/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-11 00:04:31,332 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-11 00:04:31,333 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-11 00:04:31,356 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-11 00:04:31,356 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-11 00:04:31,357 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-11 00:04:31,358 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-11 00:04:31,359 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-11 00:04:31,360 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-11 00:04:31,360 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-11 00:04:31,361 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-11 00:04:31,376 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-11 00:04:31,385 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-11 00:04:31,386 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-11 00:04:31,387 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-11 00:04:31,387 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-11 00:04:31,388 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-11 00:04:31,388 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-11 00:04:31,389 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-11 00:04:31,390 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-11 00:04:31,391 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-11 00:04:31,396 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-11 00:04:31,399 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-11 00:04:31,400 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-11 00:04:31,404 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-11 00:04:31,404 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-11 00:04:31,404 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-11 00:04:31,405 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-11 00:04:31,405 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-11 00:04:31,406 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-11 00:04:31,406 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-11 00:04:31,406 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-11 00:04:31,407 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-11 00:04:31,407 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-11 00:04:31,408 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-11 00:04:31,408 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-11 00:04:31,408 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-11 00:04:31,408 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-11 00:04:31,408 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-11 00:04:31,409 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-11 00:04:31,409 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-11 00:04:31,412 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf [2022-01-11 00:04:31,439 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-11 00:04:31,439 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-11 00:04:31,439 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-11 00:04:31,439 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-11 00:04:31,440 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-11 00:04:31,440 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-11 00:04:31,440 INFO L138 SettingsManager]: * Use SBE=true [2022-01-11 00:04:31,440 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-11 00:04:31,440 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-11 00:04:31,440 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-11 00:04:31,440 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-11 00:04:31,440 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-11 00:04:31,441 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-11 00:04:31,441 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-11 00:04:31,441 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-11 00:04:31,441 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-11 00:04:31,441 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-11 00:04:31,441 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-11 00:04:31,441 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-11 00:04:31,441 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-11 00:04:31,441 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-11 00:04:31,441 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:04:31,441 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-11 00:04:31,442 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-11 00:04:31,442 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-11 00:04:31,442 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-11 00:04:31,442 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-11 00:04:31,442 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-11 00:04:31,442 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-11 00:04:31,442 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-11 00:04:31,442 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-11 00:04:31,442 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-11 00:04:31,443 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-11 00:04:31,443 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_NONE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-11 00:04:31,621 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-11 00:04:31,640 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-11 00:04:31,643 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-11 00:04:31,643 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-11 00:04:31,644 INFO L275 PluginConnector]: CDTParser initialized [2022-01-11 00:04:31,645 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c [2022-01-11 00:04:31,687 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b58bd973d/6960aa1cda884efd93273706d1016020/FLAG6cb5bf05d [2022-01-11 00:04:32,027 INFO L306 CDTParser]: Found 1 translation units. [2022-01-11 00:04:32,027 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c [2022-01-11 00:04:32,035 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b58bd973d/6960aa1cda884efd93273706d1016020/FLAG6cb5bf05d [2022-01-11 00:04:32,429 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b58bd973d/6960aa1cda884efd93273706d1016020 [2022-01-11 00:04:32,431 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-11 00:04:32,432 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-11 00:04:32,433 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-11 00:04:32,433 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-11 00:04:32,435 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-11 00:04:32,436 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:32,436 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1b626fba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32, skipping insertion in model container [2022-01-11 00:04:32,436 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:32,442 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-11 00:04:32,483 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:04:32,678 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2022-01-11 00:04:32,720 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:04:32,735 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-11 00:04:32,746 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:04:32,792 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2022-01-11 00:04:32,809 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:04:32,812 INFO L203 MainTranslator]: Completed pre-run [2022-01-11 00:04:32,852 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product62.cil.c[12672,12685] [2022-01-11 00:04:32,868 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:04:32,885 INFO L208 MainTranslator]: Completed translation [2022-01-11 00:04:32,885 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32 WrapperNode [2022-01-11 00:04:32,886 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-11 00:04:32,887 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-11 00:04:32,887 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-11 00:04:32,887 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-11 00:04:32,892 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:32,918 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:32,950 INFO L137 Inliner]: procedures = 61, calls = 162, calls flagged for inlining = 59, calls inlined = 175, statements flattened = 1272 [2022-01-11 00:04:32,950 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-11 00:04:32,951 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-11 00:04:32,951 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-11 00:04:32,951 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-11 00:04:32,956 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:32,957 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:32,959 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:32,960 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:32,971 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:32,991 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:32,993 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:32,996 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-11 00:04:32,997 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-11 00:04:32,997 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-11 00:04:32,997 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-11 00:04:33,001 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32" (1/1) ... [2022-01-11 00:04:33,021 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:04:33,031 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 00:04:33,041 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-11 00:04:33,048 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-11 00:04:33,074 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-11 00:04:33,074 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-11 00:04:33,074 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-11 00:04:33,074 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-11 00:04:33,153 INFO L234 CfgBuilder]: Building ICFG [2022-01-11 00:04:33,154 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-11 00:04:33,667 INFO L275 CfgBuilder]: Performing block encoding [2022-01-11 00:04:33,681 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-11 00:04:33,681 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-11 00:04:33,683 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:04:33 BoogieIcfgContainer [2022-01-11 00:04:33,684 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-11 00:04:33,684 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-11 00:04:33,684 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-11 00:04:33,686 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-11 00:04:33,688 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:04:33" (1/1) ... [2022-01-11 00:04:33,843 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:04:33 BasicIcfg [2022-01-11 00:04:33,843 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-11 00:04:33,845 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-11 00:04:33,845 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-11 00:04:33,846 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-11 00:04:33,847 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.01 12:04:32" (1/4) ... [2022-01-11 00:04:33,847 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@655e3c8a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:04:33, skipping insertion in model container [2022-01-11 00:04:33,847 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:04:32" (2/4) ... [2022-01-11 00:04:33,847 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@655e3c8a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:04:33, skipping insertion in model container [2022-01-11 00:04:33,848 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:04:33" (3/4) ... [2022-01-11 00:04:33,848 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@655e3c8a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:04:33, skipping insertion in model container [2022-01-11 00:04:33,848 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:04:33" (4/4) ... [2022-01-11 00:04:33,850 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product62.cil.cTransformedIcfg [2022-01-11 00:04:33,853 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-11 00:04:33,853 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-11 00:04:33,892 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-11 00:04:33,897 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-11 00:04:33,897 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-11 00:04:33,914 INFO L276 IsEmpty]: Start isEmpty. Operand has 326 states, 322 states have (on average 1.3664596273291925) internal successors, (440), 325 states have internal predecessors, (440), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:33,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-11 00:04:33,920 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:33,920 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:33,921 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:33,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:33,925 INFO L85 PathProgramCache]: Analyzing trace with hash 1599537341, now seen corresponding path program 1 times [2022-01-11 00:04:33,930 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:33,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1861373732] [2022-01-11 00:04:33,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:33,931 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:34,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:34,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:34,145 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:34,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1861373732] [2022-01-11 00:04:34,145 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1861373732] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:34,146 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:34,146 