdHoareTripleChecker+Invalid, 75 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:03:37,265 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [216 Valid, 723 Invalid, 75 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:03:37,265 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 642 states. [2022-01-11 00:03:37,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 642 to 448. [2022-01-11 00:03:37,315 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 448 states, 445 states have (on average 1.247191011235955) internal successors, (555), 447 states have internal predecessors, (555), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 448 states to 448 states and 555 transitions. [2022-01-11 00:03:37,316 INFO L78 Accepts]: Start accepts. Automaton has 448 states and 555 transitions. Word has length 42 [2022-01-11 00:03:37,317 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:03:37,318 INFO L470 AbstractCegarLoop]: Abstraction has 448 states and 555 transitions. [2022-01-11 00:03:37,318 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.5) internal successors, (42), 4 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,318 INFO L276 IsEmpty]: Start isEmpty. Operand 448 states and 555 transitions. [2022-01-11 00:03:37,318 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-01-11 00:03:37,318 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:03:37,318 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:37,319 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-11 00:03:37,319 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:03:37,319 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:03:37,319 INFO L85 PathProgramCache]: Analyzing trace with hash 1745748511, now seen corresponding path program 1 times [2022-01-11 00:03:37,319 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:03:37,319 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1702881990] [2022-01-11 00:03:37,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:37,320 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:03:37,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:37,367 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:03:37,368 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:03:37,368 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1702881990] [2022-01-11 00:03:37,368 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1702881990] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:03:37,368 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:03:37,368 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-11 00:03:37,368 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [179415979] [2022-01-11 00:03:37,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:03:37,369 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-11 00:03:37,369 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:03:37,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-11 00:03:37,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-11 00:03:37,369 INFO L87 Difference]: Start difference. First operand 448 states and 555 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 6 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:03:37,612 INFO L93 Difference]: Finished difference Result 1566 states and 1944 transitions. [2022-01-11 00:03:37,612 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-01-11 00:03:37,612 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 6 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-01-11 00:03:37,612 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:03:37,615 INFO L225 Difference]: With dead ends: 1566 [2022-01-11 00:03:37,615 INFO L226 Difference]: Without dead ends: 845 [2022-01-11 00:03:37,616 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-01-11 00:03:37,616 INFO L933 BasicCegarLoop]: 475 mSDtfsCounter, 818 mSDsluCounter, 1309 mSDsCounter, 0 mSdLazyCounter, 137 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 818 SdHoareTripleChecker+Valid, 1784 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:03:37,616 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [818 Valid, 1784 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:03:37,617 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 845 states. [2022-01-11 00:03:37,639 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 845 to 311. [2022-01-11 00:03:37,640 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 311 states, 308 states have (on average 1.2370129870129871) internal successors, (381), 310 states have internal predecessors, (381), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 311 states to 311 states and 381 transitions. [2022-01-11 00:03:37,641 INFO L78 Accepts]: Start accepts. Automaton has 311 states and 381 transitions. Word has length 42 [2022-01-11 00:03:37,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:03:37,641 INFO L470 AbstractCegarLoop]: Abstraction has 311 states and 381 transitions. [2022-01-11 00:03:37,641 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 6 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,641 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 381 transitions. [2022-01-11 00:03:37,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-01-11 00:03:37,642 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:03:37,642 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:37,642 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-11 00:03:37,642 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:03:37,643 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:03:37,643 INFO L85 PathProgramCache]: Analyzing trace with hash -1776123887, now seen corresponding path program 1 times [2022-01-11 00:03:37,643 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:03:37,643 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [588546895] [2022-01-11 00:03:37,643 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:37,643 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:03:37,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:37,702 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-01-11 00:03:37,702 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:03:37,702 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [588546895] [2022-01-11 00:03:37,702 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [588546895] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:03:37,702 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:03:37,702 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:03:37,702 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1090317148] [2022-01-11 00:03:37,702 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:03:37,703 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:03:37,703 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:03:37,703 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:03:37,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:03:37,703 INFO L87 Difference]: Start difference. First operand 311 states and 381 transitions. Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 2 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:03:37,771 INFO L93 Difference]: Finished difference Result 729 states and 895 transitions. [2022-01-11 00:03:37,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:03:37,771 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 2 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 71 [2022-01-11 00:03:37,771 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:03:37,773 INFO L225 Difference]: With dead ends: 729 [2022-01-11 00:03:37,773 INFO L226 Difference]: Without dead ends: 425 [2022-01-11 00:03:37,773 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:03:37,774 INFO L933 BasicCegarLoop]: 155 mSDtfsCounter, 29 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 290 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:03:37,774 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [29 Valid, 290 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:03:37,774 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425 states. [2022-01-11 00:03:37,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425 to 425. [2022-01-11 00:03:37,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 425 states, 422 states have (on average 1.2203791469194314) internal successors, (515), 424 states have internal predecessors, (515), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,805 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 425 states to 425 states and 515 transitions. [2022-01-11 00:03:37,805 INFO L78 Accepts]: Start accepts. Automaton has 425 states and 515 transitions. Word has length 71 [2022-01-11 00:03:37,805 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:03:37,805 INFO L470 AbstractCegarLoop]: Abstraction has 425 states and 515 transitions. [2022-01-11 00:03:37,805 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 2 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:37,805 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 515 transitions. [2022-01-11 00:03:37,806 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-01-11 00:03:37,806 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:03:37,806 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:37,806 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-11 00:03:37,807 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:03:37,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:03:37,807 INFO L85 PathProgramCache]: Analyzing trace with hash -1944554185, now seen corresponding path program 1 times [2022-01-11 00:03:37,807 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:03:37,807 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [921518590] [2022-01-11 00:03:37,807 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:37,807 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:03:37,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:37,882 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 4 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 00:03:37,882 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:03:37,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [921518590] [2022-01-11 00:03:37,883 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [921518590] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-11 00:03:37,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [804073058] [2022-01-11 00:03:37,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:37,883 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-11 00:03:37,883 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 00:03:37,884 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-11 00:03:37,885 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-11 00:03:37,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:37,993 INFO L263 TraceCheckSpWp]: Trace formula consists of 625 conjuncts, 12 conjunts are in the unsatisfiable core [2022-01-11 00:03:37,998 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-11 00:03:38,548 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 4 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 00:03:38,548 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-11 00:03:38,745 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 4 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 00:03:38,746 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [804073058] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-11 00:03:38,746 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-11 00:03:38,746 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 6] total 9 [2022-01-11 00:03:38,746 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [509946524] [2022-01-11 00:03:38,746 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-11 00:03:38,747 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-01-11 00:03:38,747 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:03:38,747 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-01-11 00:03:38,747 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2022-01-11 00:03:38,748 INFO L87 Difference]: Start difference. First operand 425 states and 515 transitions. Second operand has 10 states, 10 states have (on average 12.6) internal successors, (126), 9 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:39,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:03:39,622 INFO L93 Difference]: Finished difference Result 3659 states and 4511 transitions. [2022-01-11 00:03:39,623 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-01-11 00:03:39,623 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 12.6) internal successors, (126), 9 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 73 [2022-01-11 00:03:39,623 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:03:39,632 INFO L225 Difference]: With dead ends: 3659 [2022-01-11 00:03:39,632 INFO L226 Difference]: Without dead ends: 3355 [2022-01-11 00:03:39,633 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 137 SyntacticMatches, 5 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 117 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=163, Invalid=389, Unknown=0, NotChecked=0, Total=552 [2022-01-11 00:03:39,634 INFO L933 BasicCegarLoop]: 487 mSDtfsCounter, 1776 mSDsluCounter, 1665 mSDsCounter, 0 mSdLazyCounter, 308 mSolverCounterSat, 83 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1776 SdHoareTripleChecker+Valid, 2152 SdHoareTripleChecker+Invalid, 391 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 83 IncrementalHoareTripleChecker+Valid, 308 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-01-11 00:03:39,634 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1776 Valid, 2152 Invalid, 391 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [83 Valid, 308 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-01-11 00:03:39,636 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3355 states. [2022-01-11 00:03:39,772 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3355 to 1037. [2022-01-11 00:03:39,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1037 states, 1034 states have (on average 1.2292069632495164) internal successors, (1271), 1036 states have internal predecessors, (1271), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:39,775 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1037 states to 1037 states and 1271 transitions. [2022-01-11 00:03:39,775 INFO L78 Accepts]: Start accepts. Automaton has 1037 states and 1271 transitions. Word has length 73 [2022-01-11 00:03:39,776 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:03:39,776 INFO L470 AbstractCegarLoop]: Abstraction has 1037 states and 1271 