/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec3_product41.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-11 00:05:08,911 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-11 00:05:08,913 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-11 00:05:08,966 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-11 00:05:08,966 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-11 00:05:08,969 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-11 00:05:08,971 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-11 00:05:08,973 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-11 00:05:08,974 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-11 00:05:08,979 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-11 00:05:08,979 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-11 00:05:08,980 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-11 00:05:08,980 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-11 00:05:08,981 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-11 00:05:08,981 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-11 00:05:08,982 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-11 00:05:08,982 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-11 00:05:08,983 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-11 00:05:08,984 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-11 00:05:08,985 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-11 00:05:08,985 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-11 00:05:08,989 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-11 00:05:08,992 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-11 00:05:08,993 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-11 00:05:08,996 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-11 00:05:08,996 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-11 00:05:08,996 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-11 00:05:08,997 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-11 00:05:08,997 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-11 00:05:08,998 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-11 00:05:08,998 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-11 00:05:08,998 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-11 00:05:08,999 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-11 00:05:08,999 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-11 00:05:09,000 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-11 00:05:09,001 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-11 00:05:09,001 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-11 00:05:09,001 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-11 00:05:09,001 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-11 00:05:09,002 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-11 00:05:09,002 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-11 00:05:09,003 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf [2022-01-11 00:05:09,027 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-11 00:05:09,027 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-11 00:05:09,027 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-11 00:05:09,027 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-11 00:05:09,028 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-11 00:05:09,028 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-11 00:05:09,028 INFO L138 SettingsManager]: * Use SBE=true [2022-01-11 00:05:09,029 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-11 00:05:09,029 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-11 00:05:09,029 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-11 00:05:09,029 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-11 00:05:09,029 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-11 00:05:09,029 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-11 00:05:09,030 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-11 00:05:09,030 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-11 00:05:09,030 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-11 00:05:09,030 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-11 00:05:09,030 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-11 00:05:09,030 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-11 00:05:09,030 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-11 00:05:09,030 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-11 00:05:09,031 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:05:09,031 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-11 00:05:09,031 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-11 00:05:09,031 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-11 00:05:09,031 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-11 00:05:09,031 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-11 00:05:09,032 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-11 00:05:09,032 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-11 00:05:09,032 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-11 00:05:09,032 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-11 00:05:09,032 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-11 00:05:09,033 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-11 00:05:09,033 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_NONE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-11 00:05:09,202 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-11 00:05:09,221 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-11 00:05:09,222 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-11 00:05:09,223 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-11 00:05:09,224 INFO L275 PluginConnector]: CDTParser initialized [2022-01-11 00:05:09,224 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec3_product41.cil.c [2022-01-11 00:05:09,282 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ea2b0fc8e/efdc4cc6b4314d19a6e83cb6e3c71b5e/FLAG0813d5234 [2022-01-11 00:05:09,620 INFO L306 CDTParser]: Found 1 translation units. [2022-01-11 00:05:09,620 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product41.cil.c [2022-01-11 00:05:09,639 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ea2b0fc8e/efdc4cc6b4314d19a6e83cb6e3c71b5e/FLAG0813d5234 [2022-01-11 00:05:09,649 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ea2b0fc8e/efdc4cc6b4314d19a6e83cb6e3c71b5e [2022-01-11 00:05:09,650 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-11 00:05:09,651 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-11 00:05:09,652 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-11 00:05:09,652 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-11 00:05:09,660 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-11 00:05:09,660 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:05:09" (1/1) ... [2022-01-11 00:05:09,661 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@304f7ff3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:09, skipping insertion in model container [2022-01-11 00:05:09,661 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:05:09" (1/1) ... [2022-01-11 00:05:09,665 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-11 00:05:09,688 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:05:09,923 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product41.cil.c[17978,17991] [2022-01-11 00:05:09,925 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:05:09,940 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-11 00:05:09,951 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:05:10,009 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product41.cil.c[17978,17991] [2022-01-11 00:05:10,010 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:05:10,018 INFO L203 MainTranslator]: Completed pre-run [2022-01-11 00:05:10,068 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec3_product41.cil.c[17978,17991] [2022-01-11 00:05:10,068 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:05:10,097 INFO L208 MainTranslator]: Completed translation [2022-01-11 00:05:10,097 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10 WrapperNode [2022-01-11 00:05:10,098 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-11 00:05:10,098 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-11 00:05:10,098 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-11 00:05:10,099 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-11 00:05:10,104 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10" (1/1) ... [2022-01-11 00:05:10,114 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10" (1/1) ... [2022-01-11 00:05:10,144 INFO L137 Inliner]: procedures = 55, calls = 152, calls flagged for inlining = 49, calls inlined = 59, statements flattened = 485 [2022-01-11 00:05:10,145 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-11 00:05:10,145 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-11 00:05:10,145 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-11 00:05:10,145 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-11 00:05:10,154 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10" (1/1) ... [2022-01-11 00:05:10,154 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10" (1/1) ... [2022-01-11 00:05:10,164 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10" (1/1) ... [2022-01-11 00:05:10,164 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10" (1/1) ... [2022-01-11 00:05:10,170 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10" (1/1) ... [2022-01-11 00:05:10,174 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10" (1/1) ... [2022-01-11 00:05:10,187 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10" (1/1) ... [2022-01-11 00:05:10,200 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-11 00:05:10,201 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-11 00:05:10,201 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-11 00:05:10,201 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-11 00:05:10,202 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10" (1/1) ... [2022-01-11 00:05:10,206 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:05:10,214 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 00:05:10,225 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-11 00:05:10,229 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-11 00:05:10,250 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-11 00:05:10,250 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-11 00:05:10,250 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-11 00:05:10,250 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-11 00:05:10,323 