/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-11 00:07:53,507 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-11 00:07:53,509 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-11 00:07:53,561 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-11 00:07:53,561 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-11 00:07:53,562 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-11 00:07:53,563 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-11 00:07:53,565 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-11 00:07:53,566 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-11 00:07:53,576 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-11 00:07:53,577 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-11 00:07:53,578 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-11 00:07:53,578 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-11 00:07:53,579 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-11 00:07:53,580 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-11 00:07:53,581 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-11 00:07:53,582 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-11 00:07:53,582 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-11 00:07:53,584 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-11 00:07:53,585 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-11 00:07:53,586 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-11 00:07:53,587 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-11 00:07:53,588 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-11 00:07:53,589 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-11 00:07:53,591 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-11 00:07:53,591 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-11 00:07:53,592 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-11 00:07:53,592 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-11 00:07:53,593 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-11 00:07:53,593 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-11 00:07:53,593 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-11 00:07:53,594 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-11 00:07:53,594 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-11 00:07:53,595 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-11 00:07:53,596 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-11 00:07:53,596 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-11 00:07:53,596 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-11 00:07:53,597 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-11 00:07:53,597 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-11 00:07:53,598 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-11 00:07:53,598 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-11 00:07:53,599 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_NONE.epf [2022-01-11 00:07:53,620 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-11 00:07:53,620 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-11 00:07:53,620 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-11 00:07:53,620 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-11 00:07:53,621 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-11 00:07:53,621 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-11 00:07:53,621 INFO L138 SettingsManager]: * Use SBE=true [2022-01-11 00:07:53,622 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-11 00:07:53,622 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-11 00:07:53,622 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-11 00:07:53,622 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-11 00:07:53,622 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-11 00:07:53,622 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-11 00:07:53,622 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-11 00:07:53,623 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-11 00:07:53,623 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-11 00:07:53,623 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-11 00:07:53,623 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-11 00:07:53,623 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-11 00:07:53,623 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-11 00:07:53,624 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-11 00:07:53,624 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:07:53,624 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-11 00:07:53,624 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-11 00:07:53,624 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-11 00:07:53,624 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-11 00:07:53,624 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-11 00:07:53,625 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-11 00:07:53,625 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-11 00:07:53,625 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-11 00:07:53,625 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-11 00:07:53,625 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-11 00:07:53,626 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-11 00:07:53,626 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_NONE WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-11 00:07:53,831 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-11 00:07:53,858 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-11 00:07:53,860 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-11 00:07:53,861 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-11 00:07:53,863 INFO L275 PluginConnector]: CDTParser initialized [2022-01-11 00:07:53,864 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c [2022-01-11 00:07:53,921 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a9b9d45ac/5785e58b0cf04a1fbdf5bbcf10e4ea53/FLAG506e7f790 [2022-01-11 00:07:54,412 INFO L306 CDTParser]: Found 1 translation units. [2022-01-11 00:07:54,413 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c [2022-01-11 00:07:54,440 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a9b9d45ac/5785e58b0cf04a1fbdf5bbcf10e4ea53/FLAG506e7f790 [2022-01-11 00:07:54,744 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a9b9d45ac/5785e58b0cf04a1fbdf5bbcf10e4ea53 [2022-01-11 00:07:54,747 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-11 00:07:54,748 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-11 00:07:54,753 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-11 00:07:54,753 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-11 00:07:54,756 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-11 00:07:54,757 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:07:54" (1/1) ... [2022-01-11 00:07:54,759 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6d0edf8b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:54, skipping insertion in model container [2022-01-11 00:07:54,760 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 12:07:54" (1/1) ... [2022-01-11 00:07:54,767 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-11 00:07:54,808 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:07:55,157 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2022-01-11 00:07:55,160 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:07:55,175 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-11 00:07:55,182 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 00:07:55,254 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2022-01-11 00:07:55,256 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:07:55,265 INFO L203 MainTranslator]: Completed pre-run [2022-01-11 00:07:55,337 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2022-01-11 00:07:55,338 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 00:07:55,367 INFO L208 MainTranslator]: Completed translation [2022-01-11 00:07:55,367 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55 WrapperNode [2022-01-11 00:07:55,368 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-11 00:07:55,369 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-11 00:07:55,370 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-11 00:07:55,370 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-11 00:07:55,377 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55" (1/1) ... [2022-01-11 00:07:55,402 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55" (1/1) ... [2022-01-11 00:07:55,440 INFO L137 Inliner]: procedures = 60, calls = 159, calls flagged for inlining = 56, calls inlined = 86, statements flattened = 646 [2022-01-11 00:07:55,440 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-11 00:07:55,441 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-11 00:07:55,441 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-11 00:07:55,441 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-11 00:07:55,448 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55" (1/1) ... [2022-01-11 00:07:55,449 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55" (1/1) ... [2022-01-11 00:07:55,452 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55" (1/1) ... [2022-01-11 00:07:55,452 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55" (1/1) ... [2022-01-11 00:07:55,460 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55" (1/1) ... [2022-01-11 00:07:55,466 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55" (1/1) ... [2022-01-11 00:07:55,468 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55" (1/1) ... [2022-01-11 00:07:55,471 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-11 00:07:55,472 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-11 00:07:55,472 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-11 00:07:55,472 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-11 00:07:55,480 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55" (1/1) ... [2022-01-11 00:07:55,488 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 00:07:55,498 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 00:07:55,517 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-11 00:07:55,538 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-11 00:07:55,557 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-11 00:07:55,557 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-11 00:07:55,557 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-11 00:07:55,558 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-11 00:07:55,646 INFO L234 CfgBuilder]: Building ICFG [2022-01-11 00:07:55,647 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-11 00:07:56,154 INFO L275 CfgBuilder]: Performing block encoding [2022-01-11 00:07:56,160 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-11 00:07:56,161 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-11 00:07:56,171 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:07:56 BoogieIcfgContainer [2022-01-11 00:07:56,172 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-11 00:07:56,172 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-11 00:07:56,172 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-11 00:07:56,174 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-11 00:07:56,177 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:07:56" (1/1) ... [2022-01-11 00:07:56,292 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:07:56 BasicIcfg [2022-01-11 00:07:56,292 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-11 00:07:56,294 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-11 00:07:56,294 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-11 00:07:56,296 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-11 00:07:56,297 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.01 12:07:54" (1/4) ... [2022-01-11 00:07:56,297 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@a05037a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:07:56, skipping insertion in model container [2022-01-11 00:07:56,297 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 12:07:55" (2/4) ... [2022-01-11 00:07:56,298 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@a05037a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 12:07:56, skipping insertion in model container [2022-01-11 00:07:56,298 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 12:07:56" (3/4) ... [2022-01-11 00:07:56,298 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@a05037a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:07:56, skipping insertion in model container [2022-01-11 00:07:56,298 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 12:07:56" (4/4) ... [2022-01-11 00:07:56,299 