transitions. [2022-01-11 00:03:39,776 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 12.6) internal successors, (126), 9 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:39,776 INFO L276 IsEmpty]: Start isEmpty. Operand 1037 states and 1271 transitions. [2022-01-11 00:03:39,776 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-01-11 00:03:39,777 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:03:39,777 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:39,798 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-01-11 00:03:39,999 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-01-11 00:03:39,999 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:03:39,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:03:40,000 INFO L85 PathProgramCache]: Analyzing trace with hash 1844854486, now seen corresponding path program 1 times [2022-01-11 00:03:40,000 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:03:40,000 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2124408042] [2022-01-11 00:03:40,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:03:40,000 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:03:40,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:03:40,043 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-01-11 00:03:40,043 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:03:40,043 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2124408042] [2022-01-11 00:03:40,043 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2124408042] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:03:40,043 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:03:40,043 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:03:40,044 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [852249821] [2022-01-11 00:03:40,044 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:03:40,044 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:03:40,044 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:03:40,044 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:03:40,044 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:03:40,044 INFO L87 Difference]: Start difference. First operand 1037 states and 1271 transitions. Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:40,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:03:40,134 INFO L93 Difference]: Finished difference Result 1795 states and 2182 transitions. [2022-01-11 00:03:40,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 00:03:40,135 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 73 [2022-01-11 00:03:40,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:03:40,135 INFO L225 Difference]: With dead ends: 1795 [2022-01-11 00:03:40,135 INFO L226 Difference]: Without dead ends: 0 [2022-01-11 00:03:40,137 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:03:40,137 INFO L933 BasicCegarLoop]: 132 mSDtfsCounter, 236 mSDsluCounter, 266 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 236 SdHoareTripleChecker+Valid, 398 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:03:40,137 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [236 Valid, 398 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:03:40,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-11 00:03:40,138 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-11 00:03:40,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:40,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-11 00:03:40,138 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 73 [2022-01-11 00:03:40,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:03:40,138 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-11 00:03:40,138 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:03:40,138 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-11 00:03:40,138 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-11 00:03:40,140 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-11 00:03:40,141 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-11 00:03:40,141 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-11 00:03:40,141 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-11 00:03:40,142 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-11 00:03:58,007 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-11 00:03:58,007 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-11 00:03:58,008 INFO L854 garLoopResultBuilder]: At program point L999(lines 995 1001) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:03:58,008 INFO L854 garLoopResultBuilder]: At program point L992(lines 988 994) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:03:58,008 INFO L854 garLoopResultBuilder]: At program point L1007(lines 1002 1010) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:03:58,008 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-01-11 00:03:58,008 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:03:58,008 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-01-11 00:03:58,009 INFO L854 garLoopResultBuilder]: At program point L678-2(lines 678 727) the Hoare annotation is: (let ((.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1))) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) (.cse10 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse11 (<= 1 ~methaneLevelCritical~0Int)) (.cse7 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse8 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 0 ~waterLevel~0Int)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse12 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse5 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse1 .cse2 .cse9 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse1 .cse10 .cse9 .cse11) (and .cse7 .cse8 .cse12 .cse2 .cse9 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse10 .cse3 .cse11) (and .cse7 .cse8 .cse12 .cse1 .cse9 .cse5) (and .cse0 .cse12 .cse1 .cse3 .cse5))) [2022-01-11 00:03:58,009 INFO L861 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-01-11 00:03:58,009 INFO L854 garLoopResultBuilder]: At program point L728(lines 677 729) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse5 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1))) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse3) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse5 .cse1 .cse2 .cse3 .cse4))) [2022-01-11 00:03:58,009 INFO L858 garLoopResultBuilder]: For program point L679(lines 678 727) no Hoare annotation was computed. [2022-01-11 00:03:58,009 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-11 00:03:58,009 INFO L858 garLoopResultBuilder]: For program point L746-3(lines 746 752) no Hoare annotation was computed. [2022-01-11 00:03:58,009 INFO L858 garLoopResultBuilder]: For program point L680(lines 680 684) no Hoare annotation was computed. [2022-01-11 00:03:58,009 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-11 00:03:58,010 INFO L858 garLoopResultBuilder]: For program point L166-3(lines 166 170) no Hoare annotation was computed. [2022-01-11 00:03:58,010 INFO L858 garLoopResultBuilder]: For program point L746-5(lines 745 764) no Hoare annotation was computed. [2022-01-11 00:03:58,013 INFO L858 garLoopResultBuilder]: For program point L688(lines 688 694) no Hoare annotation was computed. [2022-01-11 00:03:58,013 INFO L854 garLoopResultBuilder]: At program point L166-5(lines 162 173) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) [2022-01-11 00:03:58,014 INFO L858 garLoopResultBuilder]: For program point L804-2(lines 804 821) no Hoare annotation was computed. [2022-01-11 00:03:58,014 INFO L858 garLoopResultBuilder]: For program point L753-3(lines 753 759) no Hoare annotation was computed. [2022-01-11 00:03:58,017 INFO L858 garLoopResultBuilder]: For program point L178(lines 178 182) no Hoare annotation was computed. [2022-01-11 00:03:58,017 INFO L858 garLoopResultBuilder]: For program point L688-2(lines 688 694) no Hoare annotation was computed. [2022-01-11 00:03:58,026 INFO L854 garLoopResultBuilder]: At program point L258-1(lines 253 261) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) [2022-01-11 00:03:58,026 INFO L858 garLoopResultBuilder]: For program point L778-6(lines 778 795) no Hoare annotation was computed. [2022-01-11 00:03:58,026 INFO L854 garLoopResultBuilder]: At program point L203-5(lines 198 206) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2) (and (<= 1 ~systemActive~0Int) .cse1 .cse2))) [2022-01-11 00:03:58,032 INFO L854 garLoopResultBuilder]: At program point L178-2(lines 174 185) the Hoare annotation is: (let ((.cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1))) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse8 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse6 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse8 .cse2 .cse4 .cse6))) [2022-01-11 00:03:58,032 INFO L858 garLoopResultBuilder]: For program point L698(lines 698 704) no Hoare annotation was computed. [2022-01-11 00:03:58,032 INFO L858 garLoopResultBuilder]: For program point L943-3(lines 943 947) no Hoare annotation was computed. [2022-01-11 00:03:58,032 INFO L858 garLoopResultBuilder]: For program point L243-3(lines 243 249) no Hoare annotation was computed. [2022-01-11 00:03:58,032 INFO L854 garLoopResultBuilder]: At program point L770-7(lines 766 772) the Hoare annotation is: false [2022-01-11 00:03:58,033 INFO L858 garLoopResultBuilder]: For program point L273-2(lines 273 286) no Hoare annotation was computed. [2022-01-11 00:03:58,033 INFO L858 garLoopResultBuilder]: For program point L190(lines 190 194) no Hoare annotation was computed. [2022-01-11 00:03:58,033 INFO L858 garLoopResultBuilder]: For program point L698-2(lines 698 704) no Hoare annotation was computed. [2022-01-11 00:03:58,033 INFO L858 garLoopResultBuilder]: For program point L943-5(lines 943 947) no Hoare annotation was computed. [2022-01-11 00:03:58,033 INFO L854 garLoopResultBuilder]: At program point L248-3(lines 239 252) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)))) [2022-01-11 00:03:58,033 INFO L854 garLoopResultBuilder]: At program point L778-7(lines 774 798) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)))) [2022-01-11 00:03:58,033 INFO L854 garLoopResultBuilder]: At program point L875-1(lines 870 878) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) [2022-01-11 00:03:58,033 INFO L854 garLoopResultBuilder]: At program point L273-3(lines 265 289) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1))) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and (<= 1 ~systemActive~0Int) .cse1 .cse2 .cse3 .cse4))) [2022-01-11 00:03:58,033 INFO L854 garLoopResultBuilder]: At program point L190-2(lines 186 197) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse5 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse6 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse4 .cse6) (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse4 .cse6) (and .cse7 .cse2 .cse3 .cse8 .cse5) (and .cse7 .cse2 .cse8 .cse6))) [2022-01-11 00:03:58,033 INFO L858 garLoopResultBuilder]: For program point L708(lines 708 723) no Hoare annotation was computed. [2022-01-11 00:03:58,033 INFO L854 garLoopResultBuilder]: At program point L949-1(lines 934 952) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) [2022-01-11 00:03:58,033 INFO L858 garLoopResultBuilder]: For program point L924-9(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,034 INFO L854 garLoopResultBuilder]: At program point L804-3(lines 800 824) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)))) [2022-01-11 00:03:58,034 INFO L858 garLoopResultBuilder]: For program point L277-3(lines 277 283) no Hoare annotation was computed. [2022-01-11 00:03:58,034 INFO L854 garLoopResultBuilder]: At program point L763-1(lines 742 765) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1))) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and (<= 1 ~systemActive~0Int) .cse1 .cse2 .cse3 .cse4))) [2022-01-11 00:03:58,034 INFO L854 garLoopResultBuilder]: At program point L973(lines 968 975) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 (<= 0 ~waterLevel~0Int)))) [2022-01-11 00:03:58,034 INFO L858 garLoopResultBuilder]: For program point L716(lines 716 722) no Hoare annotation was computed. [2022-01-11 00:03:58,034 INFO L858 garLoopResultBuilder]: For program point L808-3(lines 808 816) no Hoare annotation was computed. [2022-01-11 00:03:58,034 INFO L858 garLoopResultBuilder]: For program point L924-11(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,034 INFO L858 garLoopResultBuilder]: For program point L661-1(line 661) no Hoare annotation was computed. [2022-01-11 00:03:58,034 INFO L854 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1))) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and (<= 1 ~systemActive~0Int) .cse1 .cse2 .cse3 .cse4))) [2022-01-11 00:03:58,034 INFO L858 garLoopResultBuilder]: For program point L716-2(lines 708 723) no Hoare annotation was computed. [2022-01-11 00:03:58,034 INFO L858 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2022-01-11 00:03:58,034 INFO L854 garLoopResultBuilder]: At program point L856-2(lines 851 858) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,035 INFO L858 garLoopResultBuilder]: For program point L778-4(lines 778 795) no Hoare annotation was computed. [2022-01-11 00:03:58,035 INFO L854 garLoopResultBuilder]: At program point L930-3(lines 915 933) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)))) [2022-01-11 00:03:58,035 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 661) no Hoare annotation was computed. [2022-01-11 00:03:58,035 INFO L854 garLoopResultBuilder]: At program point L662-1(lines 657 664) the Hoare annotation is: false [2022-01-11 00:03:58,035 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-01-11 00:03:58,035 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-01-11 00:03:58,035 INFO L858 garLoopResultBuilder]: For program point L746(lines 746 752) no Hoare annotation was computed. [2022-01-11 00:03:58,035 INFO L854 garLoopResultBuilder]: At program point L856(lines 851 858) the Hoare annotation is: (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) (= ~pumpRunning~0Int 0) (<= 0 ~waterLevel~0Int)) [2022-01-11 00:03:58,035 INFO L858 garLoopResultBuilder]: For program point L957-2(lines 957 963) no Hoare annotation was computed. [2022-01-11 00:03:58,035 INFO L858 garLoopResultBuilder]: For program point L243-2(lines 243 249) no Hoare annotation was computed. [2022-01-11 00:03:58,035 INFO L854 garLoopResultBuilder]: At program point L770-5(lines 766 772) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) [2022-01-11 00:03:58,035 INFO L858 garLoopResultBuilder]: For program point L782-9(lines 782 790) no