INFO L234 CfgBuilder]: Building ICFG [2022-01-11 00:05:10,324 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-11 00:05:10,661 INFO L275 CfgBuilder]: Performing block encoding [2022-01-11 00:05:10,666 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-11 00:05:10,667 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-11 00:05:10,668 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:05:10 BoogieIcfgContainer [2022-01-11 00:05:10,668 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-11 00:05:10,669 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-11 00:05:10,669 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-11 00:05:10,670 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-11 00:05:10,671 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:05:10" (1/1) ... [2022-01-11 00:05:10,743 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:05:10 BasicIcfg [2022-01-11 00:05:10,744 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-11 00:05:10,745 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-11 00:05:10,745 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-11 00:05:10,747 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-11 00:05:10,747 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.01 12:05:09" (1/4) ... [2022-01-11 00:05:10,748 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5ff64b4b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:05:10, skipping insertion in model container [2022-01-11 00:05:10,748 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:05:10" (2/4) ... [2022-01-11 00:05:10,748 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5ff64b4b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:05:10, skipping insertion in model container [2022-01-11 00:05:10,748 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:05:10" (3/4) ... [2022-01-11 00:05:10,748 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5ff64b4b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:05:10, skipping insertion in model container [2022-01-11 00:05:10,748 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:05:10" (4/4) ... [2022-01-11 00:05:10,749 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product41.cil.cTransformedIcfg [2022-01-11 00:05:10,754 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-11 00:05:10,754 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-11 00:05:10,793 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-11 00:05:10,813 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-11 00:05:10,813 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-11 00:05:10,826 INFO L276 IsEmpty]: Start isEmpty. Operand has 126 states, 122 states have (on average 1.401639344262295) internal successors, (171), 125 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:10,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-11 00:05:10,832 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:05:10,832 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:10,832 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:05:10,840 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:05:10,840 INFO L85 PathProgramCache]: Analyzing trace with hash -1704680373, now seen corresponding path program 1 times [2022-01-11 00:05:10,846 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:05:10,846 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [242463662] [2022-01-11 00:05:10,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:05:10,847 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:05:10,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:05:11,047 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:05:11,048 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:05:11,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [242463662] [2022-01-11 00:05:11,049 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [242463662] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:05:11,049 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:05:11,049 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:05:11,051 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [208998724] [2022-01-11 00:05:11,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:05:11,054 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-11 00:05:11,055 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:05:11,077 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-11 00:05:11,078 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:05:11,081 INFO L87 Difference]: Start difference. First operand has 126 states, 122 states have (on average 1.401639344262295) internal successors, (171), 125 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:05:11,117 INFO L93 Difference]: Finished difference Result 242 states and 331 transitions. [2022-01-11 00:05:11,118 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-11 00:05:11,119 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-11 00:05:11,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:05:11,127 INFO L225 Difference]: With dead ends: 242 [2022-01-11 00:05:11,127 INFO L226 Difference]: Without dead ends: 116 [2022-01-11 00:05:11,130 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:05:11,133 INFO L933 BasicCegarLoop]: 161 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:05:11,134 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 161 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:05:11,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2022-01-11 00:05:11,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 116. [2022-01-11 00:05:11,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 116 states, 113 states have (on average 1.3539823008849559) internal successors, (153), 115 states have internal predecessors, (153), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116 states to 116 states and 153 transitions. [2022-01-11 00:05:11,176 INFO L78 Accepts]: Start accepts. Automaton has 116 states and 153 transitions. Word has length 19 [2022-01-11 00:05:11,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:05:11,176 INFO L470 AbstractCegarLoop]: Abstraction has 116 states and 153 transitions. [2022-01-11 00:05:11,176 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,177 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 153 transitions. [2022-01-11 00:05:11,179 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-11 00:05:11,179 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:05:11,179 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:11,180 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-11 00:05:11,180 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:05:11,182 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:05:11,182 INFO L85 PathProgramCache]: Analyzing trace with hash 559507596, now seen corresponding path program 1 times [2022-01-11 00:05:11,182 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:05:11,182 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2037041242] [2022-01-11 00:05:11,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:05:11,183 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:05:11,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:05:11,262 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:05:11,262 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:05:11,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2037041242] [2022-01-11 00:05:11,263 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2037041242] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:05:11,263 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:05:11,263 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:05:11,264 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [556407983] [2022-01-11 00:05:11,264 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:05:11,265 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:05:11,265 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:05:11,266 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:05:11,269 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:05:11,269 INFO L87 Difference]: Start difference. First operand 116 states and 153 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:05:11,297 INFO L93 Difference]: Finished difference Result 225 states and 299 transitions. [2022-01-11 00:05:11,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:05:11,300 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-11 00:05:11,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:05:11,302 INFO L225 Difference]: With dead ends: 225 [2022-01-11 00:05:11,303 INFO L226 Difference]: Without dead ends: 116 [2022-01-11 00:05:11,303 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:05:11,304 INFO L933 BasicCegarLoop]: 147 mSDtfsCounter, 139 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:05:11,304 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [139 Valid, 147 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:05:11,305 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2022-01-11 00:05:11,310 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 116. [2022-01-11 00:05:11,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 116 states, 113 states have (on average 1.3274336283185841) internal successors, (150), 115 states have internal predecessors, (150), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116 states to 116 states and 150 transitions. [2022-01-11 00:05:11,313 INFO L78 Accepts]: Start accepts. Automaton has 116 states and 150 transitions. Word has length 20 [2022-01-11 00:05:11,313 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:05:11,313 INFO L470 AbstractCegarLoop]: Abstraction has 116 states and 150 transitions. [2022-01-11 00:05:11,313 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,313 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 150 transitions. [2022-01-11 00:05:11,314 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-01-11 00:05:11,314 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:05:11,314 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:11,314 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-11 00:05:11,314 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:05:11,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:05:11,315 INFO L85 PathProgramCache]: Analyzing trace with hash 1541113879, now seen corresponding path program 1 times [2022-01-11 00:05:11,315 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:05:11,315 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112345412] [2022-01-11 00:05:11,315 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:05:11,315 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:05:11,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:05:11,362 