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:04:34,147 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [582420788] [2022-01-11 00:04:34,148 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:34,152 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-11 00:04:34,152 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:34,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-11 00:04:34,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:04:34,178 INFO L87 Difference]: Start difference. First operand has 326 states, 322 states have (on average 1.3664596273291925) internal successors, (440), 325 states have internal predecessors, (440), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:34,233 INFO L93 Difference]: Finished difference Result 641 states and 868 transitions. [2022-01-11 00:04:34,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-11 00:04:34,238 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-11 00:04:34,238 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:34,252 INFO L225 Difference]: With dead ends: 641 [2022-01-11 00:04:34,252 INFO L226 Difference]: Without dead ends: 316 [2022-01-11 00:04:34,258 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:04:34,261 INFO L933 BasicCegarLoop]: 430 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 430 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:34,262 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 430 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:34,276 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-01-11 00:04:34,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 316. [2022-01-11 00:04:34,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 313 states have (on average 1.3482428115015974) internal successors, (422), 315 states have internal predecessors, (422), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 422 transitions. [2022-01-11 00:04:34,325 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 422 transitions. Word has length 19 [2022-01-11 00:04:34,326 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:34,326 INFO L470 AbstractCegarLoop]: Abstraction has 316 states and 422 transitions. [2022-01-11 00:04:34,326 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,326 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 422 transitions. [2022-01-11 00:04:34,327 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-11 00:04:34,327 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:34,327 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:34,327 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-11 00:04:34,327 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:34,328 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:34,328 INFO L85 PathProgramCache]: Analyzing trace with hash 508697301, now seen corresponding path program 1 times [2022-01-11 00:04:34,328 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:34,328 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [779538762] [2022-01-11 00:04:34,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:34,328 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:34,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:34,464 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:34,464 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:34,464 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [779538762] [2022-01-11 00:04:34,464 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [779538762] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:34,465 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:34,465 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:04:34,465 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [778593529] [2022-01-11 00:04:34,465 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:34,466 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:34,466 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:34,467 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:34,467 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:34,467 INFO L87 Difference]: Start difference. First operand 316 states and 422 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:34,500 INFO L93 Difference]: Finished difference Result 624 states and 836 transitions. [2022-01-11 00:04:34,500 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:34,501 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-11 00:04:34,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:34,502 INFO L225 Difference]: With dead ends: 624 [2022-01-11 00:04:34,502 INFO L226 Difference]: Without dead ends: 316 [2022-01-11 00:04:34,503 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:34,503 INFO L933 BasicCegarLoop]: 416 mSDtfsCounter, 406 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 406 SdHoareTripleChecker+Valid, 416 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:34,504 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [406 Valid, 416 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:34,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-01-11 00:04:34,512 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 316. [2022-01-11 00:04:34,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 313 states have (on average 1.3386581469648562) internal successors, (419), 315 states have internal predecessors, (419), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 419 transitions. [2022-01-11 00:04:34,514 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 419 transitions. Word has length 20 [2022-01-11 00:04:34,514 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:34,514 INFO L470 AbstractCegarLoop]: Abstraction has 316 states and 419 transitions. [2022-01-11 00:04:34,514 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,515 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 419 transitions. [2022-01-11 00:04:34,520 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-01-11 00:04:34,524 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:34,524 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:34,524 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-11 00:04:34,526 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:34,526 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:34,527 INFO L85 PathProgramCache]: Analyzing trace with hash 1770795515, now seen corresponding path program 1 times [2022-01-11 00:04:34,527 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:34,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [527876172] [2022-01-11 00:04:34,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:34,527 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:34,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:34,594 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:34,594 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:34,594 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [527876172] [2022-01-11 00:04:34,595 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [527876172] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:34,595 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:34,595 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:04:34,596 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1391956875] [2022-01-11 00:04:34,596 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:34,596 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:34,596 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:34,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:34,597 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:34,597 INFO L87 Difference]: Start difference. First operand 316 states and 419 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:34,684 INFO L93 Difference]: Finished difference Result 641 states and 845 transitions. [2022-01-11 00:04:34,684 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:34,685 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-01-11 00:04:34,685 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:34,686 INFO L225 Difference]: With dead ends: 641 [2022-01-11 00:04:34,686 INFO L226 Difference]: Without dead ends: 333 [2022-01-11 00:04:34,690 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:34,692 INFO L933 BasicCegarLoop]: 305 mSDtfsCounter, 226 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 74 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:34,693 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [226 Valid, 443 Invalid, 74 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:04:34,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2022-01-11 00:04:34,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 327. [2022-01-11 00:04:34,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 327 states, 324 states have (on average 1.2839506172839505) internal successors, (416), 326 states have internal predecessors, (416), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 416 transitions. [2022-01-11 00:04:34,711 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 416 transitions. Word has length 26 [2022-01-11 00:04:34,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:34,711 INFO L470 AbstractCegarLoop]: Abstraction has 327 states and 416 transitions. [2022-01-11 00:04:34,711 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 2 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,712 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 416 transitions. [2022-01-11 00:04:34,713 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-11 00:04:34,713 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:34,713 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:34,714 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-11 00:04:34,714 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:34,714 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:34,714 INFO L85 PathProgramCache]: Analyzing trace with hash -816370830, now seen corresponding path program 1 times [2022-01-11 00:04:34,715 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:34,715 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [733594655] [2022-01-11 00:04:34,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:34,715 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:34,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:34,795 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:34,795 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:34,795 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [733594655] [2022-01-11 00:04:34,795 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [733594655] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:34,795 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:34,795 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 00:04:34,796 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [304392161] [2022-01-11 00:04:34,796 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:34,796 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:34,796 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:34,796 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:34,797 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:34,797 INFO L87 Difference]: Start difference. First operand 327 states and 416 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,840 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:34,841 INFO L93 Difference]: Finished difference Result 646 states and 824 transitions. [2022-01-11 00:04:34,841 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:34,841 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-11 00:04:34,841 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:34,844 INFO L225 Difference]: With dead ends: 646 [2022-01-11 00:04:34,844 INFO L226 Difference]: Without dead ends: 640 [2022-01-11 00:04:34,845 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:34,853 INFO L933 BasicCegarLoop]: 317 mSDtfsCounter, 279 mSDsluCounter, 300 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 279 SdHoareTripleChecker+Valid, 617 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:34,854 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [279 Valid, 617 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:34,855 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 640 states. [2022-01-11 00:04:34,875 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 640 to 640. [2022-01-11 00:04:34,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 640 states, 637 states have (on average 1.2794348508634223) internal successors, (815), 639 states have internal predecessors, (815), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 640 states to 640 states and 815 transitions. [2022-01-11 00:04:34,878 INFO L78 Accepts]: Start accepts. Automaton has 640 states and 815 transitions. Word has length 33 [2022-01-11 00:04:34,879 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:34,880 INFO L470 AbstractCegarLoop]: Abstraction has 640 states and 815 transitions. [2022-01-11 00:04:34,880 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:34,880 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 815 transitions. [2022-01-11 00:04:34,883 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-01-11 00:04:34,884 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:34,884 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:34,884 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-11 00:04:34,884 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:34,885 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:34,885 INFO L85 PathProgramCache]: Analyzing trace with hash 1722438156, now seen corresponding path program 1 times [2022-01-11 00:04:34,885 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:34,886 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1784997482] [2022-01-11 00:04:34,886 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:34,886 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:34,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:34,940 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:34,941 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:34,941 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1784997482] [2022-01-11 00:04:34,941 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1784997482] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:34,941 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:34,941 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:04:34,941 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1521960938] [2022-01-11 00:04:34,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:34,941 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:04:34,942 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:34,942 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:04:34,942 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:34,942 INFO L87 Difference]: Start difference. First operand 640 states and 815 transitions. Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:35,112 INFO L93 Difference]: Finished difference Result 1658 states and 2078 transitions. [2022-01-11 00:04:35,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 00:04:35,113 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2022-01-11 00:04:35,113 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:35,116 INFO L225 Difference]: With dead ends: 1658 [2022-01-11 00:04:35,116 INFO L226 Difference]: Without dead ends: 1026 [2022-01-11 00:04:35,117 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:04:35,117 INFO L933 BasicCegarLoop]: 349 mSDtfsCounter, 456 mSDsluCounter, 953 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 1302 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:35,117 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [456 Valid, 1302 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:04:35,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1026 states. [2022-01-11 00:04:35,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1026 to 694. [2022-01-11 00:04:35,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 694 states, 691 states have (on average 1.2575976845151953) internal successors, (869), 693 states have internal predecessors, (869), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 694 states to 694 states and 869 transitions. [2022-01-11 00:04:35,142 INFO L78 Accepts]: Start accepts. Automaton has 694 states and 869 transitions. Word has length 59 [2022-01-11 00:04:35,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:35,143 INFO L470 AbstractCegarLoop]: Abstraction has 694 states and 869 transitions. [2022-01-11 00:04:35,143 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 5 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,143 INFO L276 IsEmpty]: Start isEmpty. Operand 694 states and 869 transitions. [2022-01-11 00:04:35,144 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-01-11 00:04:35,144 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:35,144 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:35,144 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-11 00:04:35,144 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:35,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:35,144 INFO L85 PathProgramCache]: Analyzing trace with hash -213222131, now seen corresponding path program 1 times [2022-01-11 00:04:35,145 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:35,145 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [824735293] [2022-01-11 00:04:35,145 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:35,145 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:35,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:35,179 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:35,180 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:35,180 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [824735293] [2022-01-11 00:04:35,180 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [824735293] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:35,180 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:35,180 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:04:35,180 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2097566832] [2022-01-11 00:04:35,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:35,181 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-11 00:04:35,181 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:35,181 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-11 00:04:35,181 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-11 00:04:35,181 INFO L87 Difference]: Start difference. First operand 694 states and 869 transitions. Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:35,336 INFO L93 Difference]: Finished difference Result 1826 states and 2246 transitions. [2022-01-11 00:04:35,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 00:04:35,336 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2022-01-11 00:04:35,336 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:35,339 INFO L225 Difference]: With dead ends: 1826 [2022-01-11 00:04:35,340 INFO L226 Difference]: Without dead ends: 1140 [2022-01-11 00:04:35,341 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:35,341 INFO L933 BasicCegarLoop]: 419 mSDtfsCounter, 357 mSDsluCounter, 622 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 357 SdHoareTripleChecker+Valid, 1041 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:35,341 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [357 Valid, 1041 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:04:35,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1140 states. [2022-01-11 00:04:35,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1140 to 730. [2022-01-11 00:04:35,370 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 730 states, 727 states have (on average 1.2448418156808803) internal successors, (905), 729 states have internal predecessors, (905), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 730 states to 730 states and 905 transitions. [2022-01-11 00:04:35,372 INFO L78 Accepts]: Start accepts. Automaton has 730 states and 905 transitions. Word has length 59 [2022-01-11 00:04:35,372 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:35,372 INFO L470 AbstractCegarLoop]: Abstraction has 730 states and 905 transitions. [2022-01-11 00:04:35,372 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,372 INFO L276 IsEmpty]: Start isEmpty. Operand 730 states and 905 transitions. [2022-01-11 00:04:35,373 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-01-11 00:04:35,373 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:35,373 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:35,373 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-11 00:04:35,374 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:35,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:35,374 INFO L85 PathProgramCache]: Analyzing trace with hash -661918770, now seen corresponding path program 1 times [2022-01-11 00:04:35,374 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:35,374 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1796109363] [2022-01-11 00:04:35,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:35,374 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:35,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:35,420 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:35,420 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:35,420 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1796109363] [2022-01-11 00:04:35,420 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1796109363] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:35,420 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:35,420 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:04:35,420 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [215539922] [2022-01-11 00:04:35,420 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:35,421 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:04:35,421 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:35,421 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:04:35,421 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:35,421 INFO L87 Difference]: Start difference. First operand 730 states and 905 transitions. Second operand has 5 states, 5 states have (on average 11.8) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,663 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:35,664 INFO L93 Difference]: Finished difference Result 2459 states and 3042 transitions. [2022-01-11 00:04:35,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-11 00:04:35,664 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 59 [2022-01-11 00:04:35,664 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:35,668 INFO L225 Difference]: With dead ends: 2459 [2022-01-11 00:04:35,669 INFO L226 Difference]: Without dead ends: 1491 [2022-01-11 00:04:35,670 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-11 00:04:35,671 INFO L933 BasicCegarLoop]: 358 mSDtfsCounter, 1227 mSDsluCounter, 1095 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1227 SdHoareTripleChecker+Valid, 1453 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:35,672 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1227 Valid, 1453 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:04:35,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1491 states. [2022-01-11 00:04:35,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1491 to 860. [2022-01-11 00:04:35,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 860 states, 857 states have (on average 1.2427071178529756) internal successors, (1065), 859 states have internal predecessors, (1065), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 860 states to 860 states and 1065 transitions. [2022-01-11 00:04:35,756 INFO L78 Accepts]: Start accepts. Automaton has 860 states and 1065 transitions. Word has length 59 [2022-01-11 00:04:35,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:35,756 INFO L470 AbstractCegarLoop]: Abstraction has 860 states and 1065 transitions. [2022-01-11 00:04:35,756 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.8) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,756 INFO L276 IsEmpty]: Start isEmpty. Operand 860 states and 1065 transitions. [2022-01-11 00:04:35,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-01-11 00:04:35,757 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:35,757 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:35,758 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-11 00:04:35,758 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:35,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:35,758 INFO L85 PathProgramCache]: Analyzing trace with hash -279504778, now seen corresponding path program 1 times [2022-01-11 00:04:35,758 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:35,758 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2068454931] [2022-01-11 00:04:35,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:35,758 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:35,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:35,813 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:04:35,813 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:35,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2068454931] [2022-01-11 00:04:35,813 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2068454931] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:35,813 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:35,813 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 00:04:35,813 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [321619818] [2022-01-11 00:04:35,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:35,814 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:04:35,814 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:35,814 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:04:35,814 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:35,814 INFO L87 Difference]: Start difference. First operand 860 states and 1065 transitions. Second operand has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:35,863 INFO L93 Difference]: Finished difference Result 860 states and 1065 transitions. [2022-01-11 00:04:35,863 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:04:35,864 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 67 [2022-01-11 00:04:35,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:35,865 INFO L225 Difference]: With dead ends: 860 [2022-01-11 00:04:35,865 INFO L226 Difference]: Without dead ends: 412 [2022-01-11 00:04:35,866 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:04:35,868 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 77 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:35,868 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 130 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:35,870 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 412 states. [2022-01-11 00:04:35,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 412 to 412. [2022-01-11 00:04:35,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 412 states, 411 states have (on average 1.2530413625304135) internal successors, (515), 411 states have internal predecessors, (515), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 412 states to 412 states and 515 transitions. [2022-01-11 00:04:35,901 INFO L78 Accepts]: Start accepts. Automaton has 412 states and 515 transitions. Word has length 67 [2022-01-11 00:04:35,903 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:35,903 INFO L470 AbstractCegarLoop]: Abstraction has 412 states and 515 transitions. [2022-01-11 00:04:35,903 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:35,903 INFO L276 IsEmpty]: Start isEmpty. Operand 412 states and 515 transitions. [2022-01-11 00:04:35,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-01-11 00:04:35,904 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:35,904 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:35,904 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-11 00:04:35,904 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:35,905 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:35,905 INFO L85 