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product51.cil.cTransformedIcfg [2022-01-11 00:07:56,304 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-11 00:07:56,304 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-11 00:07:56,360 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-11 00:07:56,366 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-11 00:07:56,366 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-11 00:07:56,384 INFO L276 IsEmpty]: Start isEmpty. Operand has 179 states, 175 states have (on average 1.3885714285714286) internal successors, (243), 178 states have internal predecessors, (243), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:56,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-01-11 00:07:56,391 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:56,392 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:56,392 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:56,397 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:56,397 INFO L85 PathProgramCache]: Analyzing trace with hash -1497495490, now seen corresponding path program 1 times [2022-01-11 00:07:56,404 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:56,404 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [14393368] [2022-01-11 00:07:56,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:56,405 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:56,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:56,636 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:07:56,637 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:56,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [14393368] [2022-01-11 00:07:56,638 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [14393368] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:07:56,638 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:07:56,638 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:07:56,640 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1588036111] [2022-01-11 00:07:56,641 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:07:56,645 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-11 00:07:56,646 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:07:56,674 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-11 00:07:56,674 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:07:56,679 INFO L87 Difference]: Start difference. First operand has 179 states, 175 states have (on average 1.3885714285714286) internal successors, (243), 178 states have internal predecessors, (243), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:56,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:07:56,717 INFO L93 Difference]: Finished difference Result 347 states and 474 transitions. [2022-01-11 00:07:56,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-11 00:07:56,719 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-01-11 00:07:56,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:07:56,727 INFO L225 Difference]: With dead ends: 347 [2022-01-11 00:07:56,727 INFO L226 Difference]: Without dead ends: 169 [2022-01-11 00:07:56,730 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 00:07:56,733 INFO L933 BasicCegarLoop]: 233 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:07:56,734 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 233 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:07:56,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2022-01-11 00:07:56,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 169. [2022-01-11 00:07:56,788 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 166 states have (on average 1.355421686746988) internal successors, (225), 168 states have internal predecessors, (225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:56,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 225 transitions. [2022-01-11 00:07:56,800 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 225 transitions. Word has length 21 [2022-01-11 00:07:56,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:07:56,801 INFO L470 AbstractCegarLoop]: Abstraction has 169 states and 225 transitions. [2022-01-11 00:07:56,801 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:56,802 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 225 transitions. [2022-01-11 00:07:56,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-01-11 00:07:56,802 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:56,803 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:56,803 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-11 00:07:56,803 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:56,804 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:56,804 INFO L85 PathProgramCache]: Analyzing trace with hash 1486688822, now seen corresponding path program 1 times [2022-01-11 00:07:56,804 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:56,804 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [446174479] [2022-01-11 00:07:56,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:56,805 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:56,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:56,903 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:07:56,903 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:56,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [446174479] [2022-01-11 00:07:56,904 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [446174479] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:07:56,904 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:07:56,904 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:07:56,904 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [25708522] [2022-01-11 00:07:56,904 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:07:56,905 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:07:56,906 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:07:56,906 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:07:56,906 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:07:56,907 INFO L87 Difference]: Start difference. First operand 169 states and 225 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:56,985 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:07:56,986 INFO L93 Difference]: Finished difference Result 400 states and 535 transitions. [2022-01-11 00:07:56,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:07:56,986 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-01-11 00:07:56,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:07:56,988 INFO L225 Difference]: With dead ends: 400 [2022-01-11 00:07:56,988 INFO L226 Difference]: Without dead ends: 239 [2022-01-11 00:07:56,989 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:07:56,990 INFO L933 BasicCegarLoop]: 234 mSDtfsCounter, 206 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 206 SdHoareTripleChecker+Valid, 321 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:07:56,991 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [206 Valid, 321 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:07:56,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 239 states. [2022-01-11 00:07:57,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 239 to 230. [2022-01-11 00:07:57,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 227 states have (on average 1.3568281938325992) internal successors, (308), 229 states have internal predecessors, (308), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:57,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 308 transitions. [2022-01-11 00:07:57,028 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 308 transitions. Word has length 22 [2022-01-11 00:07:57,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:07:57,028 INFO L470 AbstractCegarLoop]: Abstraction has 230 states and 308 transitions. [2022-01-11 00:07:57,028 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:57,028 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 308 transitions. [2022-01-11 00:07:57,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-01-11 00:07:57,029 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:57,029 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:57,030 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-11 00:07:57,030 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:57,030 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:57,031 INFO L85 PathProgramCache]: Analyzing trace with hash 1073278439, now seen corresponding path program 1 times [2022-01-11 00:07:57,031 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:57,031 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [924221335] [2022-01-11 00:07:57,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:57,031 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:57,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:57,132 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:07:57,133 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:57,133 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [924221335] [2022-01-11 00:07:57,133 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [924221335] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:07:57,133 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:07:57,133 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:07:57,133 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2108339102] [2022-01-11 00:07:57,134 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:07:57,134 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:07:57,135 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:07:57,135 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:07:57,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:07:57,136 INFO L87 Difference]: Start difference. First operand 230 states and 308 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:57,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:07:57,258 INFO L93 Difference]: Finished difference Result 517 states and 690 transitions. [2022-01-11 00:07:57,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:07:57,259 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-01-11 00:07:57,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:07:57,262 INFO L225 Difference]: With dead ends: 517 [2022-01-11 00:07:57,262 INFO L226 Difference]: Without dead ends: 295 [2022-01-11 00:07:57,265 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:07:57,266 INFO L933 BasicCegarLoop]: 229 mSDtfsCounter, 144 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 37 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 37 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:07:57,267 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [144 Valid, 339 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 37 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:07:57,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2022-01-11 00:07:57,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 289. [2022-01-11 00:07:57,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 289 states, 286 states have (on average 1.3076923076923077) internal successors, (374), 288 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:57,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 289 states to 289 states and 374 transitions. [2022-01-11 00:07:57,285 INFO L78 Accepts]: Start accepts. Automaton has 289 states and 374 transitions. Word has length 27 [2022-01-11 00:07:57,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:07:57,285 INFO L470 AbstractCegarLoop]: Abstraction has 289 states and 374 transitions. [2022-01-11 00:07:57,286 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:57,286 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 374 transitions. [2022-01-11 00:07:57,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-01-11 00:07:57,287 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:57,287 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:57,287 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-11 00:07:57,288 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:57,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:57,288 INFO L85 PathProgramCache]: Analyzing trace with hash 1008745837, now seen corresponding path program 1 times [2022-01-11 00:07:57,288 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:57,289 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1029353368] [2022-01-11 00:07:57,289 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:57,289 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:57,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:57,444 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:07:57,445 