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:05:11,363 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:05:11,363 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112345412] [2022-01-11 00:05:11,363 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112345412] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:05:11,363 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:05:11,363 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:05:11,363 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [965266268] [2022-01-11 00:05:11,363 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:05:11,364 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:05:11,364 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:05:11,364 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:05:11,364 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:05:11,364 INFO L87 Difference]: Start difference. First operand 116 states and 150 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,409 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:05:11,409 INFO L93 Difference]: Finished difference Result 292 states and 379 transitions. [2022-01-11 00:05:11,409 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:05:11,409 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-01-11 00:05:11,410 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:05:11,413 INFO L225 Difference]: With dead ends: 292 [2022-01-11 00:05:11,413 INFO L226 Difference]: Without dead ends: 183 [2022-01-11 00:05:11,417 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:05:11,420 INFO L933 BasicCegarLoop]: 155 mSDtfsCounter, 114 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 114 SdHoareTripleChecker+Valid, 241 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:05:11,420 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [114 Valid, 241 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:05:11,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2022-01-11 00:05:11,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 177. [2022-01-11 00:05:11,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 174 states have (on average 1.3045977011494252) internal successors, (227), 176 states have internal predecessors, (227), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 227 transitions. [2022-01-11 00:05:11,431 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 227 transitions. Word has length 23 [2022-01-11 00:05:11,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:05:11,431 INFO L470 AbstractCegarLoop]: Abstraction has 177 states and 227 transitions. [2022-01-11 00:05:11,431 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,431 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 227 transitions. [2022-01-11 00:05:11,432 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-01-11 00:05:11,432 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:05:11,432 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:11,432 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-11 00:05:11,432 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:05:11,433 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:05:11,433 INFO L85 PathProgramCache]: Analyzing trace with hash 795319679, now seen corresponding path program 1 times [2022-01-11 00:05:11,433 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:05:11,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [109523836] [2022-01-11 00:05:11,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:05:11,433 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:05:11,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:05:11,509 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:05:11,510 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:05:11,510 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [109523836] [2022-01-11 00:05:11,510 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [109523836] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:05:11,510 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:05:11,510 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:05:11,510 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1740486583] [2022-01-11 00:05:11,511 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:05:11,511 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-11 00:05:11,512 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:05:11,513 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-11 00:05:11,513 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-11 00:05:11,513 INFO L87 Difference]: Start difference. First operand 177 states and 227 transitions. Second operand has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:05:11,593 INFO L93 Difference]: Finished difference Result 675 states and 866 transitions. [2022-01-11 00:05:11,593 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 00:05:11,593 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-01-11 00:05:11,593 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:05:11,596 INFO L225 Difference]: With dead ends: 675 [2022-01-11 00:05:11,596 INFO L226 Difference]: Without dead ends: 505 [2022-01-11 00:05:11,596 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:05:11,597 INFO L933 BasicCegarLoop]: 300 mSDtfsCounter, 308 mSDsluCounter, 401 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 308 SdHoareTripleChecker+Valid, 701 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:05:11,597 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [308 Valid, 701 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:05:11,598 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 505 states. [2022-01-11 00:05:11,614 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 505 to 183. [2022-01-11 00:05:11,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 183 states, 180 states have (on average 1.2944444444444445) internal successors, (233), 182 states have internal predecessors, (233), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 183 states to 183 states and 233 transitions. [2022-01-11 00:05:11,616 INFO L78 Accepts]: Start accepts. Automaton has 183 states and 233 transitions. Word has length 29 [2022-01-11 00:05:11,616 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:05:11,616 INFO L470 AbstractCegarLoop]: Abstraction has 183 states and 233 transitions. [2022-01-11 00:05:11,616 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 7.25) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,616 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 233 transitions. [2022-01-11 00:05:11,617 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-01-11 00:05:11,617 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:05:11,617 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:11,617 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-11 00:05:11,617 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:05:11,618 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:05:11,618 INFO L85 PathProgramCache]: Analyzing trace with hash 289761054, now seen corresponding path program 1 times [2022-01-11 00:05:11,618 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:05:11,618 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [529571842] [2022-01-11 00:05:11,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:05:11,618 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:05:11,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:05:11,662 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:05:11,663 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:05:11,663 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [529571842] [2022-01-11 00:05:11,663 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [529571842] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:05:11,663 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:05:11,663 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:05:11,663 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1240116556] [2022-01-11 00:05:11,663 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:05:11,664 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:05:11,664 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:05:11,664 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:05:11,664 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:05:11,664 INFO L87 Difference]: Start difference. First operand 183 states and 233 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,847 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:05:11,847 INFO L93 Difference]: Finished difference Result 965 states and 1244 transitions. [2022-01-11 00:05:11,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-01-11 00:05:11,848 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-01-11 00:05:11,848 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:05:11,849 INFO L225 Difference]: With dead ends: 965 [2022-01-11 00:05:11,849 INFO L226 Difference]: Without dead ends: 555 [2022-01-11 00:05:11,850 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-01-11 00:05:11,851 INFO L933 BasicCegarLoop]: 240 mSDtfsCounter, 626 mSDsluCounter, 596 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 626 SdHoareTripleChecker+Valid, 836 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:05:11,851 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [626 Valid, 836 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:05:11,853 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 555 states. [2022-01-11 00:05:11,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 555 to 247. [2022-01-11 00:05:11,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 247 states, 244 states have (on average 1.290983606557377) internal successors, (315), 246 states have internal predecessors, (315), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,882 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 247 states to 247 states and 315 transitions. [2022-01-11 00:05:11,884 INFO L78 Accepts]: Start accepts. Automaton has 247 states and 315 transitions. Word has length 29 [2022-01-11 00:05:11,885 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:05:11,888 INFO L470 AbstractCegarLoop]: Abstraction has 247 states and 315 transitions. [2022-01-11 00:05:11,888 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:11,888 INFO L276 IsEmpty]: Start isEmpty. Operand 247 states and 315 transitions. [2022-01-11 00:05:11,892 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-01-11 00:05:11,892 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:05:11,892 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:11,892 