PathProgramCache]: Analyzing trace with hash -2077863054, now seen corresponding path program 1 times [2022-01-11 00:04:35,905 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:35,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [603113965] [2022-01-11 00:04:35,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:35,905 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:35,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:35,960 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 00:04:35,960 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:35,961 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [603113965] [2022-01-11 00:04:35,961 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [603113965] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:35,961 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:35,961 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-11 00:04:35,961 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [46109659] [2022-01-11 00:04:35,961 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:35,961 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-11 00:04:35,961 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:35,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-11 00:04:35,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-11 00:04:35,962 INFO L87 Difference]: Start difference. First operand 412 states and 515 transitions. Second operand has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,182 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:36,182 INFO L93 Difference]: Finished difference Result 1414 states and 1760 transitions. [2022-01-11 00:04:36,182 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-11 00:04:36,182 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-01-11 00:04:36,183 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:36,185 INFO L225 Difference]: With dead ends: 1414 [2022-01-11 00:04:36,185 INFO L226 Difference]: Without dead ends: 1010 [2022-01-11 00:04:36,186 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 50 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=191, Unknown=0, NotChecked=0, Total=272 [2022-01-11 00:04:36,187 INFO L933 BasicCegarLoop]: 329 mSDtfsCounter, 574 mSDsluCounter, 1044 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 574 SdHoareTripleChecker+Valid, 1373 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:36,211 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [574 Valid, 1373 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:04:36,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1010 states. [2022-01-11 00:04:36,243 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1010 to 390. [2022-01-11 00:04:36,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 390 states, 389 states have (on average 1.2416452442159382) internal successors, (483), 389 states have internal predecessors, (483), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,245 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 483 transitions. [2022-01-11 00:04:36,245 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 483 transitions. Word has length 74 [2022-01-11 00:04:36,245 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:36,245 INFO L470 AbstractCegarLoop]: Abstraction has 390 states and 483 transitions. [2022-01-11 00:04:36,245 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 6 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,245 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 483 transitions. [2022-01-11 00:04:36,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-11 00:04:36,246 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:36,246 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:36,246 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-11 00:04:36,246 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:36,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:36,247 INFO L85 PathProgramCache]: Analyzing trace with hash -1251912056, now seen corresponding path program 1 times [2022-01-11 00:04:36,247 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:36,247 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694307270] [2022-01-11 00:04:36,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:36,247 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:36,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:36,281 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-01-11 00:04:36,281 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:36,281 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694307270] [2022-01-11 00:04:36,281 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694307270] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:36,281 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:36,281 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:04:36,281 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [51812440] [2022-01-11 00:04:36,281 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:36,282 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-11 00:04:36,282 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:36,282 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-11 00:04:36,282 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-11 00:04:36,282 INFO L87 Difference]: Start difference. First operand 390 states and 483 transitions. Second operand has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:36,348 INFO L93 Difference]: Finished difference Result 880 states and 1085 transitions. [2022-01-11 00:04:36,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-11 00:04:36,349 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-11 00:04:36,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:36,350 INFO L225 Difference]: With dead ends: 880 [2022-01-11 00:04:36,350 INFO L226 Difference]: Without dead ends: 498 [2022-01-11 00:04:36,351 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:36,352 INFO L933 BasicCegarLoop]: 154 mSDtfsCounter, 205 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 205 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:36,352 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [205 Valid, 289 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:36,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2022-01-11 00:04:36,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 390. [2022-01-11 00:04:36,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 390 states, 389 states have (on average 1.218508997429306) internal successors, (474), 389 states have internal predecessors, (474), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 474 transitions. [2022-01-11 00:04:36,384 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 474 transitions. Word has length 75 [2022-01-11 00:04:36,384 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:36,384 INFO L470 AbstractCegarLoop]: Abstraction has 390 states and 474 transitions. [2022-01-11 00:04:36,384 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 15.75) internal successors, (63), 4 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,384 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 474 transitions. [2022-01-11 00:04:36,385 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-11 00:04:36,385 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:36,385 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:36,385 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-11 00:04:36,385 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:36,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:36,386 INFO L85 PathProgramCache]: Analyzing trace with hash 1225220776, now seen corresponding path program 1 times [2022-01-11 00:04:36,386 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:36,386 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [579139470] [2022-01-11 00:04:36,386 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:36,386 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:36,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:36,422 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-01-11 00:04:36,422 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:36,422 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [579139470] [2022-01-11 00:04:36,422 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [579139470] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:36,422 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:36,422 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:04:36,422 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [992064443] [2022-01-11 00:04:36,422 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:36,423 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:04:36,423 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:36,423 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:04:36,423 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:36,423 INFO L87 Difference]: Start difference. First operand 390 states and 474 transitions. Second operand has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:36,526 INFO L93 Difference]: Finished difference Result 1015 states and 1242 transitions. [2022-01-11 00:04:36,526 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 00:04:36,526 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-11 00:04:36,527 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:36,530 INFO L225 Difference]: With dead ends: 1015 [2022-01-11 00:04:36,530 INFO L226 Difference]: Without dead ends: 633 [2022-01-11 00:04:36,532 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:04:36,532 INFO L933 BasicCegarLoop]: 162 mSDtfsCounter, 380 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 380 SdHoareTripleChecker+Valid, 434 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:36,532 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [380 Valid, 434 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:36,533 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 633 states. [2022-01-11 00:04:36,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 633 to 390. [2022-01-11 00:04:36,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 390 states, 389 states have (on average 1.1953727506426735) internal successors, (465), 389 states have internal predecessors, (465), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 390 states to 390 states and 465 transitions. [2022-01-11 00:04:36,580 INFO L78 Accepts]: Start accepts. Automaton has 390 states and 465 transitions. Word has length 75 [2022-01-11 00:04:36,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:36,581 INFO L470 AbstractCegarLoop]: Abstraction has 390 states and 465 transitions. [2022-01-11 00:04:36,581 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.2) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,581 INFO L276 IsEmpty]: Start isEmpty. Operand 390 states and 465 transitions. [2022-01-11 00:04:36,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2022-01-11 00:04:36,582 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:36,582 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:36,582 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-11 00:04:36,582 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:36,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:36,583 INFO L85 PathProgramCache]: Analyzing trace with hash 1930285672, now seen corresponding path program 1 times [2022-01-11 00:04:36,583 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:36,583 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1893085482] [2022-01-11 00:04:36,583 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:36,583 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:36,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:36,660 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-01-11 00:04:36,660 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:36,660 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1893085482] [2022-01-11 00:04:36,660 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1893085482] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:36,660 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:36,660 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:04:36,660 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [265369889] [2022-01-11 00:04:36,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:36,661 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:04:36,661 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:36,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:04:36,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:04:36,661 INFO L87 Difference]: Start difference. First operand 390 states and 465 transitions. Second operand has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:36,778 INFO L93 Difference]: Finished difference Result 914 states and 1082 transitions. [2022-01-11 00:04:36,779 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 00:04:36,779 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 75 [2022-01-11 00:04:36,779 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:36,780 INFO L225 Difference]: With dead ends: 914 [2022-01-11 00:04:36,780 INFO L226 Difference]: Without dead ends: 532 [2022-01-11 00:04:36,781 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-01-11 00:04:36,782 INFO L933 BasicCegarLoop]: 162 mSDtfsCounter, 196 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 430 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:36,782 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [196 Valid, 430 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:04:36,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 532 states. [2022-01-11 00:04:36,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 532 to 306. [2022-01-11 00:04:36,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 306 states, 305 states have (on average 1.2098360655737705) internal successors, (369), 305 states have internal predecessors, (369), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 306 states to 306 states and 369 transitions. [2022-01-11 00:04:36,821 INFO L78 Accepts]: Start accepts. Automaton has 306 states and 369 transitions. Word has length 75 [2022-01-11 00:04:36,822 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:36,822 INFO L470 AbstractCegarLoop]: Abstraction has 306 states and 369 transitions. [2022-01-11 00:04:36,822 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 15.0) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:36,822 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 369 transitions. [2022-01-11 00:04:36,823 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-01-11 00:04:36,823 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:04:36,823 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:04:36,823 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-01-11 00:04:36,823 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:04:36,823 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:04:36,824 INFO L85 PathProgramCache]: Analyzing trace with hash 1886032146, now seen corresponding path program 1 times [2022-01-11 00:04:36,824 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:04:36,824 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [421076791] [2022-01-11 00:04:36,824 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:04:36,824 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:04:36,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:04:36,891 INFO L134 CoverageAnalysis]: Checked inductivity of 71 backedges. 