Hoare annotation was computed. [2022-01-11 00:03:58,036 INFO L861 garLoopResultBuilder]: At program point L733(lines 668 735) the Hoare annotation is: true [2022-01-11 00:03:58,036 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-01-11 00:03:58,036 INFO L858 garLoopResultBuilder]: For program point L166(lines 166 170) no Hoare annotation was computed. [2022-01-11 00:03:58,036 INFO L858 garLoopResultBuilder]: For program point L746-2(lines 745 764) no Hoare annotation was computed. [2022-01-11 00:03:58,036 INFO L854 garLoopResultBuilder]: At program point L965(lines 953 967) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse7 (<= ~methaneLevelCritical~0Int 0)) (.cse5 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse6 (<= 1 ~waterLevel~0Int)) (.cse4 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse2 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse7) (and .cse5 .cse2 .cse6 .cse4))) [2022-01-11 00:03:58,036 INFO L854 garLoopResultBuilder]: At program point L248-2(lines 239 252) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,036 INFO L854 garLoopResultBuilder]: At program point L778-5(lines 774 798) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:03:58,036 INFO L854 garLoopResultBuilder]: At program point L203-4(lines 198 206) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:03:58,036 INFO L854 garLoopResultBuilder]: At program point L770-6(lines 766 772) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0Int 0)) (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)))) [2022-01-11 00:03:58,036 INFO L861 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-01-11 00:03:58,036 INFO L858 garLoopResultBuilder]: For program point L66-1(lines 66 70) no Hoare annotation was computed. [2022-01-11 00:03:58,036 INFO L854 garLoopResultBuilder]: At program point L166-2(lines 162 173) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= 1 ~waterLevel~0Int)) [2022-01-11 00:03:58,036 INFO L858 garLoopResultBuilder]: For program point L804(lines 804 821) no Hoare annotation was computed. [2022-01-11 00:03:58,036 INFO L858 garLoopResultBuilder]: For program point L753-1(lines 753 759) no Hoare annotation was computed. [2022-01-11 00:03:58,036 INFO L858 garLoopResultBuilder]: For program point L924-6(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,037 INFO L854 garLoopResultBuilder]: At program point L866-3(lines 859 869) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:03:58,037 INFO L858 garLoopResultBuilder]: For program point L746-6(lines 746 752) no Hoare annotation was computed. [2022-01-11 00:03:58,037 INFO L854 garLoopResultBuilder]: At program point L258(lines 253 261) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= 1 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:03:58,037 INFO L858 garLoopResultBuilder]: For program point L778-2(lines 778 795) no Hoare annotation was computed. [2022-01-11 00:03:58,037 INFO L854 garLoopResultBuilder]: At program point L203-2(lines 198 206) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= ~methaneLevelCritical~0Int 0)) (.cse5 (<= ~waterLevel~0Int 1)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse8 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse7 (<= 1 ~waterLevel~0Int)) (.cse9 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 (<= 1 ~systemActive~0Int) .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse2 .cse7 .cse4) (and .cse0 .cse1 .cse6 .cse8 .cse3 .cse9) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse8 .cse7 .cse9))) [2022-01-11 00:03:58,037 INFO L858 garLoopResultBuilder]: For program point L924-8(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,037 INFO L858 garLoopResultBuilder]: For program point L841-9(lines 841 847) no Hoare annotation was computed. [2022-01-11 00:03:58,037 INFO L858 garLoopResultBuilder]: For program point L166-6(lines 166 170) no Hoare annotation was computed. [2022-01-11 00:03:58,037 INFO L858 garLoopResultBuilder]: For program point L746-8(lines 745 764) no Hoare annotation was computed. [2022-01-11 00:03:58,037 INFO L858 garLoopResultBuilder]: For program point L943(lines 943 947) no Hoare annotation was computed. [2022-01-11 00:03:58,037 INFO L858 garLoopResultBuilder]: For program point L243-1(lines 243 249) no Hoare annotation was computed. [2022-01-11 00:03:58,037 INFO L854 garLoopResultBuilder]: At program point L770-3(lines 766 772) the Hoare annotation is: false [2022-01-11 00:03:58,037 INFO L858 garLoopResultBuilder]: For program point L273(lines 273 286) no Hoare annotation was computed. [2022-01-11 00:03:58,037 INFO L854 garLoopResultBuilder]: At program point L930-2(lines 915 933) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,037 INFO L854 garLoopResultBuilder]: At program point L841-11(lines 834 850) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:03:58,037 INFO L854 garLoopResultBuilder]: At program point L830-3(lines 825 832) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:03:58,037 INFO L854 garLoopResultBuilder]: At program point L166-8(lines 162 173) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) [2022-01-11 00:03:58,038 INFO L858 garLoopResultBuilder]: For program point L804-4(lines 804 821) no Hoare annotation was computed. [2022-01-11 00:03:58,038 INFO L858 garLoopResultBuilder]: For program point L753-5(lines 753 759) no Hoare annotation was computed. [2022-01-11 00:03:58,038 INFO L858 garLoopResultBuilder]: For program point L943-2(lines 943 947) no Hoare annotation was computed. [2022-01-11 00:03:58,038 INFO L854 garLoopResultBuilder]: At program point L248-1(lines 239 252) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 (<= 0 ~waterLevel~0Int)) (and (<= ~waterLevel~0Int 1) .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 1) (<= 1 ~waterLevel~0Int)))) [2022-01-11 00:03:58,038 INFO L854 garLoopResultBuilder]: At program point L778-3(lines 774 798) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse5 (= ~pumpRunning~0Int 0)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse6 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse5 .cse3 .cse6) (and .cse0 .cse1 .cse2 .cse5 .cse3 .cse4) (and .cse7 .cse2 .cse5 .cse8 .cse4) (and .cse7 .cse2 .cse5 .cse8 .cse6))) [2022-01-11 00:03:58,038 INFO L854 garLoopResultBuilder]: At program point L875(lines 870 878) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~methaneLevelCritical~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int) .cse3) (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 .cse2 (<= 0 ~waterLevel~0Int) .cse3))) [2022-01-11 00:03:58,038 INFO L854 garLoopResultBuilder]: At program point L273-1(lines 265 289) the Hoare annotation is: (let ((.cse7 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse8 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse9 (<= 0 ~waterLevel~0Int)) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1))) (.cse5 (<= ~methaneLevelCritical~0Int 0)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse10 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse11 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse1 .cse2 .cse9 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse1 .cse10 .cse9 .cse11) (and .cse7 .cse8 (<= 1 ~systemActive~0Int) .cse2 .cse9 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse10 .cse3 .cse11))) [2022-01-11 00:03:58,038 INFO L858 garLoopResultBuilder]: For program point L782-6(lines 782 790) no Hoare annotation was computed. [2022-01-11 00:03:58,038 INFO L854 garLoopResultBuilder]: At program point L258-2(lines 253 261) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) [2022-01-11 00:03:58,038 INFO L858 garLoopResultBuilder]: For program point L778-10(lines 778 795) no Hoare annotation was computed. [2022-01-11 00:03:58,038 INFO L854 garLoopResultBuilder]: At program point L203-8(lines 198 206) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2) (and (<= 1 ~systemActive~0Int) .cse1 .cse2))) [2022-01-11 00:03:58,038 INFO L854 garLoopResultBuilder]: At program point L949(lines 934 952) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~10#1Int| 0) (<= 1 ~waterLevel~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~10#1Int| 1)) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~3#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:03:58,038 INFO L858 garLoopResultBuilder]: For program point L924-3(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,038 INFO L854 garLoopResultBuilder]: At program point L804-1(lines 800 824) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse4 (<= ~methaneLevelCritical~0Int 0)) (and (<= ~waterLevel~0Int 1) .cse2 .cse3 (<= 1 ~waterLevel~0Int)))) [2022-01-11 00:03:58,039 INFO L858 garLoopResultBuilder]: For program point L277(lines 277 283) no Hoare annotation was computed. [2022-01-11 00:03:58,039 INFO L854 garLoopResultBuilder]: At program point L763(lines 742 765) the Hoare annotation is: (let ((.cse7 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse8 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse9 (<= 0 ~waterLevel~0Int)) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1))) (.cse5 (<= ~methaneLevelCritical~0Int 0)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse10 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse11 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse1 .cse2 .cse9 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse1 .cse10 .cse9 .cse11) (and .cse7 .cse8 (<= 1 ~systemActive~0Int) .cse2 .cse9 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse10 .cse3 .cse11))) [2022-01-11 00:03:58,039 INFO L854 garLoopResultBuilder]: At program point L203-3(lines 198 206) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,039 INFO L854 garLoopResultBuilder]: At program point L770-4(lines 766 772) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,039 INFO L858 garLoopResultBuilder]: For program point L943-6(lines 943 947) no Hoare annotation was computed. [2022-01-11 00:03:58,039 INFO L858 garLoopResultBuilder]: For program point L243-5(lines 243 249) no Hoare annotation was computed. [2022-01-11 00:03:58,039 INFO L854 garLoopResultBuilder]: At program point L770-11(lines 766 772) the Hoare annotation is: false [2022-01-11 00:03:58,039 INFO L858 garLoopResultBuilder]: For program point L273-4(lines 273 286) no Hoare annotation was computed. [2022-01-11 00:03:58,039 INFO L858 garLoopResultBuilder]: For program point L808(lines 808 816) no Hoare annotation was computed. [2022-01-11 00:03:58,039 INFO L858 garLoopResultBuilder]: For program point L924-5(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,039 INFO L858 garLoopResultBuilder]: For program point L661(line 661) no Hoare annotation was computed. [2022-01-11 00:03:58,039 INFO L854 garLoopResultBuilder]: At program point L866-2(lines 859 869) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,039 INFO L858 garLoopResultBuilder]: For program point L943-8(lines 943 947) no Hoare annotation was computed. [2022-01-11 00:03:58,039 INFO L854 garLoopResultBuilder]: At program point L248-5(lines 239 252) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,039 INFO L854 garLoopResultBuilder]: At program point L778-11(lines 774 798) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:03:58,040 INFO L854 garLoopResultBuilder]: At program point L875-2(lines 870 878) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) [2022-01-11 00:03:58,040 INFO L854 garLoopResultBuilder]: At program point L273-5(lines 265 289) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1))) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and (<= 1 ~systemActive~0Int) .cse1 .cse2 .cse3 .cse4))) [2022-01-11 00:03:58,040 INFO L854 garLoopResultBuilder]: At program point L856-1(lines 851 858) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int|) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~10#1Int| 0) (<= 1 ~waterLevel~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~10#1Int| 1)) (<= 1 |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~3#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~7#1Int|)) [2022-01-11 00:03:58,040 INFO L858 garLoopResultBuilder]: For program point L778(lines 778 795) no Hoare annotation was computed. [2022-01-11 00:03:58,040 INFO L854 garLoopResultBuilder]: At program point L930-1(lines 915 933) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 (<= 0 ~waterLevel~0Int)) (and (<= ~waterLevel~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) (<= 1 ~waterLevel~0Int)))) [2022-01-11 00:03:58,040 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 661) no Hoare annotation was computed. [2022-01-11 00:03:58,040 INFO L854 garLoopResultBuilder]: At program point L662(lines 657 664) the Hoare annotation is: false [2022-01-11 00:03:58,040 INFO L858 garLoopResultBuilder]: For program point L841-6(lines 841 847) no Hoare annotation was computed. [2022-01-11 00:03:58,040 INFO L854 garLoopResultBuilder]: At program point L949-2(lines 934 952) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) [2022-01-11 00:03:58,040 INFO L858 garLoopResultBuilder]: For program point L924-15(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,040 INFO L854 garLoopResultBuilder]: At program point L804-5(lines 800 824) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:03:58,040 INFO L858 garLoopResultBuilder]: For program point L277-6(lines 277 283) no Hoare annotation was computed. [2022-01-11 00:03:58,040 INFO L854 garLoopResultBuilder]: At program point L763-2(lines 742 765) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1))) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and (<= 1 ~systemActive~0Int) .cse1 .cse2 .cse3 .cse4))) [2022-01-11 00:03:58,040 INFO L858 garLoopResultBuilder]: For program point L243(lines 243 249) no Hoare annotation was computed. [2022-01-11 00:03:58,041 INFO L854 garLoopResultBuilder]: At program point L770-1(lines 766 772) the Hoare annotation is: false [2022-01-11 00:03:58,041 INFO L858 garLoopResultBuilder]: For program point L782-3(lines 782 790) no Hoare annotation was computed. [2022-01-11 00:03:58,041 INFO L854 garLoopResultBuilder]: At program point L841-8(lines 834 850) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,041 INFO L854 garLoopResultBuilder]: At program point L830-2(lines 825 832) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) [2022-01-11 00:03:58,041 INFO L858 garLoopResultBuilder]: For program point L808-6(lines 808 816) no Hoare annotation was computed. [2022-01-11 00:03:58,041 INFO L858 garLoopResultBuilder]: For program point L924-17(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,041 INFO L858 garLoopResultBuilder]: For program point L661-2(line 661) no Hoare annotation was computed. [2022-01-11 