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-11 00:05:11,893 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:05:11,893 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:05:11,893 INFO L85 PathProgramCache]: Analyzing trace with hash 1492809695, now seen corresponding path program 1 times [2022-01-11 00:05:11,893 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:05:11,893 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2030693970] [2022-01-11 00:05:11,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:05:11,893 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:05:11,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:05:12,004 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:05:12,005 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:05:12,005 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2030693970] [2022-01-11 00:05:12,005 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2030693970] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:05:12,005 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:05:12,005 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-11 00:05:12,005 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [855048714] [2022-01-11 00:05:12,005 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:05:12,006 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-01-11 00:05:12,006 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:05:12,006 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-01-11 00:05:12,006 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:05:12,006 INFO L87 Difference]: Start difference. First operand 247 states and 315 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:12,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:05:12,194 INFO L93 Difference]: Finished difference Result 699 states and 896 transitions. [2022-01-11 00:05:12,194 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-11 00:05:12,194 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-01-11 00:05:12,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:05:12,196 INFO L225 Difference]: With dead ends: 699 [2022-01-11 00:05:12,196 INFO L226 Difference]: Without dead ends: 459 [2022-01-11 00:05:12,196 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:05:12,197 INFO L933 BasicCegarLoop]: 231 mSDtfsCounter, 152 mSDsluCounter, 957 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 152 SdHoareTripleChecker+Valid, 1188 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:05:12,198 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [152 Valid, 1188 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:05:12,198 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 459 states. [2022-01-11 00:05:12,255 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 459 to 453. [2022-01-11 00:05:12,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 453 states, 450 states have (on average 1.28) internal successors, (576), 452 states have internal predecessors, (576), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:12,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 453 states to 453 states and 576 transitions. [2022-01-11 00:05:12,257 INFO L78 Accepts]: Start accepts. Automaton has 453 states and 576 transitions. Word has length 37 [2022-01-11 00:05:12,257 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:05:12,257 INFO L470 AbstractCegarLoop]: Abstraction has 453 states and 576 transitions. [2022-01-11 00:05:12,257 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:12,258 INFO L276 IsEmpty]: Start isEmpty. Operand 453 states and 576 transitions. [2022-01-11 00:05:12,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-01-11 00:05:12,258 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:05:12,258 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:12,258 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-11 00:05:12,259 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:05:12,259 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:05:12,259 INFO L85 PathProgramCache]: Analyzing trace with hash 476716893, now seen corresponding path program 1 times [2022-01-11 00:05:12,259 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:05:12,259 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1726846971] [2022-01-11 00:05:12,259 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:05:12,259 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:05:12,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:05:12,294 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:05:12,294 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:05:12,294 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1726846971] [2022-01-11 00:05:12,294 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1726846971] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:05:12,295 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:05:12,295 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:05:12,295 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462078242] [2022-01-11 00:05:12,295 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:05:12,295 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:05:12,295 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:05:12,295 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:05:12,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:05:12,296 INFO L87 Difference]: Start difference. First operand 453 states and 576 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:12,394 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:05:12,395 INFO L93 Difference]: Finished difference Result 1301 states and 1664 transitions. [2022-01-11 00:05:12,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 00:05:12,395 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-01-11 00:05:12,395 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:05:12,398 INFO L225 Difference]: With dead ends: 1301 [2022-01-11 00:05:12,398 INFO L226 Difference]: Without dead ends: 855 [2022-01-11 00:05:12,398 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:05:12,399 INFO L933 BasicCegarLoop]: 236 mSDtfsCounter, 431 mSDsluCounter, 452 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 431 SdHoareTripleChecker+Valid, 688 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:05:12,399 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [431 Valid, 688 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:05:12,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 855 states. [2022-01-11 00:05:12,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 855 to 465. [2022-01-11 00:05:12,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 465 states, 462 states have (on average 1.2662337662337662) internal successors, (585), 464 states have internal predecessors, (585), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:12,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 465 states to 465 states and 585 transitions. [2022-01-11 00:05:12,434 INFO L78 Accepts]: Start accepts. Automaton has 465 states and 585 transitions. Word has length 37 [2022-01-11 00:05:12,434 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:05:12,434 INFO L470 AbstractCegarLoop]: Abstraction has 465 states and 585 transitions. [2022-01-11 00:05:12,434 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:12,434 INFO L276 IsEmpty]: Start isEmpty. Operand 465 states and 585 transitions. [2022-01-11 00:05:12,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-01-11 00:05:12,435 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:05:12,435 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:12,435 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-11 00:05:12,435 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:05:12,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:05:12,436 INFO L85 PathProgramCache]: Analyzing trace with hash 485046962, now seen corresponding path program 1 times [2022-01-11 00:05:12,436 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:05:12,436 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [343002486] [2022-01-11 00:05:12,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:05:12,436 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:05:12,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:05:12,478 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:05:12,478 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:05:12,478 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [343002486] [2022-01-11 00:05:12,479 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [343002486] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:05:12,479 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:05:12,479 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:05:12,479 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [118640492] [2022-01-11 00:05:12,479 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:05:12,479 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-11 00:05:12,479 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:05:12,480 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-11 00:05:12,480 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-11 00:05:12,480 INFO L87 Difference]: Start difference. First operand 465 states and 585 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:12,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:05:12,802 INFO L93 Difference]: Finished difference Result 2890 states and 3638 transitions. [2022-01-11 00:05:12,802 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-01-11 00:05:12,802 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-01-11 00:05:12,802 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:05:12,809 INFO L225 Difference]: With dead ends: 2890 [2022-01-11 00:05:12,809 INFO L226 Difference]: Without dead ends: 2432 [2022-01-11 00:05:12,810 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-01-11 00:05:12,812 INFO L933 BasicCegarLoop]: 202 mSDtfsCounter, 1097 mSDsluCounter, 1256 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1097 SdHoareTripleChecker+Valid, 1458 SdHoareTripleChecker+Invalid, 163 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:05:12,815 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1097 Valid, 1458 Invalid, 163 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:05:12,817 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2432 states. [2022-01-11 00:05:12,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2432 to 867. [2022-01-11 00:05:12,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 867 states, 864 states have (on average 1.2534722222222223) internal successors, (1083), 866 states have internal