48 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-01-11 00:04:36,892 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:04:36,892 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [421076791] [2022-01-11 00:04:36,892 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [421076791] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:04:36,892 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:04:36,892 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-11 00:04:36,892 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1340911126] [2022-01-11 00:04:36,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:04:36,893 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-11 00:04:36,893 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:04:36,893 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-11 00:04:36,893 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-11 00:04:36,893 INFO L87 Difference]: Start difference. First operand 306 states and 369 transitions. Second operand has 6 states, 6 states have (on average 16.0) internal successors, (96), 6 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:37,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:04:37,044 INFO L93 Difference]: Finished difference Result 744 states and 884 transitions. [2022-01-11 00:04:37,044 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-01-11 00:04:37,044 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 16.0) internal successors, (96), 6 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 117 [2022-01-11 00:04:37,044 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:04:37,044 INFO L225 Difference]: With dead ends: 744 [2022-01-11 00:04:37,044 INFO L226 Difference]: Without dead ends: 0 [2022-01-11 00:04:37,045 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=51, Invalid=105, Unknown=0, NotChecked=0, Total=156 [2022-01-11 00:04:37,045 INFO L933 BasicCegarLoop]: 286 mSDtfsCounter, 275 mSDsluCounter, 873 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 275 SdHoareTripleChecker+Valid, 1159 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:04:37,046 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [275 Valid, 1159 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:04:37,046 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-11 00:04:37,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-11 00:04:37,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:37,046 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-11 00:04:37,046 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 117 [2022-01-11 00:04:37,046 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:04:37,046 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-11 00:04:37,047 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 16.0) internal successors, (96), 6 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:04:37,047 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-11 00:04:37,047 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-11 00:04:37,049 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-11 00:04:37,049 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-11 00:04:37,049 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-11 00:04:37,049 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-01-11 00:04:37,051 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-11 00:04:48,733 WARN L228 SmtUtils]: Spent 5.00s on a formula simplification that was a NOOP. DAG size: 146 (called from [L 182] de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.HoareAnnotationComposer.or) [2022-01-11 00:05:03,973 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-11 00:05:03,974 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-11 00:05:03,974 INFO L854 garLoopResultBuilder]: At program point L702(lines 698 704) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,974 INFO L854 garLoopResultBuilder]: At program point L695(lines 691 697) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,974 INFO L854 garLoopResultBuilder]: At program point L710(lines 705 713) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,974 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2022-01-11 00:05:03,974 INFO L854 garLoopResultBuilder]: At program point L479(lines 475 481) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,974 INFO L858 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2022-01-11 00:05:03,974 INFO L854 garLoopResultBuilder]: At program point L539(lines 534 541) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,975 INFO L861 garLoopResultBuilder]: At program point L517(lines 498 520) the Hoare annotation is: true [2022-01-11 00:05:03,975 INFO L854 garLoopResultBuilder]: At program point L726-2(lines 726 773) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4 .cse3) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-11 00:05:03,975 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-11 00:05:03,975 INFO L854 garLoopResultBuilder]: At program point L774(lines 725 775) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) .cse2))) [2022-01-11 00:05:03,975 INFO L858 garLoopResultBuilder]: For program point L727(lines 726 773) no Hoare annotation was computed. [2022-01-11 00:05:03,975 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-11 00:05:03,975 INFO L858 garLoopResultBuilder]: For program point L792-3(lines 792 798) no Hoare annotation was computed. [2022-01-11 00:05:03,975 INFO L858 garLoopResultBuilder]: For program point L728(lines 728 732) no Hoare annotation was computed. [2022-01-11 00:05:03,975 INFO L858 garLoopResultBuilder]: For program point L583-3(lines 583 587) no Hoare annotation was computed. [2022-01-11 00:05:03,975 INFO L858 garLoopResultBuilder]: For program point L792-5(lines 791 810) no Hoare annotation was computed. [2022-01-11 00:05:03,975 INFO L858 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2022-01-11 00:05:03,975 INFO L854 garLoopResultBuilder]: At program point L583-5(lines 579 590) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,975 INFO L858 garLoopResultBuilder]: For program point L876-2(lines 876 893) no Hoare annotation was computed. [2022-01-11 00:05:03,976 INFO L858 garLoopResultBuilder]: For program point L799-3(lines 799 805) no Hoare annotation was computed. [2022-01-11 00:05:03,976 INFO L858 garLoopResultBuilder]: For program point L595(lines 595 599) no Hoare annotation was computed. [2022-01-11 00:05:03,976 INFO L858 garLoopResultBuilder]: For program point L736-2(lines 736 742) no Hoare annotation was computed. [2022-01-11 00:05:03,976 INFO L854 garLoopResultBuilder]: At program point L620-6(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,976 INFO L858 garLoopResultBuilder]: For program point L850-6(lines 850 867) no Hoare annotation was computed. [2022-01-11 00:05:03,976 INFO L854 garLoopResultBuilder]: At program point L620-11(lines 615 623) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,976 INFO L854 garLoopResultBuilder]: At program point L595-2(lines 591 602) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4 .cse3) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-11 00:05:03,976 INFO L858 garLoopResultBuilder]: For program point L746(lines 746 752) no Hoare annotation was computed. [2022-01-11 00:05:03,976 INFO L854 garLoopResultBuilder]: At program point L937-5(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,976 INFO L854 garLoopResultBuilder]: At program point L675-3(lines 670 678) the Hoare annotation is: false [2022-01-11 00:05:03,976 INFO L858 garLoopResultBuilder]: For program point L824-14(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,976 INFO L858 garLoopResultBuilder]: For program point L550-2(lines 550 567) no Hoare annotation was computed. [2022-01-11 00:05:03,976 INFO L858 garLoopResultBuilder]: For program point L607(lines 607 611) no Hoare annotation was computed. [2022-01-11 00:05:03,976 INFO L858 garLoopResultBuilder]: For program point L746-2(lines 746 752) no Hoare annotation was computed. [2022-01-11 00:05:03,976 INFO L858 garLoopResultBuilder]: For program point L880-3(lines 880 888) no Hoare annotation was computed. [2022-01-11 00:05:03,976 INFO L858 garLoopResultBuilder]: For program point L1014-9(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,977 INFO L858 garLoopResultBuilder]: For program point L660-7(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,977 INFO L854 garLoopResultBuilder]: At program point L816-15(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,977 INFO L854 garLoopResultBuilder]: At program point L946-1(lines 941 949) the Hoare annotation is: false [2022-01-11 00:05:03,977 INFO L854 garLoopResultBuilder]: At program point L550-3(lines 542 570) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,977 INFO L854 garLoopResultBuilder]: At program point L607-2(lines 603 614) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 (<= ~methaneLevelCritical~0Int 0)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-11 00:05:03,977 INFO L858 garLoopResultBuilder]: For program point L756(lines 756 769) no Hoare annotation was computed. [2022-01-11 00:05:03,977 INFO L854 garLoopResultBuilder]: At program point L927-3(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,977 INFO L858 garLoopResultBuilder]: For program point L850-4(lines 850 867) no Hoare annotation was computed. [2022-01-11 00:05:03,977 INFO L858 garLoopResultBuilder]: For program point L1014-11(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,977 INFO L854 garLoopResultBuilder]: At program point L665-7(lines 656 669) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,977 INFO L854 garLoopResultBuilder]: At program point L824-15(lines 820 844) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 .cse2))) [2022-01-11 00:05:03,977 INFO L858 garLoopResultBuilder]: For program point L554-2(lines 554 564) no Hoare annotation was computed. [2022-01-11 00:05:03,977 INFO L854 garLoopResultBuilder]: At program point L809-1(lines 788 811) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,977 INFO L854 garLoopResultBuilder]: At program point L1029(lines 1024 1031) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse7 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse8 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse4 (= ~methAndRunningLastTime~0Int 0)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse4) (and .cse5 .cse0 .cse6 .cse2 .cse7 .cse8 .cse3 .cse9) (and .cse5 .cse0 .cse6 .cse2 .cse7 .cse8 .cse4 .cse9))) [2022-01-11 00:05:03,977 INFO L858 garLoopResultBuilder]: For program point L764(lines 764 768) no Hoare annotation was computed. [2022-01-11 00:05:03,978 INFO L854 garLoopResultBuilder]: At program point L876-3(lines 872 896) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 .cse2))) [2022-01-11 00:05:03,978 INFO L854 garLoopResultBuilder]: At program point L675-2(lines 670 678) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,978 INFO L858 garLoopResultBuilder]: For program point L824-10(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,978 INFO L854 garLoopResultBuilder]: At program point L1020-3(lines 1005 1023) the Hoare annotation is: false [2022-01-11 00:05:03,978 INFO L858 garLoopResultBuilder]: For program point L995-21(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,978 INFO L854 garLoopResultBuilder]: At program point L850-7(lines 846 870) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0)) (.cse2 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2) (and .cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse1 .cse2))) [2022-01-11 00:05:03,978 INFO L858 garLoopResultBuilder]: For program point L555-3(lines 555 561) no Hoare annotation was computed. [2022-01-11 00:05:03,978 INFO L854 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,978 INFO L858 garLoopResultBuilder]: For program point L764-2(lines 756 769) no Hoare annotation was computed. [2022-01-11 00:05:03,978 INFO L858 garLoopResultBuilder]: For program point L1014-6(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,978 INFO L858 garLoopResultBuilder]: For program point L660-5(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,978 INFO L854 garLoopResultBuilder]: At program point L816-11(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,978 INFO L858 garLoopResultBuilder]: For program point L854-9(lines 854 862) no Hoare annotation was computed. [2022-01-11 00:05:03,978 INFO L858 garLoopResultBuilder]: For program point L995-23(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,978 INFO L858 garLoopResultBuilder]: For program point L526-1(line 526) no Hoare annotation was computed. [2022-01-11 00:05:03,978 INFO L861 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2022-01-11 00:05:03,978 