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:57,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1029353368] [2022-01-11 00:07:57,445 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1029353368] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:07:57,445 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:07:57,445 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:07:57,446 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1568647759] [2022-01-11 00:07:57,446 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:07:57,447 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:07:57,448 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:07:57,449 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:07:57,449 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:07:57,449 INFO L87 Difference]: Start difference. First operand 289 states and 374 transitions. Second operand has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:57,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:07:57,712 INFO L93 Difference]: Finished difference Result 967 states and 1231 transitions. [2022-01-11 00:07:57,712 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-11 00:07:57,712 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-01-11 00:07:57,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:07:57,715 INFO L225 Difference]: With dead ends: 967 [2022-01-11 00:07:57,715 INFO L226 Difference]: Without dead ends: 686 [2022-01-11 00:07:57,716 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-11 00:07:57,730 INFO L933 BasicCegarLoop]: 456 mSDtfsCounter, 562 mSDsluCounter, 829 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 562 SdHoareTripleChecker+Valid, 1285 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-11 00:07:57,731 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [562 Valid, 1285 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 163 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-11 00:07:57,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 686 states. [2022-01-11 00:07:57,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 686 to 283. [2022-01-11 00:07:57,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 280 states have (on average 1.2714285714285714) internal successors, (356), 282 states have internal predecessors, (356), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:57,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 356 transitions. [2022-01-11 00:07:57,773 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 356 transitions. Word has length 32 [2022-01-11 00:07:57,773 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:07:57,774 INFO L470 AbstractCegarLoop]: Abstraction has 283 states and 356 transitions. [2022-01-11 00:07:57,774 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:57,775 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 356 transitions. [2022-01-11 00:07:57,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-11 00:07:57,778 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:57,779 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:57,779 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-11 00:07:57,779 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:57,782 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:57,782 INFO L85 PathProgramCache]: Analyzing trace with hash 427773096, now seen corresponding path program 1 times [2022-01-11 00:07:57,783 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:57,783 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1553302591] [2022-01-11 00:07:57,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:57,783 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:57,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:57,875 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:07:57,875 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:57,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1553302591] [2022-01-11 00:07:57,875 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1553302591] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:07:57,876 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:07:57,876 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:07:57,876 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [508524797] [2022-01-11 00:07:57,876 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:07:57,876 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:07:57,876 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:07:57,877 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:07:57,877 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:07:57,877 INFO L87 Difference]: Start difference. First operand 283 states and 356 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:07:58,036 INFO L93 Difference]: Finished difference Result 817 states and 1015 transitions. [2022-01-11 00:07:58,036 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 00:07:58,037 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-11 00:07:58,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:07:58,039 INFO L225 Difference]: With dead ends: 817 [2022-01-11 00:07:58,039 INFO L226 Difference]: Without dead ends: 542 [2022-01-11 00:07:58,040 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:07:58,043 INFO L933 BasicCegarLoop]: 261 mSDtfsCounter, 374 mSDsluCounter, 739 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 374 SdHoareTripleChecker+Valid, 1000 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:07:58,044 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [374 Valid, 1000 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:07:58,045 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 542 states. [2022-01-11 00:07:58,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 542 to 301. [2022-01-11 00:07:58,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 298 states have (on average 1.25503355704698) internal successors, (374), 300 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 374 transitions. [2022-01-11 00:07:58,078 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 374 transitions. Word has length 33 [2022-01-11 00:07:58,078 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:07:58,082 INFO L470 AbstractCegarLoop]: Abstraction has 301 states and 374 transitions. [2022-01-11 00:07:58,082 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,083 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 374 transitions. [2022-01-11 00:07:58,086 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-11 00:07:58,086 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:58,086 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:58,087 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-11 00:07:58,087 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:58,087 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:58,088 INFO L85 PathProgramCache]: Analyzing trace with hash -77785529, now seen corresponding path program 1 times [2022-01-11 00:07:58,088 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:58,088 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [303752438] [2022-01-11 00:07:58,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:58,088 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:58,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:58,158 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:07:58,158 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:58,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [303752438] [2022-01-11 00:07:58,159 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [303752438] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:07:58,159 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:07:58,159 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 00:07:58,159 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [89955355] [2022-01-11 00:07:58,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:07:58,160 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-11 00:07:58,160 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:07:58,160 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-11 00:07:58,160 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-11 00:07:58,160 INFO L87 Difference]: Start difference. First operand 301 states and 374 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:07:58,290 INFO L93 Difference]: Finished difference Result 752 states and 927 transitions. [2022-01-11 00:07:58,290 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-11 00:07:58,291 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-11 00:07:58,291 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:07:58,293 INFO L225 Difference]: With dead ends: 752 [2022-01-11 00:07:58,293 INFO L226 Difference]: Without dead ends: 459 [2022-01-11 00:07:58,294 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:07:58,295 INFO L933 BasicCegarLoop]: 267 mSDtfsCounter, 226 mSDsluCounter, 390 mSDsCounter, 0 mSdLazyCounter, 58 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 657 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 58 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:07:58,295 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [226 Valid, 657 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 58 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:07:58,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 459 states. [2022-01-11 00:07:58,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 459 to 313. [2022-01-11 00:07:58,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 313 states, 310 states have (on average 1.2451612903225806) internal successors, (386), 312 states have internal predecessors, (386), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 313 states to 313 states and 386 transitions. [2022-01-11 00:07:58,324 INFO L78 Accepts]: Start accepts. Automaton has 313 states and 386 transitions. Word has length 33 [2022-01-11 00:07:58,326 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:07:58,326 INFO L470 AbstractCegarLoop]: Abstraction has 313 states and 386 transitions. [2022-01-11 00:07:58,326 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,326 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 386 transitions. [2022-01-11 00:07:58,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-11 00:07:58,327 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:58,327 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:58,327 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-11 00:07:58,327 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:58,328 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:58,328 INFO L85 PathProgramCache]: Analyzing trace with hash -588319706, now seen corresponding path program 1 times [2022-01-11 00:07:58,328 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:58,328 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1695378974] [2022-01-11 00:07:58,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:58,328 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:58,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:58,385 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:07:58,385 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:58,385 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1695378974] [2022-01-11 00:07:58,385 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1695378974] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:07:58,385 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:07:58,386 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 00:07:58,386 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [548444873] [2022-01-11 00:07:58,386 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:07:58,387 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:07:58,387 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:07:58,387 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:07:58,387 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:07:58,388 INFO L87 Difference]: Start difference. First operand 313 states and 386 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:07:58,401 INFO L93 Difference]: Finished difference Result 313 states and 386 transitions. [2022-01-11 00:07:58,401 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:07:58,401 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-11 00:07:58,401 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:07:58,402 INFO L225 Difference]: With dead ends: 313 [2022-01-11 00:07:58,402 INFO L226 Difference]: Without dead ends: 136 [2022-01-11 00:07:58,403 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:07:58,404 INFO L933 BasicCegarLoop]: 92 