predecessors, (1083), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:12,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 867 states to 867 states and 1083 transitions. [2022-01-11 00:05:12,899 INFO L78 Accepts]: Start accepts. Automaton has 867 states and 1083 transitions. Word has length 40 [2022-01-11 00:05:12,899 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:05:12,899 INFO L470 AbstractCegarLoop]: Abstraction has 867 states and 1083 transitions. [2022-01-11 00:05:12,900 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:12,900 INFO L276 IsEmpty]: Start isEmpty. Operand 867 states and 1083 transitions. [2022-01-11 00:05:12,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-01-11 00:05:12,901 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:05:12,901 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:12,901 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-11 00:05:12,901 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:05:12,901 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:05:12,901 INFO L85 PathProgramCache]: Analyzing trace with hash -1522856295, now seen corresponding path program 1 times [2022-01-11 00:05:12,902 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:05:12,902 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1379821584] [2022-01-11 00:05:12,902 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:05:12,902 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:05:12,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:05:12,976 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:05:12,976 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:05:12,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1379821584] [2022-01-11 00:05:12,976 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1379821584] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:05:12,976 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:05:12,976 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:05:12,976 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [250399097] [2022-01-11 00:05:12,976 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:05:12,977 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:05:12,977 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:05:12,977 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:05:12,977 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:05:12,977 INFO L87 Difference]: Start difference. First operand 867 states and 1083 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:13,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:05:13,132 INFO L93 Difference]: Finished difference Result 1784 states and 2251 transitions. [2022-01-11 00:05:13,132 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-01-11 00:05:13,133 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-01-11 00:05:13,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:05:13,134 INFO L225 Difference]: With dead ends: 1784 [2022-01-11 00:05:13,134 INFO L226 Difference]: Without dead ends: 244 [2022-01-11 00:05:13,136 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-01-11 00:05:13,137 INFO L933 BasicCegarLoop]: 275 mSDtfsCounter, 356 mSDsluCounter, 648 mSDsCounter, 0 mSdLazyCounter, 83 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 356 SdHoareTripleChecker+Valid, 923 SdHoareTripleChecker+Invalid, 100 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 83 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:05:13,137 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [356 Valid, 923 Invalid, 100 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 83 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:05:13,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 244 states. [2022-01-11 00:05:13,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 244 to 173. [2022-01-11 00:05:13,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 173 states, 170 states have (on average 1.1588235294117648) internal successors, (197), 172 states have internal predecessors, (197), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:13,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 173 states to 173 states and 197 transitions. [2022-01-11 00:05:13,153 INFO L78 Accepts]: Start accepts. Automaton has 173 states and 197 transitions. Word has length 41 [2022-01-11 00:05:13,154 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:05:13,154 INFO L470 AbstractCegarLoop]: Abstraction has 173 states and 197 transitions. [2022-01-11 00:05:13,154 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:13,154 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 197 transitions. [2022-01-11 00:05:13,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-01-11 00:05:13,155 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:05:13,155 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:13,155 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-11 00:05:13,155 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:05:13,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:05:13,156 INFO L85 PathProgramCache]: Analyzing trace with hash 1893962349, now seen corresponding path program 1 times [2022-01-11 00:05:13,156 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:05:13,156 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1737939802] [2022-01-11 00:05:13,156 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:05:13,156 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:05:13,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:05:13,200 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:05:13,200 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:05:13,200 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1737939802] [2022-01-11 00:05:13,200 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1737939802] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:05:13,200 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:05:13,200 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:05:13,201 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1248247183] [2022-01-11 00:05:13,201 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:05:13,201 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:05:13,201 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:05:13,201 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:05:13,201 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:05:13,201 INFO L87 Difference]: Start difference. First operand 173 states and 197 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:13,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:05:13,270 INFO L93 Difference]: Finished difference Result 444 states and 507 transitions. [2022-01-11 00:05:13,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-11 00:05:13,271 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-01-11 00:05:13,271 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:05:13,271 INFO L225 Difference]: With dead ends: 444 [2022-01-11 00:05:13,271 INFO L226 Difference]: Without dead ends: 0 [2022-01-11 00:05:13,272 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-11 00:05:13,272 INFO L933 BasicCegarLoop]: 167 mSDtfsCounter, 239 mSDsluCounter, 257 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 424 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:05:13,273 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [239 Valid, 424 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:05:13,273 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-11 00:05:13,273 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-11 00:05:13,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:13,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-11 00:05:13,274 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 42 [2022-01-11 00:05:13,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:05:13,274 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-11 00:05:13,274 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:05:13,274 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-11 00:05:13,274 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-11 00:05:13,276 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-11 00:05:13,276 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-11 00:05:13,276 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-11 00:05:13,277 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-11 00:05:13,278 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-11 00:05:20,330 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-11 00:05:20,330 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-11 00:05:20,330 INFO L854 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:05:20,330 INFO L854 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:05:20,330 INFO L854 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:05:20,330 INFO L858 garLoopResultBuilder]: For program point L548(lines 548 555) no Hoare annotation was computed. [2022-01-11 00:05:20,330 INFO L854 garLoopResultBuilder]: At program point L525(lines 521 527) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 00:05:20,330 INFO L858 garLoopResultBuilder]: For program point L548-2(lines 548 555) no Hoare annotation was computed. [2022-01-11 00:05:20,330 INFO L854 garLoopResultBuilder]: At program point L281-2(lines 281 326) the Hoare annotation is: (let ((.cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse5 (<= 1 ~waterLevel~0Int)) (.cse2 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse2 .cse3 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) .cse4 (let ((.cse6 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse6) (<= (+ 2 .cse6) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and .cse0 .cse2 .cse3 .cse5 (<= ~methaneLevelCritical~0Int 0)) (and .cse2 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,331 INFO L861 garLoopResultBuilder]: At program point L557(lines 538 560) the Hoare annotation is: true [2022-01-11 00:05:20,331 INFO L854 garLoopResultBuilder]: At program point L327(lines 280 328) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 (= ~pumpRunning~0Int 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,331 INFO L858 garLoopResultBuilder]: For program point L282(lines 281 326) no Hoare annotation was computed. [2022-01-11 00:05:20,331 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-11 00:05:20,331 INFO L858 garLoopResultBuilder]: For program point L105-3(lines 105 111) no Hoare annotation was computed. [2022-01-11 00:05:20,331 INFO L858 garLoopResultBuilder]: For program point L283(lines 283 287) no Hoare annotation was computed. [2022-01-11 00:05:20,331 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-11 00:05:20,331 INFO L858 