INFO L858 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2022-01-11 00:05:03,979 INFO L858 garLoopResultBuilder]: For program point L792(lines 792 798) no Hoare annotation was computed. [2022-01-11 00:05:03,979 INFO L858 garLoopResultBuilder]: For program point L1014-8(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,979 INFO L854 garLoopResultBuilder]: At program point L665-5(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,979 INFO L854 garLoopResultBuilder]: At program point L824-11(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,979 INFO L854 garLoopResultBuilder]: At program point L927-5(lines 922 929) the Hoare annotation is: false [2022-01-11 00:05:03,979 INFO L858 garLoopResultBuilder]: For program point L824-12(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,979 INFO L854 garLoopResultBuilder]: At program point L1001-7(lines 986 1004) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,979 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-11 00:05:03,979 INFO L854 garLoopResultBuilder]: At program point L527-1(lines 522 529) the Hoare annotation is: false [2022-01-11 00:05:03,979 INFO L861 garLoopResultBuilder]: At program point L779(lines 716 781) the Hoare annotation is: true [2022-01-11 00:05:03,979 INFO L858 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2022-01-11 00:05:03,979 INFO L858 garLoopResultBuilder]: For program point L583(lines 583 587) no Hoare annotation was computed. [2022-01-11 00:05:03,979 INFO L858 garLoopResultBuilder]: For program point L792-2(lines 791 810) no Hoare annotation was computed. [2022-01-11 00:05:03,979 INFO L854 garLoopResultBuilder]: At program point L1020-2(lines 1005 1023) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,980 INFO L858 garLoopResultBuilder]: For program point L995-15(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,980 INFO L854 garLoopResultBuilder]: At program point L850-5(lines 846 870) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,980 INFO L858 garLoopResultBuilder]: For program point L660-6(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,980 INFO L854 garLoopResultBuilder]: At program point L816-13(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,980 INFO L858 garLoopResultBuilder]: For program point L828-21(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,980 INFO L861 garLoopResultBuilder]: At program point L492(lines 484 494) the Hoare annotation is: true [2022-01-11 00:05:03,980 INFO L858 garLoopResultBuilder]: For program point L432-1(lines 432 436) no Hoare annotation was computed. [2022-01-11 00:05:03,980 INFO L854 garLoopResultBuilder]: At program point L583-2(lines 579 590) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= ~methaneLevelCritical~0Int 0) .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0Int 0) .cse6))) [2022-01-11 00:05:03,980 INFO L858 garLoopResultBuilder]: For program point L876(lines 876 893) no Hoare annotation was computed. [2022-01-11 00:05:03,980 INFO L858 garLoopResultBuilder]: For program point L799-1(lines 799 805) no Hoare annotation was computed. [2022-01-11 00:05:03,980 INFO L858 garLoopResultBuilder]: For program point L854-6(lines 854 862) no Hoare annotation was computed. [2022-01-11 00:05:03,980 INFO L858 garLoopResultBuilder]: For program point L995-17(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,980 INFO L854 garLoopResultBuilder]: At program point L665-6(lines 656 669) the Hoare annotation is: false [2022-01-11 00:05:03,980 INFO L854 garLoopResultBuilder]: At program point L824-13(lines 820 844) the Hoare annotation is: false [2022-01-11 00:05:03,980 INFO L854 garLoopResultBuilder]: At program point L620-10(lines 615 623) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,980 INFO L854 garLoopResultBuilder]: At program point L816-14(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,980 INFO L858 garLoopResultBuilder]: For program point L792-6(lines 792 798) no Hoare annotation was computed. [2022-01-11 00:05:03,981 INFO L854 garLoopResultBuilder]: At program point L620(lines 615 623) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 .cse4 .cse5 (<= ~methaneLevelCritical~0Int 0) .cse6) (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~methaneLevelCritical~0Int) .cse6))) [2022-01-11 00:05:03,981 INFO L858 garLoopResultBuilder]: For program point L850-2(lines 850 867) no Hoare annotation was computed. [2022-01-11 00:05:03,981 INFO L854 garLoopResultBuilder]: At program point L620-5(lines 615 623) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse4 .cse1 .cse2 .cse3))) [2022-01-11 00:05:03,981 INFO L854 garLoopResultBuilder]: At program point L927-4(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,981 INFO L858 garLoopResultBuilder]: For program point L824-8(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,981 INFO L854 garLoopResultBuilder]: At program point L1001-5(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,981 INFO L858 garLoopResultBuilder]: For program point L995-18(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,981 INFO L854 garLoopResultBuilder]: At program point L937-9(lines 930 940) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,981 INFO L858 garLoopResultBuilder]: For program point L583-6(lines 583 587) no Hoare annotation was computed. [2022-01-11 00:05:03,981 INFO L858 garLoopResultBuilder]: For program point L792-8(lines 791 810) no Hoare annotation was computed. [2022-01-11 00:05:03,981 INFO L854 garLoopResultBuilder]: At program point L937(lines 930 940) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~methaneLevelCritical~0Int) .cse6) (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 .cse4 .cse5 (<= ~methaneLevelCritical~0Int 0) .cse6))) [2022-01-11 00:05:03,981 INFO L854 garLoopResultBuilder]: At program point L675-1(lines 670 678) the Hoare annotation is: false [2022-01-11 00:05:03,981 INFO L858 garLoopResultBuilder]: For program point L824-6(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,981 INFO L858 garLoopResultBuilder]: For program point L550(lines 550 567) no Hoare annotation was computed. [2022-01-11 00:05:03,981 INFO L858 garLoopResultBuilder]: For program point L660-4(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,981 INFO L854 garLoopResultBuilder]: At program point L816-9(lines 812 818) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,982 INFO L858 garLoopResultBuilder]: For program point L828-15(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,982 INFO L858 garLoopResultBuilder]: For program point L995-20(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,982 INFO L858 garLoopResultBuilder]: For program point L912-21(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,982 INFO L854 garLoopResultBuilder]: At program point L583-8(lines 579 590) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,982 INFO L858 garLoopResultBuilder]: For program point L876-4(lines 876 893) no Hoare annotation was computed. [2022-01-11 00:05:03,982 INFO L858 garLoopResultBuilder]: For program point L799-5(lines 799 805) no Hoare annotation was computed. [2022-01-11 00:05:03,982 INFO L858 garLoopResultBuilder]: For program point L880(lines 880 888) no Hoare annotation was computed. [2022-01-11 00:05:03,982 INFO L858 garLoopResultBuilder]: For program point L1014-3(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,982 INFO L858 garLoopResultBuilder]: For program point L660-3(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,982 INFO L854 garLoopResultBuilder]: At program point L816-7(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,982 INFO L854 garLoopResultBuilder]: At program point L946(lines 941 949) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| ~pumpRunning~0Int) (<= 1 ~methaneLevelCritical~0Int)) [2022-01-11 00:05:03,982 INFO L854 garLoopResultBuilder]: At program point L550-1(lines 542 570) the Hoare annotation is: (let ((.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse5 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse6 .cse7 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse4 .cse0 .cse1 .cse5 .cse2 .cse6 .cse7 .cse3))) [2022-01-11 00:05:03,982 INFO L854 garLoopResultBuilder]: At program point L665-4(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,982 INFO L854 garLoopResultBuilder]: At program point L824-9(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,982 INFO L854 garLoopResultBuilder]: At program point L620-8(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,982 INFO L854 garLoopResultBuilder]: At program point L816-10(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,983 INFO L854 garLoopResultBuilder]: At program point L1001-6(lines 986 1004) the Hoare annotation is: false [2022-01-11 00:05:03,983 INFO L854 garLoopResultBuilder]: At program point L912-23(lines 905 921) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,983 INFO L854 garLoopResultBuilder]: At program point L902-7(lines 897 904) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,983 INFO L854 garLoopResultBuilder]: At program point L620-12(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,983 INFO L858 garLoopResultBuilder]: For program point L850-10(lines 850 867) no Hoare annotation was computed. [2022-01-11 00:05:03,983 INFO L854 garLoopResultBuilder]: At program point L620-17(lines 615 623) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,983 INFO L854 garLoopResultBuilder]: At program point L927(lines 922 929) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~8#1Int|)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 .cse5 .cse6 .cse7 (<= 1 ~methaneLevelCritical~0Int) .cse8) (and .cse0 .cse1 .cse2 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse4 .cse5 .cse6 .cse7 (<= ~methaneLevelCritical~0Int 0) .cse8))) [2022-01-11 00:05:03,983 INFO L858 garLoopResultBuilder]: For program point L850(lines 850 867) no Hoare annotation was computed. [2022-01-11 00:05:03,983 INFO L858 garLoopResultBuilder]: For program point L1014-5(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,983 INFO L854 garLoopResultBuilder]: At program point L665-3(lines 656 669) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-11 00:05:03,983 INFO L854 garLoopResultBuilder]: At program point L824-7(lines 820 844) the Hoare annotation is: (let ((.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-11 00:05:03,983 INFO L858 garLoopResultBuilder]: For program point L554(lines 554 564) no Hoare annotation was computed. [2022-01-11 00:05:03,983 INFO L854 garLoopResultBuilder]: At program point L809(lines 788 811) the Hoare annotation is: (let ((.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= ~methaneLevelCritical~0Int 0)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse5 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse6 .cse7 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse4 .cse0 .cse1 .cse5 .cse2 .cse6 .cse7 .cse3))) [2022-01-11 00:05:03,983 INFO L858 garLoopResultBuilder]: For program point L995-12(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,984 INFO L854 garLoopResultBuilder]: At program point L937-7(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,984 INFO L858 garLoopResultBuilder]: For program point L828-18(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,984 INFO L854 garLoopResultBuilder]: At program point L937-10(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,984 INFO L854 garLoopResultBuilder]: At program point L675-5(lines 670 678) the Hoare annotation is: false [2022-01-11 00:05:03,984 INFO L858 garLoopResultBuilder]: For program point L824-22(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,984 INFO L858 garLoopResultBuilder]: For program point L550-4(lines 550 567) no Hoare annotation was computed. [2022-01-11 00:05:03,984 INFO L854 garLoopResultBuilder]: At program point L876-1(lines 872 896) the Hoare annotation is: (let ((.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-11 00:05:03,984 INFO L854 garLoopResultBuilder]: At program point L675(lines 670 678) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,984 INFO L858 garLoopResultBuilder]: For program point L824-2(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,984 INFO L854 garLoopResultBuilder]: At program point L1020-1(lines 1005 1023) the Hoare annotation is: false [2022-01-11 00:05:03,984 INFO L858 garLoopResultBuilder]: For program point L995-9(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,984 INFO L854 garLoopResultBuilder]: At program point L850-3(lines 846 870) the Hoare annotation is: (let ((.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3) (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 .cse1 .cse2 (= ~methAndRunningLastTime~0Int 0)) (and .