00:03:58,041 INFO L854 garLoopResultBuilder]: At program point L248(lines 239 252) the Hoare annotation is: false [2022-01-11 00:03:58,041 INFO L854 garLoopResultBuilder]: At program point L778-1(lines 774 798) the Hoare annotation is: false [2022-01-11 00:03:58,041 INFO L854 garLoopResultBuilder]: At program point L203-1(lines 198 206) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= 0 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 .cse2 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse4 (<= ~methaneLevelCritical~0Int 0)))) [2022-01-11 00:03:58,041 INFO L854 garLoopResultBuilder]: At program point L770-2(lines 766 772) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0Int 1)) (.cse5 (<= 1 ~waterLevel~0Int)) (.cse7 (<= 1 ~methaneLevelCritical~0Int)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0)) (.cse8 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1))) (.cse9 (< ~waterLevel~0Int 4294967296)) (.cse3 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse10 (<= 0 ~waterLevel~0Int)) (.cse6 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse7) (and .cse0 .cse8 .cse2 .cse9 .cse3 .cse4 .cse10 .cse7) (and .cse0 .cse8 .cse2 .cse9 .cse3 .cse4 .cse10 .cse6))) [2022-01-11 00:03:58,041 INFO L854 garLoopResultBuilder]: At program point L856-3(lines 851 858) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,041 INFO L858 garLoopResultBuilder]: For program point L778-8(lines 778 795) no Hoare annotation was computed. [2022-01-11 00:03:58,041 INFO L854 garLoopResultBuilder]: At program point L930-5(lines 915 933) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,041 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 661) no Hoare annotation was computed. [2022-01-11 00:03:58,042 INFO L854 garLoopResultBuilder]: At program point L662-2(lines 657 664) the Hoare annotation is: false [2022-01-11 00:03:58,042 INFO L858 garLoopResultBuilder]: For program point L924(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,042 INFO L854 garLoopResultBuilder]: At program point L866-1(lines 859 869) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= 0 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse4 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:03:58,042 INFO L858 garLoopResultBuilder]: For program point L243-4(lines 243 249) no Hoare annotation was computed. [2022-01-11 00:03:58,042 INFO L854 garLoopResultBuilder]: At program point L770-9(lines 766 772) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) [2022-01-11 00:03:58,042 INFO L858 garLoopResultBuilder]: For program point L782-15(lines 782 790) no Hoare annotation was computed. [2022-01-11 00:03:58,042 INFO L858 garLoopResultBuilder]: For program point L924-2(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,042 INFO L858 garLoopResultBuilder]: For program point L841-3(lines 841 847) no Hoare annotation was computed. [2022-01-11 00:03:58,042 INFO L854 garLoopResultBuilder]: At program point L248-4(lines 239 252) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,042 INFO L854 garLoopResultBuilder]: At program point L778-9(lines 774 798) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:03:58,042 INFO L854 garLoopResultBuilder]: At program point L203-7(lines 198 206) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,042 INFO L854 garLoopResultBuilder]: At program point L770-10(lines 766 772) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,042 INFO L854 garLoopResultBuilder]: At program point L930(lines 915 933) the Hoare annotation is: false [2022-01-11 00:03:58,042 INFO L854 garLoopResultBuilder]: At program point L841-5(lines 834 850) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= 0 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:03:58,042 INFO L854 garLoopResultBuilder]: At program point L830-1(lines 825 832) the Hoare annotation is: (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= 0 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:03:58,042 INFO L858 garLoopResultBuilder]: For program point L924-12(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,043 INFO L854 garLoopResultBuilder]: At program point L866-5(lines 859 869) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,043 INFO L858 garLoopResultBuilder]: For program point L782(lines 782 790) no Hoare annotation was computed. [2022-01-11 00:03:58,043 INFO L858 garLoopResultBuilder]: For program point L924-14(lines 924 928) no Hoare annotation was computed. [2022-01-11 00:03:58,043 INFO L858 garLoopResultBuilder]: For program point L841-15(lines 841 847) no Hoare annotation was computed. [2022-01-11 00:03:58,043 INFO L854 garLoopResultBuilder]: At program point L203(lines 198 206) the Hoare annotation is: false [2022-01-11 00:03:58,043 INFO L854 garLoopResultBuilder]: At program point L770(lines 766 772) the Hoare annotation is: false [2022-01-11 00:03:58,043 INFO L854 garLoopResultBuilder]: At program point L930-4(lines 915 933) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,043 INFO L854 garLoopResultBuilder]: At program point L841-17(lines 834 850) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,043 INFO L854 garLoopResultBuilder]: At program point L830-5(lines 825 832) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) [2022-01-11 00:03:58,043 INFO L854 garLoopResultBuilder]: At program point L866(lines 859 869) the Hoare annotation is: false [2022-01-11 00:03:58,043 INFO L858 garLoopResultBuilder]: For program point L782-12(lines 782 790) no Hoare annotation was computed. [2022-01-11 00:03:58,043 INFO L858 garLoopResultBuilder]: For program point L841(lines 841 847) no Hoare annotation was computed. [2022-01-11 00:03:58,043 INFO L854 garLoopResultBuilder]: At program point L203-6(lines 198 206) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,043 INFO L854 garLoopResultBuilder]: At program point L770-8(lines 766 772) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,043 INFO L854 garLoopResultBuilder]: At program point L841-2(lines 834 850) the Hoare annotation is: false [2022-01-11 00:03:58,044 INFO L854 garLoopResultBuilder]: At program point L830(lines 825 832) the Hoare annotation is: false [2022-01-11 00:03:58,044 INFO L854 garLoopResultBuilder]: At program point L866-4(lines 859 869) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,044 INFO L858 garLoopResultBuilder]: For program point L841-12(lines 841 847) no Hoare annotation was computed. [2022-01-11 00:03:58,044 INFO L854 garLoopResultBuilder]: At program point L841-14(lines 834 850) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~8#1Int|) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)))) [2022-01-11 00:03:58,044 INFO L854 garLoopResultBuilder]: At program point L830-4(lines 825 832) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 1)) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~1#1Int| 0)) [2022-01-11 00:03:58,046 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:03:58,057 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-11 00:03:58,229 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:03:58 BasicIcfg [2022-01-11 00:03:58,229 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-11 00:03:58,230 INFO L158 Benchmark]: Toolchain (without parser) took 24244.49ms. Allocated memory was 189.8MB in the beginning and 569.4MB in the end (delta: 379.6MB). Free memory was 139.0MB in the beginning and 514.9MB in the end (delta: -375.9MB). Peak memory consumption was 329.4MB. Max. memory is 8.0GB. [2022-01-11 00:03:58,230 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 189.8MB. Free memory is still 155.9MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-11 00:03:58,230 INFO L158 Benchmark]: CACSL2BoogieTranslator took 463.75ms. Allocated memory is still 189.8MB. Free memory was 138.7MB in the beginning and 150.8MB in the end (delta: -12.1MB). Peak memory consumption was 12.6MB. Max. memory is 8.0GB. [2022-01-11 00:03:58,230 INFO L158 Benchmark]: Boogie Procedure Inliner took 85.54ms. Allocated memory is still 189.8MB. Free memory was 150.8MB in the beginning and 146.6MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2022-01-11 00:03:58,232 INFO L158 Benchmark]: Boogie Preprocessor took 55.63ms. Allocated memory is still 189.8MB. Free memory was 146.6MB in the beginning and 144.0MB in the end (delta: 2.