garLoopResultBuilder]: For program point L378-3(lines 378 382) no Hoare annotation was computed. [2022-01-11 00:05:20,331 INFO L858 garLoopResultBuilder]: For program point L105-5(lines 104 123) no Hoare annotation was computed. [2022-01-11 00:05:20,331 INFO L858 garLoopResultBuilder]: For program point L291(lines 291 297) no Hoare annotation was computed. [2022-01-11 00:05:20,331 INFO L854 garLoopResultBuilder]: At program point L378-5(lines 374 385) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,331 INFO L858 garLoopResultBuilder]: For program point L137-2(lines 137 154) no Hoare annotation was computed. [2022-01-11 00:05:20,331 INFO L858 garLoopResultBuilder]: For program point L112-3(lines 112 118) no Hoare annotation was computed. [2022-01-11 00:05:20,332 INFO L858 garLoopResultBuilder]: For program point L390(lines 390 394) no Hoare annotation was computed. [2022-01-11 00:05:20,332 INFO L858 garLoopResultBuilder]: For program point L291-2(lines 291 297) no Hoare annotation was computed. [2022-01-11 00:05:20,332 INFO L858 garLoopResultBuilder]: For program point L455-1(lines 455 461) no Hoare annotation was computed. [2022-01-11 00:05:20,332 INFO L854 garLoopResultBuilder]: At program point L129-3(lines 125 131) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,332 INFO L854 garLoopResultBuilder]: At program point L415-3(lines 410 418) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,332 INFO L854 garLoopResultBuilder]: At program point L390-2(lines 386 397) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (let ((.cse3 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse3) (<= (+ 2 .cse3) ~waterLevel~0Int)))) (.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2) (and .cse0 .cse1 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,332 INFO L858 garLoopResultBuilder]: For program point L301(lines 301 307) no Hoare annotation was computed. [2022-01-11 00:05:20,332 INFO L854 garLoopResultBuilder]: At program point L460-1(lines 451 464) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-11 00:05:20,332 INFO L854 garLoopResultBuilder]: At program point L137-3(lines 133 157) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 (= ~pumpRunning~0Int 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,332 INFO L858 garLoopResultBuilder]: For program point L347-2(lines 347 367) no Hoare annotation was computed. [2022-01-11 00:05:20,332 INFO L858 garLoopResultBuilder]: For program point L402(lines 402 406) no Hoare annotation was computed. [2022-01-11 00:05:20,332 INFO L858 garLoopResultBuilder]: For program point L301-2(lines 301 307) no Hoare annotation was computed. [2022-01-11 00:05:20,332 INFO L858 garLoopResultBuilder]: For program point L257-3(lines 257 261) no Hoare annotation was computed. [2022-01-11 00:05:20,333 INFO L854 garLoopResultBuilder]: At program point L353-3(lines 338 370) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 (= ~pumpRunning~0Int 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,333 INFO L854 garLoopResultBuilder]: At program point L447-1(lines 442 450) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,333 INFO L854 garLoopResultBuilder]: At program point L402-2(lines 398 409) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse1 (<= 1 ~systemActive~0Int))) (or (and .cse0 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse1 .cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse3) (and .cse1 .cse2 (let ((.cse4 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse4) (<= (+ 2 .cse4) ~waterLevel~0Int)))) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~methaneLevelCritical~0Int)) (and .cse1 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,333 INFO L858 garLoopResultBuilder]: For program point L311(lines 311 322) no Hoare annotation was computed. [2022-01-11 00:05:20,333 INFO L858 garLoopResultBuilder]: For program point L257-5(lines 257 261) no Hoare annotation was computed. [2022-01-11 00:05:20,333 INFO L854 garLoopResultBuilder]: At program point L122-1(lines 101 124) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 (= ~pumpRunning~0Int 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,333 INFO L858 garLoopResultBuilder]: For program point L353-2(lines 353 366) no Hoare annotation was computed. [2022-01-11 00:05:20,333 INFO L858 garLoopResultBuilder]: For program point L317-2(lines 311 322) no Hoare annotation was computed. [2022-01-11 00:05:20,333 INFO L858 garLoopResultBuilder]: For program point L317(lines 317 321) no Hoare annotation was computed. [2022-01-11 00:05:20,333 INFO L854 garLoopResultBuilder]: At program point L263-1(lines 248 266) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:05:20,333 INFO L854 garLoopResultBuilder]: At program point L477-2(lines 477 491) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 (= ~pumpRunning~0Int 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,334 INFO L854 garLoopResultBuilder]: At program point L208-1(lines 203 211) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1)) (= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 1)) [2022-01-11 00:05:20,334 INFO L858 garLoopResultBuilder]: For program point L105(lines 105 111) no Hoare annotation was computed. [2022-01-11 00:05:20,334 INFO L858 garLoopResultBuilder]: For program point L141-3(lines 141 149) no Hoare annotation was computed. [2022-01-11 00:05:20,334 INFO L861 garLoopResultBuilder]: At program point L492(lines 467 496) the Hoare annotation is: true [2022-01-11 00:05:20,334 INFO L858 garLoopResultBuilder]: For program point L478(line 478) no Hoare annotation was computed. [2022-01-11 00:05:20,334 INFO L858 garLoopResultBuilder]: For program point L357-3(lines 357 363) no Hoare annotation was computed. [2022-01-11 00:05:20,334 INFO L858 garLoopResultBuilder]: For program point L378(lines 378 382) no Hoare annotation was computed. [2022-01-11 00:05:20,334 INFO L858 garLoopResultBuilder]: For program point L105-2(lines 104 123) no Hoare annotation was computed. [2022-01-11 00:05:20,334 INFO L854 garLoopResultBuilder]: At program point L415-2(lines 410 418) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:05:20,334 INFO L854 garLoopResultBuilder]: At program point L129-2(lines 125 131) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-11 00:05:20,334 INFO L861 garLoopResultBuilder]: At program point L332(lines 271 334) the Hoare annotation is: true [2022-01-11 00:05:20,334 INFO L858 garLoopResultBuilder]: For program point L481(lines 481 485) no Hoare annotation was computed. [2022-01-11 00:05:20,334 INFO L858 garLoopResultBuilder]: For program point L932-1(line 932) no Hoare annotation was computed. [2022-01-11 00:05:20,334 INFO L854 garLoopResultBuilder]: At program point L378-2(lines 374 385) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))) [2022-01-11 00:05:20,334 INFO L858 garLoopResultBuilder]: For program point L137(lines 137 154) no Hoare annotation was computed. [2022-01-11 00:05:20,335 INFO L858 garLoopResultBuilder]: For program point L112-1(lines 112 118) no Hoare annotation was computed. [2022-01-11 00:05:20,335 INFO L854 garLoopResultBuilder]: At program point L199-1(lines 192 202) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:05:20,335 INFO L861 garLoopResultBuilder]: At program point L535(lines 528 537) the Hoare annotation is: true [2022-01-11 00:05:20,335 INFO L858 garLoopResultBuilder]: For program point L481-1(lines 481 485) no Hoare annotation was computed. [2022-01-11 00:05:20,335 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-01-11 00:05:20,335 INFO L854 garLoopResultBuilder]: At program point L933-1(lines 928 935) the Hoare annotation is: false [2022-01-11 00:05:20,335 INFO L858 garLoopResultBuilder]: For program point L455(lines 455 461) no Hoare annotation was computed. [2022-01-11 00:05:20,335 INFO L854 garLoopResultBuilder]: At program point L129-1(lines 125 131) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))) [2022-01-11 00:05:20,335 INFO L854 garLoopResultBuilder]: At program point L415-1(lines 410 418) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0Int 1)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse6 (<= 1 ~waterLevel~0Int)) (.cse4 (<= 1 ~methaneLevelCritical~0Int)) (.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) .cse2 (let ((.cse3 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse3) (<= (+ 2 .cse3) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) .cse4) (and .cse5 .cse0 .cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse6 (<= ~methaneLevelCritical~0Int 0)) (and .cse5 .cse0 .cse1 .cse2 .cse6 .cse4) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,335 INFO L858 garLoopResultBuilder]: For program point L174-3(lines 174 180) no Hoare annotation was computed. [2022-01-11 00:05:20,335 INFO L858 garLoopResultBuilder]: For program point L105-6(lines 105 111) no Hoare annotation was computed. [2022-01-11 00:05:20,336 INFO L854 garLoopResultBuilder]: At program point L460(lines 451 464) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse1 (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-11 00:05:20,336 INFO L854 garLoopResultBuilder]: At program point L137-1(lines 133 157) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,336 INFO L858 garLoopResultBuilder]: For program point L347(lines 347 367) no Hoare annotation was computed. [2022-01-11 00:05:20,336 INFO L854 garLoopResultBuilder]: At program point L174-5(lines 167 183) the Hoare annotation is: (let ((.cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1)) (.cse2 (let ((.cse5 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse5) (<= (+ 2 .cse5) ~waterLevel~0Int)))) (.cse3 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1)) (.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) .cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1)) .cse4) (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 (= ~pumpRunning~0Int 0) .