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2))) [2022-01-11 00:05:03,984 INFO L858 garLoopResultBuilder]: For program point L555(lines 555 561) no Hoare annotation was computed. [2022-01-11 00:05:03,984 INFO L858 garLoopResultBuilder]: For program point L995-14(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,984 INFO L858 garLoopResultBuilder]: For program point L912-15(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,984 INFO L854 garLoopResultBuilder]: At program point L620-9(lines 615 623) the Hoare annotation is: false [2022-01-11 00:05:03,985 INFO L854 garLoopResultBuilder]: At program point L816-12(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,985 INFO L858 garLoopResultBuilder]: For program point L880-6(lines 880 888) no Hoare annotation was computed. [2022-01-11 00:05:03,985 INFO L858 garLoopResultBuilder]: For program point L1014-15(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,985 INFO L858 garLoopResultBuilder]: For program point L660-11(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,985 INFO L854 garLoopResultBuilder]: At program point L816-23(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,985 INFO L854 garLoopResultBuilder]: At program point L946-2(lines 941 949) the Hoare annotation is: false [2022-01-11 00:05:03,985 INFO L854 garLoopResultBuilder]: At program point L550-5(lines 542 570) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,985 INFO L858 garLoopResultBuilder]: For program point L1014(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,985 INFO L858 garLoopResultBuilder]: For program point L660-1(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,985 INFO L854 garLoopResultBuilder]: At program point L816-3(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,985 INFO L858 garLoopResultBuilder]: For program point L854-3(lines 854 862) no Hoare annotation was computed. [2022-01-11 00:05:03,985 INFO L858 garLoopResultBuilder]: For program point L995-11(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,985 INFO L858 garLoopResultBuilder]: For program point L526(line 526) no Hoare annotation was computed. [2022-01-11 00:05:03,985 INFO L854 garLoopResultBuilder]: At program point L1001-4(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,985 INFO L854 garLoopResultBuilder]: At program point L912-17(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,985 INFO L854 garLoopResultBuilder]: At program point L902-5(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,985 INFO L854 garLoopResultBuilder]: At program point L937-8(lines 930 940) the Hoare annotation is: false [2022-01-11 00:05:03,986 INFO L854 garLoopResultBuilder]: At program point L927-6(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,986 INFO L858 garLoopResultBuilder]: For program point L850-8(lines 850 867) no Hoare annotation was computed. [2022-01-11 00:05:03,986 INFO L858 garLoopResultBuilder]: For program point L1014-17(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,986 INFO L854 garLoopResultBuilder]: At program point L665-11(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,986 INFO L854 garLoopResultBuilder]: At program point L824-23(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,986 INFO L858 garLoopResultBuilder]: For program point L554-4(lines 554 564) no Hoare annotation was computed. [2022-01-11 00:05:03,986 INFO L854 garLoopResultBuilder]: At program point L809-2(lines 788 811) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,986 INFO L858 garLoopResultBuilder]: For program point L1014-2(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,986 INFO L854 garLoopResultBuilder]: At program point L665-1(lines 656 669) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:05:03,986 INFO L854 garLoopResultBuilder]: At program point L824-3(lines 820 844) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-11 00:05:03,986 INFO L854 garLoopResultBuilder]: At program point L927-2(lines 922 929) the Hoare annotation is: false [2022-01-11 00:05:03,986 INFO L858 garLoopResultBuilder]: For program point L824-4(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,986 INFO L854 garLoopResultBuilder]: At program point L1001-3(lines 986 1004) the Hoare annotation is: (let ((.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse12 (= ~methAndRunningLastTime~0Int 0)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse10 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse13 (<= ~methaneLevelCritical~0Int 0)) (.cse11 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse1 .cse2 .cse4 .cse10 .cse5 .cse11) (and .cse9 .cse1 .cse2 .cse10 .cse5 .cse12 .cse11) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse6 .cse7 .cse13 .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse6 .cse7 .cse12 .cse8) (and .cse9 .cse1 .cse2 .cse10 .cse5 .cse13 .cse11))) [2022-01-11 00:05:03,986 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-11 00:05:03,987 INFO L854 garLoopResultBuilder]: At program point L527(lines 522 529) the Hoare annotation is: false [2022-01-11 00:05:03,987 INFO L858 garLoopResultBuilder]: For program point L828-12(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,987 INFO L858 garLoopResultBuilder]: For program point L912-18(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,987 INFO L854 garLoopResultBuilder]: At program point L876-5(lines 872 896) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,987 INFO L854 garLoopResultBuilder]: At program point L675-4(lines 670 678) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,987 INFO L858 garLoopResultBuilder]: For program point L824-18(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,987 INFO L854 garLoopResultBuilder]: At program point L1020-5(lines 1005 1023) the Hoare annotation is: false [2022-01-11 00:05:03,987 INFO L858 garLoopResultBuilder]: For program point L995-33(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,987 INFO L854 garLoopResultBuilder]: At program point L850-11(lines 846 870) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,987 INFO L858 garLoopResultBuilder]: For program point L555-6(lines 555 561) no Hoare annotation was computed. [2022-01-11 00:05:03,987 INFO L854 garLoopResultBuilder]: At program point L1020(lines 1005 1023) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,987 INFO L858 garLoopResultBuilder]: For program point L995-3(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,987 INFO L854 garLoopResultBuilder]: At program point L850-1(lines 846 870) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-11 00:05:03,987 INFO L858 garLoopResultBuilder]: For program point L660-2(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,987 INFO L854 garLoopResultBuilder]: At program point L816-5(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,987 INFO L858 garLoopResultBuilder]: For program point L828-9(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,988 INFO L854 garLoopResultBuilder]: At program point L620-7(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,988 INFO L854 garLoopResultBuilder]: At program point L816-8(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,988 INFO L854 garLoopResultBuilder]: At program point L912-20(lines 905 921) the Hoare annotation is: false [2022-01-11 00:05:03,988 INFO L854 garLoopResultBuilder]: At program point L902-6(lines 897 904) the Hoare annotation is: false [2022-01-11 00:05:03,988 INFO L858 garLoopResultBuilder]: For program point L1014-12(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,988 INFO L858 garLoopResultBuilder]: For program point L660-9(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,988 INFO L854 garLoopResultBuilder]: At program point L816-19(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,988 INFO L858 garLoopResultBuilder]: For program point L854-15(lines 854 862) no Hoare annotation was computed. [2022-01-11 00:05:03,988 INFO L858 garLoopResultBuilder]: For program point L995-35(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,988 INFO L858 garLoopResultBuilder]: For program point L526-2(line 526) no Hoare annotation was computed. [2022-01-11 00:05:03,988 INFO L858 garLoopResultBuilder]: For program point L854(lines 854 862) no Hoare annotation was computed. [2022-01-11 00:05:03,988 INFO L858 garLoopResultBuilder]: For program point L995-5(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,988 INFO L854 garLoopResultBuilder]: At program point L665-2(lines 656 669) the Hoare annotation is: false [2022-01-11 00:05:03,988 INFO L854 garLoopResultBuilder]: At program point L824-5(lines 820 844) the Hoare annotation is: false [2022-01-11 00:05:03,988 INFO L854 garLoopResultBuilder]: At program point L620-4(lines 615 623) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse5 .cse6 .cse7 (<= 1 ~methaneLevelCritical~0Int) .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse5 .cse6 .cse7 (<= ~methaneLevelCritical~0Int 0) .cse8))) [2022-01-11 00:05:03,988 INFO L854 garLoopResultBuilder]: At program point L816-6(lines 812 818) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1))) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-11 00:05:03,989 INFO L854 garLoopResultBuilder]: At program point L937-6(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,989 INFO L858 garLoopResultBuilder]: For program point L1014-14(lines 1014 1018) no Hoare annotation was computed. [2022-01-11 00:05:03,989 INFO L854 garLoopResultBuilder]: At program point L665-9(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,989 INFO L854 garLoopResultBuilder]: At program point L824-19(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,989 INFO L854 garLoopResultBuilder]: At program point L927-8(lines 922 929) the Hoare annotation is: false [2022-01-11 00:05:03,989 INFO L858 garLoopResultBuilder]: For program point L824-20(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,989 INFO L854 garLoopResultBuilder]: At program point L1001-11(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,989 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2022-01-11 00:05:03,989 INFO L854 garLoopResultBuilder]: At program point L527-2(lines 522 529) the Hoare annotation is: false [2022-01-11 00:05:03,989 INFO L854 garLoopResultBuilder]: At program point L927-1(lines 922 929) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,989 INFO L858 garLoopResultBuilder]: For program point L824(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,989 INFO L854 garLoopResultBuilder]: At program point L1001-1(lines 986 1004) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int|)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 .cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-11 00:05:03,989 INFO L858 garLoopResultBuilder]: For program point L995-6(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,989 INFO L854 garLoopResultBuilder]: At program point L937-4(lines 930 940) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse5 .cse6 .cse7 (<= 1 ~methaneLevelCritical~0Int) .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse5 .cse6 .cse7 (<= ~methaneLevelCritical~0Int 0) .cse8))) [2022-01-11 00:05:03,990 INFO L858 garLoopResultBuilder]: For program point L912-12(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,990 INFO L854 garLoopResultBuilder]: At program point L1020-4(lines 1005 1023) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,990 INFO L858 garLoopResultBuilder]: For program point L995-27(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,990 INFO L854 garLoopResultBuilder]: At program point L850-9(lines 846 870) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,990 INFO L858 garLoopResultBuilder]: For program point L660-10(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,990 INFO L854 garLoopResultBuilder]: At program point L816-21(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,990 INFO L858 garLoopResultBuilder]: For program point L828-33(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,990 INFO L858 garLoopResultBuilder]: For program point L660(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,990 INFO L854 garLoopResultBuilder]: At program point L816-1(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,990 INFO L858 garLoopResultBuilder]: For program point L828-3(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,990 INFO L858 garLoopResultBuilder]: For program point L995-8(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,990 INFO L858 garLoopResultBuilder]: For program point L912-9(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,990 INFO L854 garLoopResultBuilder]: At program point L912-14(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,990 INFO L854 garLoopResultBuilder]: At program point L902-4(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,990 INFO L858 garLoopResultBuilder]: For program point L854-12(lines 854 862) no Hoare annotation was computed. [2022-01-11 00:05:03,990 INFO L858 garLoopResultBuilder]: For program point L995-29(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,990 INFO L854 garLoopResultBuilder]: At program point L665-10(lines 656 669) the Hoare annotation is: false [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L824-21(lines 820 844) the Hoare annotation is: false [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L620-16(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L816-22(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L665(lines 656 669) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L824-1(lines 820 844) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse3 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3))) [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L620-2(lines 615 623) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L816-2(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L1001-2(lines 986 1004) the Hoare annotation is: false [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L912-11(lines 905 921) the Hoare annotation is: (let ((.cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1))) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|)) (.cse6 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse4 .cse5 .cse6 (<= ~methaneLevelCritical~0Int 0) .cse7) (and .cse0 .cse1 .cse2 (= ~pumpRunning~0Int 0) .