mSDtfsCounter, 84 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 99 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:07:58,404 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [84 Valid, 99 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:07:58,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2022-01-11 00:07:58,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 136. [2022-01-11 00:07:58,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 136 states, 135 states have (on average 1.2740740740740741) internal successors, (172), 135 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136 states to 136 states and 172 transitions. [2022-01-11 00:07:58,416 INFO L78 Accepts]: Start accepts. Automaton has 136 states and 172 transitions. Word has length 33 [2022-01-11 00:07:58,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:07:58,416 INFO L470 AbstractCegarLoop]: Abstraction has 136 states and 172 transitions. [2022-01-11 00:07:58,417 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,417 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 172 transitions. [2022-01-11 00:07:58,417 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-01-11 00:07:58,417 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:58,417 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:58,417 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-11 00:07:58,418 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:58,418 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:58,418 INFO L85 PathProgramCache]: Analyzing trace with hash -1305939058, now seen corresponding path program 1 times [2022-01-11 00:07:58,419 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:58,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [209204690] [2022-01-11 00:07:58,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:58,419 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:58,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:58,507 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:07:58,507 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:58,507 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [209204690] [2022-01-11 00:07:58,507 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [209204690] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:07:58,508 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:07:58,508 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 00:07:58,508 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1103875179] [2022-01-11 00:07:58,508 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:07:58,508 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 00:07:58,508 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:07:58,509 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 00:07:58,509 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:07:58,509 INFO L87 Difference]: Start difference. First operand 136 states and 172 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 2 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:07:58,545 INFO L93 Difference]: Finished difference Result 326 states and 414 transitions. [2022-01-11 00:07:58,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 00:07:58,546 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 2 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-01-11 00:07:58,546 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:07:58,547 INFO L225 Difference]: With dead ends: 326 [2022-01-11 00:07:58,547 INFO L226 Difference]: Without dead ends: 198 [2022-01-11 00:07:58,548 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 00:07:58,550 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 29 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:07:58,552 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [29 Valid, 165 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:07:58,553 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198 states. [2022-01-11 00:07:58,574 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198 to 198. [2022-01-11 00:07:58,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 197 states have (on average 1.2538071065989849) internal successors, (247), 197 states have internal predecessors, (247), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 247 transitions. [2022-01-11 00:07:58,575 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 247 transitions. Word has length 39 [2022-01-11 00:07:58,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:07:58,576 INFO L470 AbstractCegarLoop]: Abstraction has 198 states and 247 transitions. [2022-01-11 00:07:58,576 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 2 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,576 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 247 transitions. [2022-01-11 00:07:58,577 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-01-11 00:07:58,577 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:58,577 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:58,578 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-11 00:07:58,578 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:58,578 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:58,578 INFO L85 PathProgramCache]: Analyzing trace with hash -793726520, now seen corresponding path program 1 times [2022-01-11 00:07:58,578 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:58,578 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [869630252] [2022-01-11 00:07:58,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:58,579 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:58,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:58,728 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:07:58,728 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:58,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [869630252] [2022-01-11 00:07:58,728 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [869630252] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:07:58,728 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:07:58,728 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:07:58,729 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [18504522] [2022-01-11 00:07:58,729 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:07:58,730 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-11 00:07:58,730 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:07:58,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-11 00:07:58,731 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-11 00:07:58,731 INFO L87 Difference]: Start difference. First operand 198 states and 247 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:58,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:07:58,987 INFO L93 Difference]: Finished difference Result 954 states and 1214 transitions. [2022-01-11 00:07:58,988 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-01-11 00:07:58,988 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-01-11 00:07:58,988 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:07:58,991 INFO L225 Difference]: With dead ends: 954 [2022-01-11 00:07:58,991 INFO L226 Difference]: Without dead ends: 826 [2022-01-11 00:07:58,992 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2022-01-11 00:07:58,994 INFO L933 BasicCegarLoop]: 206 mSDtfsCounter, 451 mSDsluCounter, 581 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 451 SdHoareTripleChecker+Valid, 787 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 00:07:58,994 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [451 Valid, 787 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 00:07:58,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 826 states. [2022-01-11 00:07:59,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 826 to 337. [2022-01-11 00:07:59,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 337 states, 336 states have (on average 1.25) internal successors, (420), 336 states have internal predecessors, (420), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:59,036 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 337 states to 337 states and 420 transitions. [2022-01-11 00:07:59,036 INFO L78 Accepts]: Start accepts. Automaton has 337 states and 420 transitions. Word has length 41 [2022-01-11 00:07:59,038 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:07:59,038 INFO L470 AbstractCegarLoop]: Abstraction has 337 states and 420 transitions. [2022-01-11 00:07:59,038 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:59,038 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 420 transitions. [2022-01-11 00:07:59,039 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-01-11 00:07:59,039 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:59,039 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:59,040 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-11 00:07:59,040 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:59,043 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:59,043 INFO L85 PathProgramCache]: Analyzing trace with hash -1200937696, now seen corresponding path program 1 times [2022-01-11 00:07:59,043 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:59,043 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [595683046] [2022-01-11 00:07:59,043 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:59,043 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:59,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:59,132 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 00:07:59,133 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:59,133 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [595683046] [2022-01-11 00:07:59,133 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [595683046] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:07:59,133 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:07:59,133 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-11 00:07:59,133 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1176792573] [2022-01-11 00:07:59,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:07:59,134 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-11 00:07:59,134 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:07:59,134 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-11 00:07:59,134 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-01-11 00:07:59,134 INFO L87 Difference]: Start difference. First operand 337 states and 420 transitions. Second operand has 6 states, 6 states have (on average 11.833333333333334) internal successors, (71), 6 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:59,237 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:07:59,237 INFO L93 Difference]: Finished difference Result 769 states and 971 transitions. [2022-01-11 00:07:59,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 00:07:59,237 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.833333333333334) internal successors, (71), 6 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 71 [2022-01-11 00:07:59,239 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:07:59,242 INFO L225 Difference]: With dead ends: 769 [2022-01-11 00:07:59,242 INFO L226 Difference]: Without dead ends: 440 [2022-01-11 00:07:59,243 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:07:59,244 INFO L933 BasicCegarLoop]: 163 mSDtfsCounter, 190 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 431 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:07:59,245 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [190 Valid, 431 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:07:59,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 440 states. [2022-01-11 00:07:59,279 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 440 to 322. [2022-01-11 00:07:59,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 322 states, 321 states have (on average 1.2242990654205608) internal successors, (393), 321 states have internal predecessors, (393), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:59,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 322 states to 322 states and 393 transitions. [2022-01-11 00:07:59,281 INFO L78 Accepts]: Start accepts. Automaton has 322 states and 393 transitions. Word has length 71 [2022-01-11 00:07:59,282 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:07:59,282 INFO L470 AbstractCegarLoop]: Abstraction has 322 states and 393 transitions. [2022-01-11 00:07:59,282 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 11.833333333333334) internal successors, (71), 6 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:59,282 INFO L276 IsEmpty]: Start isEmpty. Operand 322 states and 393 transitions. [2022-01-11 00:07:59,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2022-01-11 00:07:59,283 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:59,283 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:59,284 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-11 00:07:59,284 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:59,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:59,284 INFO L85 PathProgramCache]: Analyzing trace with hash -923549581, now seen corresponding path program 1 times [2022-01-11 00:07:59,285 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:59,285 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [184439866] [2022-01-11 00:07:59,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:59,285 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:59,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:59,431 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 74 proven. 