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 .cse4 (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0))) [2022-01-11 00:05:20,336 INFO L854 garLoopResultBuilder]: At program point L163-1(lines 158 165) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1)) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1)) (and (<= ~waterLevel~0Int 1) .cse0))) [2022-01-11 00:05:20,336 INFO L858 garLoopResultBuilder]: For program point L378-6(lines 378 382) no Hoare annotation was computed. [2022-01-11 00:05:20,336 INFO L858 garLoopResultBuilder]: For program point L105-8(lines 104 123) no Hoare annotation was computed. [2022-01-11 00:05:20,336 INFO L858 garLoopResultBuilder]: For program point L257(lines 257 261) no Hoare annotation was computed. [2022-01-11 00:05:20,336 INFO L854 garLoopResultBuilder]: At program point L353-1(lines 338 370) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse7 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)) (and .cse4 .cse1 .cse2 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) .cse5 (let ((.cse6 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse6) (<= (+ 2 .cse6) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) .cse7) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3 .cse7) (and .cse1 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,336 INFO L854 garLoopResultBuilder]: At program point L447(lines 442 450) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,336 INFO L854 garLoopResultBuilder]: At program point L378-8(lines 374 385) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,336 INFO L858 garLoopResultBuilder]: For program point L137-4(lines 137 154) no Hoare annotation was computed. [2022-01-11 00:05:20,337 INFO L858 garLoopResultBuilder]: For program point L112-5(lines 112 118) no Hoare annotation was computed. [2022-01-11 00:05:20,337 INFO L858 garLoopResultBuilder]: For program point L257-2(lines 257 261) no Hoare annotation was computed. [2022-01-11 00:05:20,337 INFO L854 garLoopResultBuilder]: At program point L122(lines 101 124) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse4 (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse5 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse3 (<= 1 ~waterLevel~0Int)) (.cse7 (<= 1 ~methaneLevelCritical~0Int)) (.cse1 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 .cse2 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse3 (<= ~methaneLevelCritical~0Int 0)) (and .cse4 .cse1 .cse2 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) .cse5 (let ((.cse6 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse6) (<= (+ 2 .cse6) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) .cse7) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3 .cse7) (and .cse1 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,337 INFO L858 garLoopResultBuilder]: For program point L353(lines 353 366) no Hoare annotation was computed. [2022-01-11 00:05:20,337 INFO L858 garLoopResultBuilder]: For program point L455-2(lines 455 461) no Hoare annotation was computed. [2022-01-11 00:05:20,337 INFO L854 garLoopResultBuilder]: At program point L129-5(lines 125 131) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,337 INFO L854 garLoopResultBuilder]: At program point L415-5(lines 410 418) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (= ~pumpRunning~0Int 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,337 INFO L854 garLoopResultBuilder]: At program point L263(lines 248 266) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1)))) [2022-01-11 00:05:20,337 INFO L854 garLoopResultBuilder]: At program point L208(lines 203 211) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1)) (= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 1)) [2022-01-11 00:05:20,337 INFO L854 garLoopResultBuilder]: At program point L460-2(lines 451 464) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (<= 1 ~methaneLevelCritical~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 0)))) [2022-01-11 00:05:20,337 INFO L854 garLoopResultBuilder]: At program point L137-5(lines 133 157) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 (= ~pumpRunning~0Int 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,337 INFO L858 garLoopResultBuilder]: For program point L347-4(lines 347 367) no Hoare annotation was computed. [2022-01-11 00:05:20,337 INFO L858 garLoopResultBuilder]: For program point L141(lines 141 149) no Hoare annotation was computed. [2022-01-11 00:05:20,337 INFO L858 garLoopResultBuilder]: For program point L357(lines 357 363) no Hoare annotation was computed. [2022-01-11 00:05:20,337 INFO L858 garLoopResultBuilder]: For program point L257-6(lines 257 261) no Hoare annotation was computed. [2022-01-11 00:05:20,338 INFO L854 garLoopResultBuilder]: At program point L353-5(lines 338 370) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 (= ~pumpRunning~0Int 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,338 INFO L854 garLoopResultBuilder]: At program point L447-2(lines 442 450) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,338 INFO L854 garLoopResultBuilder]: At program point L415(lines 410 418) the Hoare annotation is: (let ((.cse2 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse4 (let ((.cse12 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse12) (<= (+ 2 .cse12) ~waterLevel~0Int)))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1)) (.cse11 (<= ~methaneLevelCritical~0Int 0)) (.cse6 (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1)) (.cse8 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse10 (<= 1 ~waterLevel~0Int)) (.cse7 (<= 1 ~methaneLevelCritical~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse0 .cse1 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse9 .cse4 .cse5 .cse11 .cse6) (and .cse8 .cse0 .cse1 .cse3 .cse10 .cse7))) [2022-01-11 00:05:20,338 INFO L854 garLoopResultBuilder]: At program point L129(lines 125 131) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-11 00:05:20,338 INFO L858 garLoopResultBuilder]: For program point L932(line 932) no Hoare annotation was computed. [2022-01-11 00:05:20,338 INFO L858 garLoopResultBuilder]: For program point L257-8(lines 257 261) no Hoare annotation was computed. [2022-01-11 00:05:20,338 INFO L854 garLoopResultBuilder]: At program point L122-2(lines 101 124) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 (= ~pumpRunning~0Int 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0) (and .cse0 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1))))) [2022-01-11 00:05:20,338 INFO L858 garLoopResultBuilder]: For program point L353-4(lines 353 366) no Hoare annotation was computed. [2022-01-11 00:05:20,338 INFO L854 garLoopResultBuilder]: At program point L199(lines 192 202) the Hoare annotation is: (let ((.cse2 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1)) (.cse4 (let ((.cse13 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse13) (<= (+ 2 .cse13) ~waterLevel~0Int)))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1)) (.cse9 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse10 (<= 1 ~methaneLevelCritical~0Int)) (.cse11 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse12 (<= 1 ~waterLevel~0Int)) (.cse6 (<= ~methaneLevelCritical~0Int 0)) (.cse8 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneAlarm_#res#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse9 .cse4 .cse5 .cse7 .cse10) (and .cse11 .cse0 .cse1 .cse9 .cse12 .cse10) (and .cse11 .cse0 .cse1 .cse3 .cse12 .cse6 .cse8))) [2022-01-11 00:05:20,338 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-01-11 00:05:20,338 INFO L854 garLoopResultBuilder]: At program point L933(lines 928 935) the Hoare annotation is: false [2022-01-11 00:05:20,338 INFO L854 garLoopResultBuilder]: At program point L263-2(lines 248 266) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:05:20,338 INFO L854 garLoopResultBuilder]: At program point L208-2(lines 203 211) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1)) (= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 1)) [2022-01-11 00:05:20,339 INFO L858 garLoopResultBuilder]: For program point L174(lines 174 180) no Hoare annotation was computed. [2022-01-11 00:05:20,339 INFO L858 garLoopResultBuilder]: For program point L141-6(lines 141 149) no Hoare annotation was computed. [2022-01-11 00:05:20,339 INFO L858 garLoopResultBuilder]: For program point L357-6(lines 357 363) no Hoare annotation was computed. [2022-01-11 00:05:20,339 INFO L854 garLoopResultBuilder]: At program point L174-2(lines 167 183) the Hoare annotation is: (let ((.cse2 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1)) (.cse4 (let ((.cse13 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse13) (<= (+ 2 .cse13) ~waterLevel~0Int)))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1)) (.cse6 (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|)) (.cse7 (<= 1 ~methaneLevelCritical~0Int)) (.cse11 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse8 (= ~pumpRunning~0Int 1)) (.cse9 (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0)) (.cse12 (<= 1 ~waterLevel~0Int)) (.cse10 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse2 .cse4 .cse8 .cse9 .cse5 .cse10 .cse6) (and .cse11 .cse0 .cse1 .cse3 .cse12 .cse7) (and .cse11 .cse0 .cse8 .cse9 .cse12 .cse10))) [2022-01-11 00:05:20,339 INFO L854 garLoopResultBuilder]: At program point L163(lines 158 165) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 1)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0)) (.cse4 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1)))) (or (and .cse0 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) .cse2 .cse3 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) .cse4 (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1)) (and (<= ~waterLevel~0Int 1) .cse0 .cse2 .cse3 (<= 1 ~waterLevel~0Int) .cse4))) [2022-01-11 00:05:20,339 INFO L854 garLoopResultBuilder]: At program point L415-4(lines 410 418) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:05:20,339 INFO L854 garLoopResultBuilder]: At program point L129-4(lines 125 131) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0)) [2022-01-11 00:05:20,339 INFO L858 garLoopResultBuilder]: For program point L932-2(line 932) no Hoare annotation was computed. [2022-01-11 00:05:20,339 INFO L854 garLoopResultBuilder]: At program point L199-2(lines 192 202) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1) (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) (let ((.cse2 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse2) (<= (+ 2 .cse2) ~waterLevel~0Int))) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1) (<= 1 ~methaneLevelCritical~0Int)))) [2022-01-11 00:05:20,339 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-01-11 00:05:20,339 INFO L854 garLoopResultBuilder]: At program point L933-2(lines 928 935) the Hoare annotation is: false [2022-01-11 00:05:20,339 INFO L858 garLoopResultBuilder]: For program point L174-6(lines 174 180) no Hoare annotation was computed. [2022-01-11 00:05:20,339 INFO L854 garLoopResultBuilder]: At program point L174-8(lines 167 183) the Hoare annotation is: (let ((.cse1 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1)) (.cse2 (let ((.cse5 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse5) (<= (+ 2 .cse5) ~waterLevel~0Int)))) (.cse3 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1)) (.