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int|) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse4 .cse5 .cse6 (<= 1 |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~9#1Int|) (<= 1 ~methaneLevelCritical~0Int) .cse7))) [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L902-3(lines 897 904) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L927-7(lines 922 929) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,991 INFO L858 garLoopResultBuilder]: For program point L824-16(lines 824 841) no Hoare annotation was computed. [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L1001-9(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,991 INFO L858 garLoopResultBuilder]: For program point L995-30(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,991 INFO L854 garLoopResultBuilder]: At program point L937-14(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,992 INFO L858 garLoopResultBuilder]: For program point L995(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,992 INFO L854 garLoopResultBuilder]: At program point L937-2(lines 930 940) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,992 INFO L858 garLoopResultBuilder]: For program point L828-6(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,992 INFO L858 garLoopResultBuilder]: For program point L660-8(lines 660 666) no Hoare annotation was computed. [2022-01-11 00:05:03,992 INFO L854 garLoopResultBuilder]: At program point L816-17(lines 812 818) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,992 INFO L858 garLoopResultBuilder]: For program point L828-27(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,992 INFO L858 garLoopResultBuilder]: For program point L995-32(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,992 INFO L858 garLoopResultBuilder]: For program point L912-33(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,992 INFO L858 garLoopResultBuilder]: For program point L995-2(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,992 INFO L858 garLoopResultBuilder]: For program point L912-3(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,992 INFO L854 garLoopResultBuilder]: At program point L620-3(lines 615 623) the Hoare annotation is: false [2022-01-11 00:05:03,992 INFO L854 garLoopResultBuilder]: At program point L816-4(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,992 INFO L854 garLoopResultBuilder]: At program point L665-8(lines 656 669) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,992 INFO L854 garLoopResultBuilder]: At program point L824-17(lines 820 844) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,992 INFO L854 garLoopResultBuilder]: At program point L620-14(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,992 INFO L854 garLoopResultBuilder]: At program point L816-18(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,993 INFO L854 garLoopResultBuilder]: At program point L1001-10(lines 986 1004) the Hoare annotation is: false [2022-01-11 00:05:03,993 INFO L854 garLoopResultBuilder]: At program point L912-35(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,993 INFO L854 garLoopResultBuilder]: At program point L902-11(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,993 INFO L854 garLoopResultBuilder]: At program point L1001(lines 986 1004) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0) .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 0) .cse3 .cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int|)) (and (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) .cse0 .cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) .cse2 .cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-11 00:05:03,993 INFO L854 garLoopResultBuilder]: At program point L912-5(lines 905 921) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,993 INFO L854 garLoopResultBuilder]: At program point L902-1(lines 897 904) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,993 INFO L854 garLoopResultBuilder]: At program point L937-3(lines 930 940) the Hoare annotation is: false [2022-01-11 00:05:03,993 INFO L858 garLoopResultBuilder]: For program point L995-24(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,993 INFO L854 garLoopResultBuilder]: At program point L937-12(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,993 INFO L858 garLoopResultBuilder]: For program point L828-30(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,993 INFO L858 garLoopResultBuilder]: For program point L828(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,993 INFO L858 garLoopResultBuilder]: For program point L912-6(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,993 INFO L858 garLoopResultBuilder]: For program point L995-26(lines 995 999) no Hoare annotation was computed. [2022-01-11 00:05:03,993 INFO L858 garLoopResultBuilder]: For program point L912-27(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,993 INFO L854 garLoopResultBuilder]: At program point L620-15(lines 615 623) the Hoare annotation is: false [2022-01-11 00:05:03,993 INFO L854 garLoopResultBuilder]: At program point L816-20(lines 812 818) the Hoare annotation is: false [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L620-1(lines 615 623) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L816(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L912-8(lines 905 921) the Hoare annotation is: false [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L902-2(lines 897 904) the Hoare annotation is: false [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L1001-8(lines 986 1004) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L912-29(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L902-9(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L937-13(lines 930 940) the Hoare annotation is: false [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L937-1(lines 930 940) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,994 INFO L858 garLoopResultBuilder]: For program point L828-24(lines 828 836) no Hoare annotation was computed. [2022-01-11 00:05:03,994 INFO L858 garLoopResultBuilder]: For program point L912-30(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,994 INFO L858 garLoopResultBuilder]: For program point L912(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L620-13(lines 615 623) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L816-16(lines 812 818) the Hoare annotation is: (and (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int| 1)) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L912-32(lines 905 921) the Hoare annotation is: false [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L902-10(lines 897 904) the Hoare annotation is: false [2022-01-11 00:05:03,994 INFO L854 garLoopResultBuilder]: At program point L912-2(lines 905 921) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,995 INFO L854 garLoopResultBuilder]: At program point L902(lines 897 904) the Hoare annotation is: (and (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 0) (<= 1 ~systemActive~0Int) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp~10#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~2#1Int| 1) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)) [2022-01-11 00:05:03,995 INFO L854 garLoopResultBuilder]: At program point L937-11(lines 930 940) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,995 INFO L858 garLoopResultBuilder]: For program point L912-24(lines 912 918) no Hoare annotation was computed. [2022-01-11 00:05:03,995 INFO L854 garLoopResultBuilder]: At program point L912-26(lines 905 921) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,995 INFO L854 garLoopResultBuilder]: At program point L902-8(lines 897 904) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 1)) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4#1Int| 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 00:05:03,997 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:03,998 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-11 00:05:04,110 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:05:04 BasicIcfg [2022-01-11 00:05:04,110 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-11 00:05:04,111 INFO L158 Benchmark]: Toolchain (without parser) took 31678.93ms. Allocated memory was 201.3MB in the beginning and 507.5MB in the end (delta: 306.2MB). Free memory was 150.5MB in the beginning and 320.0MB in the end (delta: -169.5MB). Peak memory consumption was 284.5MB. Max. memory is 8.0GB. [2022-01-11 00:05:04,111 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 201.3MB. Free memory is still 167.8MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-11 00:05:04,111 INFO L158 Benchmark]: CACSL2BoogieTranslator took 452.81ms. Allocated memory is still 201.3MB. Free memory was 150.4MB in the beginning and 162.0MB in the end (delta: -11.6MB). Peak memory consumption was 14.7MB. Max. memory is 8.0GB. [2022-01-11 00:05:04,111 INFO L158 Benchmark]: Boogie Procedure Inliner took 63.43ms. Allocated memory is still 201.3MB. Free memory was 162.0MB in the beginning and 156.7MB in the end (delta: 5.2MB). Peak memory consumption was 5.2MB. Max. memory is 8.0GB. [2022-01-11 00:05:04,111 INFO L158 Benchmark]: Boogie Preprocessor took 45.56ms. Allocated memory is still 201.3MB. Free memory was 156.7MB in the beginning and 152.5MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2022-01-11 00:05:04,112 INFO L158 Benchmark]: RCFGBuilder took 687.06ms. Allocated memory is still 201.3MB. Free memory was 152.5MB in the beginning and 116.9MB in the end (delta: 35.7MB). Peak memory consumption was 35.7MB. Max. memory is 8.0GB. [2022-01-11 00:05:04,112 INFO L158 Benchmark]: IcfgTransformer took 159.12ms. Allocated memory is still 201.3MB. Free memory was 116.9MB in the beginning and 100.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 8.0GB. [2022-01-11 00:05:04,112 INFO L158 Benchmark]: TraceAbstraction took 30265.98ms. Allocated memory was 201.3MB in the beginning and 507.5MB in the end (delta: 306.2MB). Free memory was 99.6MB in the beginning and 320.0MB in the end (delta: -220.5MB). Peak memory consumption was 234.1MB. Max. memory is 8.0GB. [2022-01-11 00:05:04,113 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 201.3MB. Free memory is still 167.8MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 452.81ms. Allocated memory is still 201.3MB. Free memory was 150.4MB in the beginning and 162.0MB in the end (delta: -11.6MB). Peak memory consumption was 14.7MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 63.43ms. Allocated memory is still 201.3MB. Free memory was 162.0MB in the beginning and 156.7MB in the end (delta: 5.2MB). Peak memory consumption was 5.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 45.56ms. Allocated memory is still 201.3MB. Free memory was 156.7MB in the beginning and 152.5MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * RCFGBuilder took 687.06ms. Allocated memory is still 201.3MB. Free memory was 152.5MB in the beginning and 116.9MB in the end (delta: 35.7MB). Peak memory consumption was 35.7MB. Max. memory is 8.0GB. * IcfgTransformer took 159.12ms. Allocated memory is still 201.3MB. Free memory was 116.9MB in the beginning and 100.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 8.0GB. * TraceAbstraction took 30265.98ms. Allocated memory was 201.3MB in the beginning and 507.5MB in the end (delta: 306.2MB). Free memory was 99.6MB in the beginning and 320.0MB in the end (delta: -220.5MB). Peak memory consumption was 234.1MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 526]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 326 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 30.1s, OverallIterations: 13, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 26.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4658 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4658 mSDsluCounter, 9517 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5707 mSDsCounter, 232 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 706 IncrementalHoareTripleChecker+Invalid, 938 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 232 mSolverCounterUnsat, 3810 mSDtfsCounter, 706 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 98 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 73 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=860occurred in iteration=7, InterpolantAutomatonStates: 77, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 13 MinimizatonAttempts, 2576 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 177 LocationsWithAnnotation, 177 PreInvPairs, 491 NumberOfFragments, 4671 HoareAnnotationTreeSize, 177 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 19.5s HoareSimplificationTime, 177 FomulaSimplificationsInter, 4593693 FormulaSimplificationTreeSizeReductionInter, 7.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 758 NumberOfCodeBlocks, 758 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 745 ConstructedInterpolants, 0 QuantifiedInterpolants, 1416 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 13 InterpolantComputations, 13 PerfectInterpolantSequences, 186/186 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((~bvule32(tmp, 0bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 716]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || ((((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, tmp) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, tmp) && ~bvule32(1bv32, methaneLevelCritical)) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 698]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || ((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || (((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp___0, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(tmp___0, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning)) || ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp___0, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning)) || ((((((~bvule32(tmp___0, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning)) || ((((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || (((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 591]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 603]: Loop Invariant Derived loop invariant: (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 670]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: ((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: (((((((~bvule32(tmp, 0bv32) && ~bvule32(methaneLevelCritical, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp___0, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && 0bv32 == pumpRunning) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 846]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) || (((((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 820]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((((((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(1bv32, methaneLevelCritical) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) && ~bvule32(\result, pumpRunning) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, tmp)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 1024]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && tmp___0 == 1bv32) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, \result)) && ~bvule32(tmp, 0bv32))) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning RESULT: Ultimate proved your program to be correct! [2022-01-11 00:05:04,212 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...