0 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-01-11 00:07:59,432 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:59,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [184439866] [2022-01-11 00:07:59,432 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [184439866] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 00:07:59,432 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 00:07:59,432 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 00:07:59,432 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [990769090] [2022-01-11 00:07:59,432 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 00:07:59,433 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 00:07:59,433 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:07:59,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 00:07:59,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 00:07:59,434 INFO L87 Difference]: Start difference. First operand 322 states and 393 transitions. Second operand has 5 states, 5 states have (on average 18.2) internal successors, (91), 5 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:59,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:07:59,579 INFO L93 Difference]: Finished difference Result 1188 states and 1463 transitions. [2022-01-11 00:07:59,579 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 00:07:59,580 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 5 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 128 [2022-01-11 00:07:59,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:07:59,583 INFO L225 Difference]: With dead ends: 1188 [2022-01-11 00:07:59,584 INFO L226 Difference]: Without dead ends: 874 [2022-01-11 00:07:59,584 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 00:07:59,585 INFO L933 BasicCegarLoop]: 137 mSDtfsCounter, 318 mSDsluCounter, 373 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 510 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 00:07:59,585 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [318 Valid, 510 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 00:07:59,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 874 states. [2022-01-11 00:07:59,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 874 to 328. [2022-01-11 00:07:59,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 328 states, 327 states have (on average 1.2201834862385321) internal successors, (399), 327 states have internal predecessors, (399), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:59,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 328 states to 328 states and 399 transitions. [2022-01-11 00:07:59,636 INFO L78 Accepts]: Start accepts. Automaton has 328 states and 399 transitions. Word has length 128 [2022-01-11 00:07:59,637 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:07:59,637 INFO L470 AbstractCegarLoop]: Abstraction has 328 states and 399 transitions. [2022-01-11 00:07:59,637 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 5 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:07:59,637 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 399 transitions. [2022-01-11 00:07:59,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2022-01-11 00:07:59,642 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 00:07:59,643 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:07:59,643 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-11 00:07:59,643 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 00:07:59,643 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 00:07:59,644 INFO L85 PathProgramCache]: Analyzing trace with hash -799476334, now seen corresponding path program 1 times [2022-01-11 00:07:59,644 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 00:07:59,644 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [623059264] [2022-01-11 00:07:59,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:59,644 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 00:07:59,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:07:59,846 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 108 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-01-11 00:07:59,846 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 00:07:59,846 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [623059264] [2022-01-11 00:07:59,846 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [623059264] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-11 00:07:59,846 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1081728325] [2022-01-11 00:07:59,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 00:07:59,847 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-11 00:07:59,847 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 00:07:59,849 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-11 00:07:59,867 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-11 00:08:00,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 00:08:00,021 INFO L263 TraceCheckSpWp]: Trace formula consists of 884 conjuncts, 15 conjunts are in the unsatisfiable core [2022-01-11 00:08:00,028 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-11 00:08:00,294 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 69 proven. 2 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-01-11 00:08:00,294 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-11 00:08:00,521 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 69 proven. 2 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-01-11 00:08:00,522 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1081728325] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-11 00:08:00,522 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-11 00:08:00,522 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 15 [2022-01-11 00:08:00,522 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134257525] [2022-01-11 00:08:00,522 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-11 00:08:00,523 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-01-11 00:08:00,523 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 00:08:00,523 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-01-11 00:08:00,524 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-01-11 00:08:00,524 INFO L87 Difference]: Start difference. First operand 328 states and 399 transitions. Second operand has 15 states, 15 states have (on average 11.133333333333333) internal successors, (167), 15 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:08:01,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 00:08:01,137 INFO L93 Difference]: Finished difference Result 1150 states and 1408 transitions. [2022-01-11 00:08:01,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-11 00:08:01,138 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 11.133333333333333) internal successors, (167), 15 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 128 [2022-01-11 00:08:01,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 00:08:01,138 INFO L225 Difference]: With dead ends: 1150 [2022-01-11 00:08:01,138 INFO L226 Difference]: Without dead ends: 0 [2022-01-11 00:08:01,140 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 283 GetRequests, 256 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 117 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=176, Invalid=636, Unknown=0, NotChecked=0, Total=812 [2022-01-11 00:08:01,141 INFO L933 BasicCegarLoop]: 252 mSDtfsCounter, 1408 mSDsluCounter, 1451 mSDsCounter, 0 mSdLazyCounter, 174 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1408 SdHoareTripleChecker+Valid, 1703 SdHoareTripleChecker+Invalid, 218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 174 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-11 00:08:01,141 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1408 Valid, 1703 Invalid, 218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 174 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-11 00:08:01,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-11 00:08:01,141 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-11 00:08:01,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:08:01,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-11 00:08:01,142 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 128 [2022-01-11 00:08:01,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 00:08:01,142 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-11 00:08:01,142 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 11.133333333333333) internal successors, (167), 15 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 00:08:01,142 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-11 00:08:01,142 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-11 00:08:01,145 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-11 00:08:01,145 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-11 00:08:01,145 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-11 00:08:01,174 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-01-11 00:08:01,370 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-11 00:08:01,373 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-11 00:08:12,807 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-11 00:08:12,808 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-11 00:08:12,808 INFO L854 garLoopResultBuilder]: At program point L471(lines 467 473) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-11 00:08:12,808 INFO L854 garLoopResultBuilder]: At program point L464(lines 460 466) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-11 00:08:12,808 INFO L854 garLoopResultBuilder]: At program point L479(lines 474 482) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-11 00:08:12,808 INFO L858 garLoopResultBuilder]: For program point L368(lines 368 375) no Hoare annotation was computed. [2022-01-11 00:08:12,809 INFO L854 garLoopResultBuilder]: At program point L339(lines 335 341) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-11 00:08:12,809 INFO L858 garLoopResultBuilder]: For program point L368-2(lines 368 375) no Hoare annotation was computed. [2022-01-11 00:08:12,809 INFO L854 garLoopResultBuilder]: At program point L969(lines 964 971) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-11 00:08:12,809 INFO L861 garLoopResultBuilder]: At program point L377(lines 358 380) the Hoare annotation is: true [2022-01-11 00:08:12,809 INFO L854 garLoopResultBuilder]: At program point L392-2(lines 392 439) the Hoare annotation is: (let ((.cse6 (<= ~waterLevel~0Int 1))) (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse10 (= ~pumpRunning~0Int 1)) (.cse9 (or .cse6 (<= 4294967297 ~waterLevel~0Int))) (.cse7 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2)) (.cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse5) (and .cse7 .cse1 .cse8 .cse4 .cse9 .cse5) (and .cse0 .cse1 .cse8 .cse4 .cse9 .cse5) (and (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse7 (<= ~waterLevel~0Int 2) .cse10 (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|) (<= 2 ~waterLevel~0Int) .cse5 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) (and .cse7 .cse8 .cse10 .cse4 .cse9 .cse5) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5)))) [2022-01-11 00:08:12,809 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-11 00:08:12,809 INFO L854 garLoopResultBuilder]: At program point L440(lines 391 441) the Hoare annotation is: false [2022-01-11 00:08:12,809 INFO L858 garLoopResultBuilder]: For program point L393(lines 392 439) no Hoare annotation was computed. [2022-01-11 00:08:12,809 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-11 00:08:12,809 INFO L854 garLoopResultBuilder]: At program point L184-2(lines 179 187) the