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-11 00:03:58,233 INFO L158 Benchmark]: RCFGBuilder took 609.86ms. Allocated memory is still 189.8MB. Free memory was 144.0MB in the beginning and 118.8MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 8.0GB. [2022-01-11 00:03:58,233 INFO L158 Benchmark]: IcfgTransformer took 126.55ms. Allocated memory is still 189.8MB. Free memory was 118.8MB in the beginning and 108.3MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. [2022-01-11 00:03:58,233 INFO L158 Benchmark]: TraceAbstraction took 22897.28ms. Allocated memory was 189.8MB in the beginning and 569.4MB in the end (delta: 379.6MB). Free memory was 107.8MB in the beginning and 514.9MB in the end (delta: -407.1MB). Peak memory consumption was 299.1MB. Max. memory is 8.0GB. [2022-01-11 00:03:58,234 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 189.8MB. Free memory is still 155.9MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 463.75ms. Allocated memory is still 189.8MB. Free memory was 138.7MB in the beginning and 150.8MB in the end (delta: -12.1MB). Peak memory consumption was 12.6MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 85.54ms. Allocated memory is still 189.8MB. Free memory was 150.8MB in the beginning and 146.6MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 55.63ms. Allocated memory is still 189.8MB. Free memory was 146.6MB in the beginning and 144.0MB in the end (delta: 2.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 609.86ms. Allocated memory is still 189.8MB. Free memory was 144.0MB in the beginning and 118.8MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 8.0GB. * IcfgTransformer took 126.55ms. Allocated memory is still 189.8MB. Free memory was 118.8MB in the beginning and 108.3MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. * TraceAbstraction took 22897.28ms. Allocated memory was 189.8MB in the beginning and 569.4MB in the end (delta: 379.6MB). Free memory was 107.8MB in the beginning and 514.9MB in the end (delta: -407.1MB). Peak memory consumption was 299.1MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 661]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 661]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 661]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 194 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 22.7s, OverallIterations: 11, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 17.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 5604 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 5604 mSDsluCounter, 10206 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6789 mSDsCounter, 254 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 898 IncrementalHoareTripleChecker+Invalid, 1152 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 254 mSolverCounterUnsat, 3417 mSDtfsCounter, 898 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 232 GetRequests, 162 SyntacticMatches, 5 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 156 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1037occurred in iteration=10, InterpolantAutomatonStates: 77, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 4645 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 100 LocationsWithAnnotation, 100 PreInvPairs, 582 NumberOfFragments, 3484 HoareAnnotationTreeSize, 100 FomulaSimplifications, 225348 FormulaSimplificationTreeSizeReduction, 10.6s HoareSimplificationTime, 100 FomulaSimplificationsInter, 1333824 FormulaSimplificationTreeSizeReductionInter, 7.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 532 NumberOfCodeBlocks, 532 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 592 ConstructedInterpolants, 0 QuantifiedInterpolants, 3117 SizeOfPredicates, 4 NumberOfNonLiveVariables, 625 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 13 InterpolantComputations, 10 PerfectInterpolantSequences, 67/85 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, \result) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32))) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, \result) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: ((((((((~bvule32(tmp, 0bv32) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, waterLevel)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp___0) - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32))) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: ((((((~bvule32(tmp, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, tmp___0) - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) || ((~bvule32(1bv32, \result) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp, 0bv32) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 800]: Loop Invariant Derived loop invariant: (((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 988]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32))) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 742]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, tmp)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, waterLevel) && \result == 1bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 800]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 742]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 953]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning) - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: (~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) - InvariantResult [Line: 800]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) || ((~bvule32(1bv32, \result) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 186]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(1bv32, \result)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: ((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(tmp, 0bv32) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((((~bvule32(tmp, 0bv32) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: ((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(tmp___0, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp, 0bv32) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: ((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 742]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp, 0bv32) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) RESULT: Ultimate proved your program to be correct! [2022-01-11 00:03:58,307 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request...