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) .cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1)) .cse4) (and (<= 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4#1Int|) .cse0 (= ~pumpRunning~0Int 0) .cse1 (<= 1 |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int|) .cse2 .cse3 .cse4 (<= 1 ~methaneLevelCritical~0Int)) (and (<= ~waterLevel~0Int 1) .cse0))) [2022-01-11 00:05:20,340 INFO L854 garLoopResultBuilder]: At program point L163-2(lines 158 165) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int))) (or (and .cse0 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 1) (let ((.cse1 (* (div ~waterLevel~0Int 2147483648) 4294967296))) (or (<= (+ 4294967294 ~waterLevel~0Int) .cse1) (<= (+ 2 .cse1) ~waterLevel~0Int))) (= ~pumpRunning~0Int 1) (<= |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 0) (= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 1) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_activatePump_~tmp~1#1Int| 1)) (= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~0#1Int| 1)) (and (<= ~waterLevel~0Int 1) .cse0))) [2022-01-11 00:05:20,342 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:05:20,342 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-11 00:05:20,444 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:05:20 BasicIcfg [2022-01-11 00:05:20,445 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-11 00:05:20,445 INFO L158 Benchmark]: Toolchain (without parser) took 10793.90ms. Allocated memory was 195.0MB in the beginning and 484.4MB in the end (delta: 289.4MB). Free memory was 142.8MB in the beginning and 410.7MB in the end (delta: -268.0MB). Peak memory consumption was 265.0MB. Max. memory is 8.0GB. [2022-01-11 00:05:20,445 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 195.0MB. Free memory is still 160.3MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-11 00:05:20,445 INFO L158 Benchmark]: CACSL2BoogieTranslator took 445.79ms. Allocated memory is still 195.0MB. Free memory was 142.5MB in the beginning and 155.4MB in the end (delta: -12.9MB). Peak memory consumption was 12.2MB. Max. memory is 8.0GB. [2022-01-11 00:05:20,446 INFO L158 Benchmark]: Boogie Procedure Inliner took 46.22ms. Allocated memory is still 195.0MB. Free memory was 155.4MB in the beginning and 152.3MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-11 00:05:20,446 INFO L158 Benchmark]: Boogie Preprocessor took 55.25ms. Allocated memory is still 195.0MB. Free memory was 152.3MB in the beginning and 150.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-11 00:05:20,446 INFO L158 Benchmark]: RCFGBuilder took 467.34ms. Allocated memory is still 195.0MB. Free memory was 150.2MB in the beginning and 129.7MB in the end (delta: 20.4MB). Peak memory consumption was 21.0MB. Max. memory is 8.0GB. [2022-01-11 00:05:20,446 INFO L158 Benchmark]: IcfgTransformer took 75.13ms. Allocated memory is still 195.0MB. Free memory was 129.7MB in the beginning and 121.9MB in the end (delta: 7.9MB). Peak memory consumption was 7.3MB. Max. memory is 8.0GB. [2022-01-11 00:05:20,447 INFO L158 Benchmark]: TraceAbstraction took 9699.84ms. Allocated memory was 195.0MB in the beginning and 484.4MB in the end (delta: 289.4MB). Free memory was 121.3MB in the beginning and 410.7MB in the end (delta: -289.4MB). Peak memory consumption was 243.3MB. Max. memory is 8.0GB. [2022-01-11 00:05:20,448 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 195.0MB. Free memory is still 160.3MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 445.79ms. Allocated memory is still 195.0MB. Free memory was 142.5MB in the beginning and 155.4MB in the end (delta: -12.9MB). Peak memory consumption was 12.2MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 46.22ms. Allocated memory is still 195.0MB. Free memory was 155.4MB in the beginning and 152.3MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 55.25ms. Allocated memory is still 195.0MB. Free memory was 152.3MB in the beginning and 150.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 467.34ms. Allocated memory is still 195.0MB. Free memory was 150.2MB in the beginning and 129.7MB in the end (delta: 20.4MB). Peak memory consumption was 21.0MB. Max. memory is 8.0GB. * IcfgTransformer took 75.13ms. Allocated memory is still 195.0MB. Free memory was 129.7MB in the beginning and 121.9MB in the end (delta: 7.9MB). Peak memory consumption was 7.3MB. Max. memory is 8.0GB. * TraceAbstraction took 9699.84ms. Allocated memory was 195.0MB in the beginning and 484.4MB in the end (delta: 289.4MB). Free memory was 121.3MB in the beginning and 410.7MB in the end (delta: -289.4MB). Peak memory consumption was 243.3MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 126 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 9.6s, OverallIterations: 10, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.1s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3462 SdHoareTripleChecker+Valid, 0.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3462 mSDsluCounter, 6767 SdHoareTripleChecker+Invalid, 0.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4653 mSDsCounter, 149 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 604 IncrementalHoareTripleChecker+Invalid, 753 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 149 mSolverCounterUnsat, 2114 mSDtfsCounter, 604 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 68 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=867occurred in iteration=8, InterpolantAutomatonStates: 58, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 2668 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 61 LocationsWithAnnotation, 61 PreInvPairs, 550 NumberOfFragments, 2891 HoareAnnotationTreeSize, 61 FomulaSimplifications, 105748 FormulaSimplificationTreeSizeReduction, 2.0s HoareSimplificationTime, 61 FomulaSimplificationsInter, 106795 FormulaSimplificationTreeSizeReductionInter, 5.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.4s InterpolantComputationTime, 317 NumberOfCodeBlocks, 317 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 307 ConstructedInterpolants, 0 QuantifiedInterpolants, 819 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 10 InterpolantComputations, 10 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 451]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 338]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp))) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 338]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 125]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) - InvariantResult [Line: 374]: Loop Invariant Derived loop invariant: ((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 158]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) || (((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 1bv32 == tmp) - InvariantResult [Line: 451]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 280]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 1bv32 == tmp) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 1bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 1bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 374]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 125]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((~bvule32(\result, 1bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 125]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32))) || (((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 1bv32 == tmp) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 1bv32 == \result) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 1bv32 == \result) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 192]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 125]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 125]: Loop Invariant Derived loop invariant: ((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp)) || (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32))) || (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp)) || (((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 1bv32 == tmp) - InvariantResult [Line: 125]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 158]: Loop Invariant Derived loop invariant: (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) || (((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 1bv32 == tmp) - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp))) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 1bv32 == \result) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 192]: Loop Invariant Derived loop invariant: ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp)) || (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) - InvariantResult [Line: 386]: Loop Invariant Derived loop invariant: ((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 0bv32 == pumpRunning)) || ((((~bvule32(1bv32, \result) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 158]: Loop Invariant Derived loop invariant: (((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) || (((((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 1bv32 == tmp) - InvariantResult [Line: 338]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) || (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp))) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 451]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, systemActive) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, systemActive) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) || (((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: (((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) || (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive))) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: (((((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) && ~bvule32(1bv32, tmp))) || ((~bvule32(1bv32, systemActive) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 0bv32 == pumpRunning) - InvariantResult [Line: 192]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((((~bvule32(1bv32, methaneLevelCritical) && ~bvule32(1bv32, \result)) && ~bvule32(1bv32, systemActive)) && (~bvule34(~bvadd16(2bv34, ~zero_extendFrom33To34(waterLevel[31:31] ++ 0bv32)), ~zero_extendFrom32To34(waterLevel)) || ~bvule33(~bvadd16(4294967294bv33, ~zero_extendFrom32To33(waterLevel)), waterLevel[31:31] ++ 0bv32))) && 1bv32 == \result) && tmp___0 == 1bv32) && 0bv32 == pumpRunning) && 1bv32 == tmp) && ~bvule32(1bv32, tmp)) - InvariantResult [Line: 374]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvule32(1bv32, systemActive)) || (~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) RESULT: Ultimate proved your program to be correct! [2022-01-11 00:05:20,514 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...