Hoare annotation is: false [2022-01-11 00:08:12,810 INFO L858 garLoopResultBuilder]: For program point L394(lines 394 398) no Hoare annotation was computed. [2022-01-11 00:08:12,810 INFO L854 garLoopResultBuilder]: At program point L979-1(lines 972 981) the Hoare annotation is: false [2022-01-11 00:08:12,810 INFO L858 garLoopResultBuilder]: For program point L402(lines 402 408) no Hoare annotation was computed. [2022-01-11 00:08:12,810 INFO L858 garLoopResultBuilder]: For program point L73-3(lines 73 79) no Hoare annotation was computed. [2022-01-11 00:08:12,810 INFO L858 garLoopResultBuilder]: For program point L869(lines 869 873) no Hoare annotation was computed. [2022-01-11 00:08:12,810 INFO L858 garLoopResultBuilder]: For program point L402-2(lines 402 408) no Hoare annotation was computed. [2022-01-11 00:08:12,810 INFO L858 garLoopResultBuilder]: For program point L857-3(lines 857 861) no Hoare annotation was computed. [2022-01-11 00:08:12,810 INFO L858 garLoopResultBuilder]: For program point L73-5(lines 69 91) no Hoare annotation was computed. [2022-01-11 00:08:12,810 INFO L854 garLoopResultBuilder]: At program point L869-2(lines 865 876) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0Int 1)) (.cse0 (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|))) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse8 (= ~pumpRunning~0Int 0)) (.cse10 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (<= ~waterLevel~0Int 2)) (.cse11 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse9 (<= 2 ~waterLevel~0Int)) (.cse6 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse6) (and .cse1 .cse8 .cse4 .cse9 .cse6) (and .cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) .cse10 .cse5 .cse11 .cse6) (and .cse0 .cse1 .cse8 .cse2 .cse3 .cse4 .cse6) (and .cse7 .cse8 .cse10 .cse4 .cse11 .cse9 .cse6))) [2022-01-11 00:08:12,810 INFO L858 garLoopResultBuilder]: For program point L412(lines 412 418) no Hoare annotation was computed. [2022-01-11 00:08:12,810 INFO L854 garLoopResultBuilder]: At program point L857-5(lines 853 864) the Hoare annotation is: false [2022-01-11 00:08:12,811 INFO L858 garLoopResultBuilder]: For program point L131-2(lines 131 148) no Hoare annotation was computed. [2022-01-11 00:08:12,811 INFO L858 garLoopResultBuilder]: For program point L80-3(lines 80 86) no Hoare annotation was computed. [2022-01-11 00:08:12,811 INFO L858 garLoopResultBuilder]: For program point L881(lines 881 885) no Hoare annotation was computed. [2022-01-11 00:08:12,811 INFO L858 garLoopResultBuilder]: For program point L412-2(lines 412 418) no Hoare annotation was computed. [2022-01-11 00:08:12,811 INFO L854 garLoopResultBuilder]: At program point L949-1(lines 944 952) the Hoare annotation is: false [2022-01-11 00:08:12,811 INFO L858 garLoopResultBuilder]: For program point L105-6(lines 105 122) no Hoare annotation was computed. [2022-01-11 00:08:12,811 INFO L854 garLoopResultBuilder]: At program point L926-1(lines 921 929) the Hoare annotation is: false [2022-01-11 00:08:12,811 INFO L854 garLoopResultBuilder]: At program point L881-2(lines 877 888) the Hoare annotation is: (let ((.cse10 (<= ~waterLevel~0Int 1))) (let ((.cse0 (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|))) (.cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse8 (= ~pumpRunning~0Int 0)) (.cse14 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (<= ~waterLevel~0Int 2)) (.cse9 (<= 2 ~waterLevel~0Int)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse11 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse5 (= ~pumpRunning~0Int 1)) (.cse12 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse13 (or .cse10 (<= 4294967297 ~waterLevel~0Int))) (.cse6 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse6) (and .cse1 .cse8 .cse4 .cse9 .cse6) (and .cse10 .cse1 .cse8 .cse2 .cse6) (and .cse1 .cse8 .cse11 .cse12 .cse13 .cse6) (and .cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) .cse14 .cse5 .cse12 .cse6) (and .cse7 .cse8 .cse11 .cse12 .cse13 .cse6) (and .cse7 .cse8 .cse14 .cse4 .cse12 .cse9 .cse6) (and .cse1 .cse11 .cse5 .cse12 .cse13 .cse6)))) [2022-01-11 00:08:12,811 INFO L858 garLoopResultBuilder]: For program point L422(lines 422 435) no Hoare annotation was computed. [2022-01-11 00:08:12,811 INFO L858 garLoopResultBuilder]: For program point L252-3(lines 252 256) no Hoare annotation was computed. [2022-01-11 00:08:12,811 INFO L858 garLoopResultBuilder]: For program point L934-3(lines 934 940) no Hoare annotation was computed. [2022-01-11 00:08:12,811 INFO L854 garLoopResultBuilder]: At program point L97-7(lines 93 99) the Hoare annotation is: false [2022-01-11 00:08:12,812 INFO L858 garLoopResultBuilder]: For program point L990-2(lines 990 1007) no Hoare annotation was computed. [2022-01-11 00:08:12,812 INFO L858 garLoopResultBuilder]: For program point L428-2(lines 422 435) no Hoare annotation was computed. [2022-01-11 00:08:12,812 INFO L858 garLoopResultBuilder]: For program point L428(lines 428 434) no Hoare annotation was computed. [2022-01-11 00:08:12,812 INFO L858 garLoopResultBuilder]: For program point L252-5(lines 252 256) no Hoare annotation was computed. [2022-01-11 00:08:12,812 INFO L854 garLoopResultBuilder]: At program point L939-3(lines 930 943) the Hoare annotation is: false [2022-01-11 00:08:12,812 INFO L854 garLoopResultBuilder]: At program point L105-7(lines 101 125) the Hoare annotation is: false [2022-01-11 00:08:12,812 INFO L854 garLoopResultBuilder]: At program point L184-3(lines 179 187) the Hoare annotation is: false [2022-01-11 00:08:12,812 INFO L854 garLoopResultBuilder]: At program point L990-3(lines 982 1010) the Hoare annotation is: false [2022-01-11 00:08:12,812 INFO L854 garLoopResultBuilder]: At program point L184(lines 179 187) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0Int 1))) (let ((.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse7 (= ~pumpRunning~0Int 0)) (.cse9 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse11 (or .cse5 (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (= ~pumpRunning~0Int 1)) (.cse10 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse8 (<= 2 ~waterLevel~0Int)) (.cse3 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 (<= 1 ~waterLevel~0Int) .cse4) (and .cse6 .cse7 .cse1 .cse8 .cse4) (and .cse6 .cse7 .cse9 .cse10 .cse11 .cse4) (and .cse0 .cse9 .cse2 .cse10 .cse11 .cse3 .cse4) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2 .cse10 .cse8 .cse3 .cse4)))) [2022-01-11 00:08:12,812 INFO L858 garLoopResultBuilder]: For program point L266(lines 266 272) no Hoare annotation was computed. [2022-01-11 00:08:12,812 INFO L854 garLoopResultBuilder]: At program point L258-1(lines 243 261) the Hoare annotation is: false [2022-01-11 00:08:12,813 INFO L858 garLoopResultBuilder]: For program point L233-9(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,813 INFO L854 garLoopResultBuilder]: At program point L131-3(lines 127 151) the Hoare annotation is: false [2022-01-11 00:08:12,813 INFO L858 garLoopResultBuilder]: For program point L994-2(lines 994 1004) no Hoare annotation was computed. [2022-01-11 00:08:12,813 INFO L854 garLoopResultBuilder]: At program point L90-1(lines 66 92) the Hoare annotation is: false [2022-01-11 00:08:12,813 INFO L854 garLoopResultBuilder]: At program point L979(lines 972 981) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1))) (let ((.cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse10 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse12 (or .cse0 (<= 4294967297 ~waterLevel~0Int))) (.cse5 (<= 1 ~systemActive~0Int)) (.cse6 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse7 (<= ~waterLevel~0Int 2)) (.cse8 (= ~pumpRunning~0Int 1)) (.cse11 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse13 (<= 2 ~waterLevel~0Int)) (.cse9 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse5 .cse6 .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse7 .cse8 .cse9 .cse4) (and .cse5 .cse10 .cse6 .cse8 .cse11 .cse12 .cse9 .cse4) (and .cse1 .cse2 .cse7 .cse13 .cse4) (and .cse1 .cse2 .cse10 .cse11 .cse12 .cse4) (and .cse5 .cse6 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse7 .cse8 .cse11 .cse13 .cse9 .cse4)))) [2022-01-11 00:08:12,813 INFO L854 garLoopResultBuilder]: At program point L165(lines 160 167) the Hoare annotation is: (let ((.cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse0 (= ~pumpRunning~0Int 0)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2) (and .cse0 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int)) .cse2) (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (<= ~waterLevel~0Int 2) .cse2))) [2022-01-11 00:08:12,813 INFO L858 garLoopResultBuilder]: For program point L266-2(lines 266 272) no Hoare annotation was computed. [2022-01-11 00:08:12,813 INFO L858 garLoopResultBuilder]: For program point L135-3(lines 135 143) no Hoare annotation was computed. [2022-01-11 00:08:12,813 INFO L858 garLoopResultBuilder]: For program point L233-11(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,813 INFO L858 garLoopResultBuilder]: For program point L995-3(lines 995 1001) no Hoare annotation was computed. [2022-01-11 00:08:12,813 INFO L854 garLoopResultBuilder]: At program point L289-2(lines 289 303) the Hoare annotation is: false [2022-01-11 00:08:12,814 INFO L858 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2022-01-11 00:08:12,814 INFO L854 garLoopResultBuilder]: At program point L274(lines 262 276) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0Int 1)) (.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 (<= ~waterLevel~0Int 2) (<= 2 ~waterLevel~0Int) .cse1) (and .cse0 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int) (or .cse2 (<= 4294967297 ~waterLevel~0Int)) .cse1) (and .cse2 .cse0 (<= 1 ~waterLevel~0Int) .cse1))) [2022-01-11 00:08:12,814 INFO L854 garLoopResultBuilder]: At program point L165-2(lines 160 167) the Hoare annotation is: false [2022-01-11 00:08:12,814 INFO L858 garLoopResultBuilder]: For program point L105-4(lines 105 122) no Hoare annotation was computed. [2022-01-11 00:08:12,814 INFO L854 garLoopResultBuilder]: At program point L239-3(lines 224 242) the Hoare annotation is: false [2022-01-11 00:08:12,814 INFO L858 garLoopResultBuilder]: For program point L958-1(line 958) no Hoare annotation was computed. [2022-01-11 00:08:12,814 INFO L861 garLoopResultBuilder]: At program point L304(lines 279 308) the Hoare annotation is: true [2022-01-11 00:08:12,814 INFO L858 garLoopResultBuilder]: For program point L290(line 290) no Hoare annotation was computed. [2022-01-11 00:08:12,814 INFO L858 garLoopResultBuilder]: For program point L857(lines 857 861) no Hoare annotation was computed. [2022-01-11 00:08:12,814 INFO L858 garLoopResultBuilder]: For program point L73-2(lines 69 91) no Hoare annotation was computed. [2022-01-11 00:08:12,814 INFO L858 garLoopResultBuilder]: For program point L934-2(lines 934 940) no Hoare annotation was computed. [2022-01-11 00:08:12,814 INFO L854 garLoopResultBuilder]: At program point L97-5(lines 93 99) the Hoare annotation is: false [2022-01-11 00:08:12,814 INFO L858 garLoopResultBuilder]: For program point L109-9(lines 109 117) no Hoare annotation was computed. [2022-01-11 00:08:12,815 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 958) no Hoare annotation was computed. [2022-01-11 00:08:12,815 INFO L854 garLoopResultBuilder]: At program point L959-1(lines 954 961) the Hoare annotation is: false [2022-01-11 00:08:12,815 INFO L861 garLoopResultBuilder]: At program point L445(lines 382 447) the Hoare annotation is: true [2022-01-11 00:08:12,815 INFO L858 garLoopResultBuilder]: For program point L293(lines 293 297) no Hoare annotation was computed. [2022-01-11 00:08:12,815 INFO L854 garLoopResultBuilder]: At program point L857-2(lines 853 864) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse2 (= ~pumpRunning~0Int 1)) (.cse4 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse0 .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (<= 1 ~waterLevel~0Int) .cse4 .cse5))) [2022-01-11 00:08:12,815 INFO L858 garLoopResultBuilder]: For program point L131(lines 131 148) no Hoare annotation was computed. [2022-01-11 00:08:12,815 INFO L858 garLoopResultBuilder]: For program point L80-1(lines 80 86) no Hoare annotation was computed. [2022-01-11 00:08:12,815 INFO L854 garLoopResultBuilder]: At program point L939-2(lines 930 943) the Hoare annotation is: false [2022-01-11 00:08:12,815 INFO L854 garLoopResultBuilder]: At program point L105-5(lines 101 125) the Hoare annotation is: false [2022-01-11 00:08:12,815 INFO L854 garLoopResultBuilder]: At program point L157-3(lines 152 159) the Hoare annotation is: false [2022-01-11 00:08:12,816 INFO L854 garLoopResultBuilder]: At program point L97-6(lines 93 99) the Hoare annotation is: false [2022-01-11 00:08:12,816 INFO L861 garLoopResultBuilder]: At program point L352(lines 344 354) the Hoare annotation is: true [2022-01-11 00:08:12,816 INFO L858 garLoopResultBuilder]: For program point L293-1(lines 293 297) no Hoare annotation was computed. [2022-01-11 00:08:12,816 INFO L854 garLoopResultBuilder]: At program point L949(lines 944 952) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse2 (= ~pumpRunning~0Int 1)) (.cse4 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse0 .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 .cse4 .cse5))) [2022-01-11 00:08:12,816 INFO L858 garLoopResultBuilder]: For program point L105-2(lines 105 122) no Hoare annotation was computed. [2022-01-11 00:08:12,816 INFO L854 garLoopResultBuilder]: At program point L926(lines 921 929) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse6 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse5 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse2 .cse6 .cse7 .cse4) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0) .cse5 .cse2 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int) .cse7 .cse3 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) .cse4) (and .cse0 .cse1 .cse2 .cse6 .cse4) (and .cse5 .cse1 .cse2 .cse6 .cse4) (and .cse5 .cse1 .cse2 .cse3 .cse4))) [2022-01-11 00:08:12,816 INFO L858 garLoopResultBuilder]: For program point L233-6(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,816 INFO L854 garLoopResultBuilder]: At program point L184-4(lines 179 187) the Hoare annotation is: false [2022-01-11 00:08:12,816 INFO L858 garLoopResultBuilder]: For program point L252(lines 252 256) no Hoare annotation was computed. [2022-01-11 00:08:12,816 INFO L858 garLoopResultBuilder]: For program point L934-1(lines 934 940) no Hoare annotation was computed. [2022-01-11 00:08:12,816 INFO L854 garLoopResultBuilder]: At program point L97-3(lines 93 99) the Hoare annotation is: false [2022-01-11 00:08:12,816 INFO L858 garLoopResultBuilder]: For program point L990(lines 990 1007) no Hoare annotation was computed. [2022-01-11 00:08:12,817 INFO L858 garLoopResultBuilder]: For program point L233-8(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,817 INFO L854 garLoopResultBuilder]: At program point L979-2(lines 972 981) the Hoare annotation is: false [2022-01-11 00:08:12,817 INFO L858 garLoopResultBuilder]: For program point L252-2(lines 252 256) no Hoare annotation was computed. [2022-01-11 00:08:12,817 INFO L854 garLoopResultBuilder]: At program point L939-1(lines 930 943) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 1)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int) (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4) (and .cse0 .cse1 (<= ~waterLevel~0Int 2) (<= 2 ~waterLevel~0Int) .cse4) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int) .cse4))) [2022-01-11 00:08:12,817 INFO L854 garLoopResultBuilder]: At program point L105-3(lines 101 125) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse6 (<= ~waterLevel~0Int 2)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) (.cse7 (<= 2 ~waterLevel~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int) (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5) (and .cse1 .cse6 (= ~pumpRunning~0Int 1) .cse7 .cse5) (and .cse0 .cse4 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0Int) .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse7 .cse5))) [2022-01-11 00:08:12,817 INFO L854 garLoopResultBuilder]: At program point L184-1(lines 179 187) the Hoare annotation is: (let ((.cse0 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse2 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse3 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0) (<= 1 ~systemActive~0Int) .cse0 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int) (= ~pumpRunning~0Int 1) .cse1 .cse2 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) .cse3) (and (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3))) [2022-01-11 00:08:12,817 INFO L854 garLoopResultBuilder]: At program point L990-1(lines 982 1010) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse7 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (= ~pumpRunning~0Int 1)) (.cse8 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse6 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2)) (.cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse7 .cse4 .cse8 .cse5) (and .cse0 .cse1 .cse7 .cse4 .cse8 .cse5) (and (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse6 (<= ~waterLevel~0Int 2) .cse9 (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|) (<= 2 ~waterLevel~0Int) .cse5 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) (and .cse6 .cse7 .cse9 .cse4 .cse8 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-01-11 00:08:12,817 INFO L854 garLoopResultBuilder]: At program point L239-2(lines 224 242) the Hoare annotation is: false [2022-01-11 00:08:12,817 INFO L858 garLoopResultBuilder]: For program point L73-6(lines 73 79) no Hoare annotation was computed. [2022-01-11 00:08:12,817 INFO L854 garLoopResultBuilder]: At program point L258(lines 243 261) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse2 (= ~pumpRunning~0Int 1)) (.cse4 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse0 .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 .cse4 .cse5))) [2022-01-11 00:08:12,817 INFO L858 garLoopResultBuilder]: For program point L233-3(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,818 INFO L854 garLoopResultBuilder]: At program point L131-1(lines 127 151) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse6 (<= ~waterLevel~0Int 2)) (.cse7 (<= 2 ~waterLevel~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse0 (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|))) (.cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse4 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse11 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse12 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse13 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse10 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse8 (= ~pumpRunning~0Int 1)) (.cse14 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse2 .cse6 .cse7 .cse5) (and .cse1 .cse6 .cse8 .cse7 .cse5) (and .cse9 .cse1 .cse2 .cse10 .cse5) (and .cse11 .cse0 .cse12 .cse1 .cse13 .cse3 .cse8 .cse4 .cse14 .cse5) (and .cse11 .cse9 .cse12 .cse1 .cse13 .cse10 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse8 .cse14 .cse5)))) [2022-01-11 00:08:12,818 INFO L858 garLoopResultBuilder]: For program point L994(lines 994 1004) no Hoare annotation was computed. [2022-01-11 00:08:12,818 INFO L854 garLoopResultBuilder]: At program point L90(lines 66 92) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse7 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (= ~pumpRunning~0Int 1)) (.cse8 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse6 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2)) (.cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse7 .cse4 .cse8 .cse5) (and .cse0 .cse1 .cse7 .cse4 .cse8 .cse5) (and (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse6 (<= ~waterLevel~0Int 2) .cse9 (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|) (<= 2 ~waterLevel~0Int) .cse5 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) (and .cse6 .cse7 .cse9 .cse4 .cse8 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-01-11 00:08:12,818 INFO L858 garLoopResultBuilder]: For program point L109-6(lines 109 117) no Hoare annotation was computed. [2022-01-11 00:08:12,818 INFO L858 garLoopResultBuilder]: For program point L857-6(lines 857 861) no Hoare annotation was computed. [2022-01-11 00:08:12,818 INFO L858 garLoopResultBuilder]: For program point L73-8(lines 69 91) no Hoare annotation was computed. [2022-01-11 00:08:12,818 INFO L858 garLoopResultBuilder]: For program point L135(lines 135 143) no Hoare annotation was computed. [2022-01-11 00:08:12,818 INFO L858 garLoopResultBuilder]: For program point L233-5(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,818 INFO L858 garLoopResultBuilder]: For program point L995(lines 995 1001) no Hoare annotation was computed. [2022-01-11 00:08:12,818 INFO L854 garLoopResultBuilder]: At program point L157-2(lines 152 159) the Hoare annotation is: false [2022-01-11 00:08:12,818 INFO L854 garLoopResultBuilder]: At program point L97-4(lines 93 99) the Hoare annotation is: false [2022-01-11 00:08:12,818 INFO L854 garLoopResultBuilder]: At program point L857-8(lines 853 864) the Hoare annotation is: false [2022-01-11 00:08:12,819 INFO L858 garLoopResultBuilder]: For program point L131-4(lines 131 148) no Hoare annotation was computed. [2022-01-11 00:08:12,819 INFO L858 garLoopResultBuilder]: For program point L80-5(lines 80 86) no Hoare annotation was computed. [2022-01-11 00:08:12,819 INFO L854 garLoopResultBuilder]: At program point L165-1(lines 160 167) the Hoare annotation is: (let ((.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse3 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 .cse4) (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (or .cse0 (<= 4294967297 ~waterLevel~0Int)) .cse3 .cse4))) [2022-01-11 00:08:12,819 INFO L858 garLoopResultBuilder]: For program point L105(lines 105 122) no Hoare annotation was computed. [2022-01-11 00:08:12,819 INFO L854 garLoopResultBuilder]: At program point L239-1(lines 224 242) the Hoare annotation is: (let ((.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0Int) .cse4 .cse5) (and .cse2 .cse3 (<= ~waterLevel~0Int 2) (<= 2 ~waterLevel~0Int) .cse4) (and .cse1 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int) (or .cse0 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5))) [2022-01-11 00:08:12,819 INFO L858 garLoopResultBuilder]: For program point L958(line 958) no Hoare annotation was computed. [2022-01-11 00:08:12,819 INFO L854 garLoopResultBuilder]: At program point L949-2(lines 944 952) the Hoare annotation is: false [2022-01-11 00:08:12,819 INFO L858 garLoopResultBuilder]: For program point L105-10(lines 105 122) no Hoare annotation was computed. [2022-01-11 00:08:12,819 INFO L854 garLoopResultBuilder]: At program point L926-2(lines 921 929) the Hoare annotation is: false [2022-01-11 00:08:12,819 INFO L858 garLoopResultBuilder]: For program point L934(lines 934 940) no Hoare annotation was computed. [2022-01-11 00:08:12,819 INFO L854 garLoopResultBuilder]: At program point L97-1(lines 93 99) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse5 (<= ~waterLevel~0Int 1)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse4 (= ~pumpRunning~0Int 1)) (.cse6 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse1 .cse2 .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6 .cse7) (and .cse0 .cse5 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 .cse6 .cse7))) [2022-01-11 00:08:12,820 INFO L858 garLoopResultBuilder]: For program point L109-3(lines 109 117) no Hoare annotation was computed. [2022-01-11 00:08:12,820 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 958) no Hoare annotation was computed. [2022-01-11 00:08:12,820 INFO L854 garLoopResultBuilder]: At program point L959(lines 954 961) the Hoare annotation is: false [2022-01-11 00:08:12,820 INFO L858 garLoopResultBuilder]: For program point L252-6(lines 252 256) no Hoare annotation was computed. [2022-01-11 00:08:12,820 INFO L858 garLoopResultBuilder]: For program point L934-5(lines 934 940) no Hoare annotation was computed. [2022-01-11 00:08:12,820 INFO L854 garLoopResultBuilder]: At program point L97-11(lines 93 99) the Hoare annotation is: false [2022-01-11 00:08:12,820 INFO L858 garLoopResultBuilder]: For program point L990-4(lines 990 1007) no Hoare annotation was computed. [2022-01-11 00:08:12,820 INFO L854 garLoopResultBuilder]: At program point L939(lines 930 943) the Hoare annotation is: false [2022-01-11 00:08:12,820 INFO L854 garLoopResultBuilder]: At program point L105-1(lines 101 125) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse5 (<= ~waterLevel~0Int 1)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse4 (= ~pumpRunning~0Int 1)) (.cse6 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse1 .cse2 .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6 .cse7) (and .cse0 .cse5 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 .cse6 .cse7))) [2022-01-11 00:08:12,820 INFO L854 garLoopResultBuilder]: At program point L157-1(lines 152 159) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~waterLevel~0Int 2) (= ~pumpRunning~0Int 1) (<= 2 ~waterLevel~0Int) (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0)) [2022-01-11 00:08:12,820 INFO L854 garLoopResultBuilder]: At program point L97-2(lines 93 99) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int) (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5) (and .cse0 .cse4 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0Int) .cse5) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0Int 2) .cse3 (<= 2 ~waterLevel~0Int) .cse5))) [2022-01-11 00:08:12,821 INFO L858 garLoopResultBuilder]: For program point L252-8(lines 252 256) no Hoare annotation was computed. [2022-01-11 00:08:12,821 INFO L854 garLoopResultBuilder]: At program point L939-5(lines 930 943) the Hoare annotation is: false [2022-01-11 00:08:12,821 INFO L854 garLoopResultBuilder]: At program point L105-11(lines 101 125) the Hoare annotation is: false [2022-01-11 00:08:12,821 INFO L854 garLoopResultBuilder]: At program point L184-5(lines 179 187) the Hoare annotation is: false [2022-01-11 00:08:12,821 INFO L854 garLoopResultBuilder]: At program point L990-5(lines 982 1010) the Hoare annotation is: false [2022-01-11 00:08:12,821 INFO L858 garLoopResultBuilder]: For program point L233(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,821 INFO L854 garLoopResultBuilder]: At program point L258-2(lines 243 261) the Hoare annotation is: false [2022-01-11 00:08:12,821 INFO L858 garLoopResultBuilder]: For program point L233-15(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,821 INFO L854 garLoopResultBuilder]: At program point L131-5(lines 127 151) the Hoare annotation is: false [2022-01-11 00:08:12,821 INFO L858 garLoopResultBuilder]: For program point L994-4(lines 994 1004) no Hoare annotation was computed. [2022-01-11 00:08:12,821 INFO L854 garLoopResultBuilder]: At program point L90-2(lines 66 92) the Hoare annotation is: false [2022-01-11 00:08:12,821 INFO L858 garLoopResultBuilder]: For program point L233-2(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,822 INFO L858 garLoopResultBuilder]: For program point L135-6(lines 135 143) no Hoare annotation was computed. [2022-01-11 00:08:12,822 INFO L858 garLoopResultBuilder]: For program point L233-17(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,822 INFO L858 garLoopResultBuilder]: For program point L995-6(lines 995 1001) no Hoare annotation was computed. [2022-01-11 00:08:12,822 INFO L854 garLoopResultBuilder]: At program point L239(lines 224 242) the Hoare annotation is: false [2022-01-11 00:08:12,822 INFO L854 garLoopResultBuilder]: At program point L165-3(lines 160 167) the Hoare annotation is: false [2022-01-11 00:08:12,822 INFO L858 garLoopResultBuilder]: For program point L105-8(lines 105 122) no Hoare annotation was computed. [2022-01-11 00:08:12,822 INFO L854 garLoopResultBuilder]: At program point L239-5(lines 224 242) the Hoare annotation is: false [2022-01-11 00:08:12,822 INFO L858 garLoopResultBuilder]: For program point L958-2(line 958) no Hoare annotation was computed. [2022-01-11 00:08:12,822 INFO L858 garLoopResultBuilder]: For program point L109(lines 109 117) no Hoare annotation was computed. [2022-01-11 00:08:12,822 INFO L858 garLoopResultBuilder]: For program point L934-4(lines 934 940) no Hoare annotation was computed. [2022-01-11 00:08:12,822 INFO L854 garLoopResultBuilder]: At program point L97-9(lines 93 99) the Hoare annotation is: false [2022-01-11 00:08:12,822 INFO L858 garLoopResultBuilder]: For program point L109-15(lines 109 117) no Hoare annotation was computed. [2022-01-11 00:08:12,823 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 958) no Hoare annotation was computed. [2022-01-11 00:08:12,823 INFO L854 garLoopResultBuilder]: At program point L959-2(lines 954 961) the Hoare annotation is: false [2022-01-11 00:08:12,823 INFO L854 garLoopResultBuilder]: At program point L157(lines 152 159) the Hoare annotation is: false [2022-01-11 00:08:12,823 INFO L854 garLoopResultBuilder]: At program point L97(lines 93 99) the Hoare annotation is: false [2022-01-11 00:08:12,823 INFO L854 garLoopResultBuilder]: At program point L939-4(lines 930 943) the Hoare annotation is: false [2022-01-11 00:08:12,823 INFO L854 garLoopResultBuilder]: At program point L105-9(lines 101 125) the Hoare annotation is: false [2022-01-11 00:08:12,823 INFO L854 garLoopResultBuilder]: At program point L157-5(lines 152 159) the Hoare annotation is: false [2022-01-11 00:08:12,823 INFO L854 garLoopResultBuilder]: At program point L97-10(lines 93 99) the Hoare annotation is: false [2022-01-11 00:08:12,823 INFO L858 garLoopResultBuilder]: For program point L233-12(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,823 INFO L858 garLoopResultBuilder]: For program point L233-14(lines 233 237) no Hoare annotation was computed. [2022-01-11 00:08:12,823 INFO L854 garLoopResultBuilder]: At program point L239-4(lines 224 242) the Hoare annotation is: false [2022-01-11 00:08:12,823 INFO L858 garLoopResultBuilder]: For program point L109-12(lines 109 117) no Hoare annotation was computed. [2022-01-11 00:08:12,824 INFO L854 garLoopResultBuilder]: At program point L157-4(lines 152 159) the Hoare annotation is: false [2022-01-11 00:08:12,824 INFO L854 garLoopResultBuilder]: At program point L97-8(lines 93 99) the Hoare annotation is: false [2022-01-11 00:08:12,826 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 00:08:12,827 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-11 00:08:12,896 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 12:08:12 BasicIcfg [2022-01-11 00:08:12,896 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-11 00:08:12,897 INFO L158 Benchmark]: Toolchain (without parser) took 18148.39ms. Allocated memory was 174.1MB in the beginning and 588.3MB in the end (delta: 414.2MB). Free memory was 122.4MB in the beginning and 448.8MB in the end (delta: -326.4MB). Peak memory consumption was 335.5MB. Max. memory is 8.0GB. [2022-01-11 00:08:12,897 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 174.1MB. Free memory is still 140.0MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-11 00:08:12,897 INFO L158 Benchmark]: CACSL2BoogieTranslator took 614.99ms. Allocated memory was 174.1MB in the beginning and 209.7MB in the end (delta: 35.7MB). Free memory was 122.2MB in the beginning and 172.1MB in the end (delta: -49.9MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. [2022-01-11 00:08:12,897 INFO L158 Benchmark]: Boogie Procedure Inliner took 71.26ms. Allocated memory is still 209.7MB. Free memory was 172.1MB in the beginning and 167.9MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. [2022-01-11 00:08:12,898 INFO L158 Benchmark]: Boogie Preprocessor took 30.25ms. Allocated memory is still 209.7MB. Free memory was 167.9MB in the beginning and 165.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. [2022-01-11 00:08:12,898 INFO L158 Benchmark]: RCFGBuilder took 699.54ms. Allocated memory is still 209.7MB. Free memory was 165.8MB in the beginning and 141.2MB in the end (delta: 24.6MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. [2022-01-11 00:08:12,898 INFO L158 Benchmark]: IcfgTransformer took 120.13ms. Allocated memory is still 209.7MB. Free memory was 141.2MB in the beginning and 131.2MB in the end (delta: 10.0MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. [2022-01-11 00:08:12,898 INFO L158 Benchmark]: TraceAbstraction took 16602.25ms. Allocated memory was 209.7MB in the beginning and 588.3MB in the end (delta: 378.5MB). Free memory was 130.7MB in the beginning and 448.8MB in the end (delta: -318.1MB). Peak memory consumption was 309.5MB. Max. memory is 8.0GB. [2022-01-11 00:08:12,900 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 174.1MB. Free memory is still 140.0MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 614.99ms. Allocated memory was 174.1MB in the beginning and 209.7MB in the end (delta: 35.7MB). Free memory was 122.2MB in the beginning and 172.1MB in the end (delta: -49.9MB). Peak memory consumption was 11.5MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 71.26ms. Allocated memory is still 209.7MB. Free memory was 172.1MB in the beginning and 167.9MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 8.0GB. * Boogie Preprocessor took 30.25ms. Allocated memory is still 209.7MB. Free memory was 167.9MB in the beginning and 165.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 8.0GB. * RCFGBuilder took 699.54ms. Allocated memory is still 209.7MB. Free memory was 165.8MB in the beginning and 141.2MB in the end (delta: 24.6MB). Peak memory consumption was 24.1MB. Max. memory is 8.0GB. * IcfgTransformer took 120.13ms. Allocated memory is still 209.7MB. Free memory was 141.2MB in the beginning and 131.2MB in the end (delta: 10.0MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. * TraceAbstraction took 16602.25ms. Allocated memory was 209.7MB in the beginning and 588.3MB in the end (delta: 378.5MB). Free memory was 130.7MB in the beginning and 448.8MB in the end (delta: -318.1MB). Peak memory consumption was 309.5MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 958]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 958]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 958]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 179 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 16.5s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 11.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3992 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3992 mSDsluCounter, 7530 SdHoareTripleChecker+Invalid, 0.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4910 mSDsCounter, 189 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 674 IncrementalHoareTripleChecker+Invalid, 863 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 189 mSolverCounterUnsat, 2620 mSDtfsCounter, 674 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 345 GetRequests, 280 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 132 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=337occurred in iteration=9, InterpolantAutomatonStates: 72, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 1958 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 88 LocationsWithAnnotation, 88 PreInvPairs, 401 NumberOfFragments, 2479 HoareAnnotationTreeSize, 88 FomulaSimplifications, 86012 FormulaSimplificationTreeSizeReduction, 5.3s HoareSimplificationTime, 88 FomulaSimplificationsInter, 392840 FormulaSimplificationTreeSizeReductionInter, 6.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 736 NumberOfCodeBlocks, 736 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 850 ConstructedInterpolants, 0 QuantifiedInterpolants, 2138 SizeOfPredicates, 6 NumberOfNonLiveVariables, 884 ConjunctsInSsa, 15 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 532/538 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 877]: Loop Invariant Derived loop invariant: (((((((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((1bv32 == pumpRunning && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 2bv32 == \result) && tmp == 2bv32) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule32(2bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((2bv32 == \result && ~bvule32(\result, 0bv32)) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((((~bvule32(\result, 0bv32) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 243]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule32(1bv32, waterLevel)) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 243]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((((((!~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((2bv32 == \result && tmp == 2bv32) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 392]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((1bv32 == pumpRunning && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || (((((2bv32 == \result && tmp == 2bv32) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((2bv32 == \result && ~bvule32(\result, 0bv32)) && tmp == 2bv32) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((((((1bv32 == pumpRunning && ~bvule32(tmp, 2bv32)) && ~bvule32(\result, 2bv32)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(2bv32, \result)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && ~bvult64(1bv32, tmp))) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, switchedOnBeforeTS) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, switchedOnBeforeTS) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 964]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) || ((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule32(\result, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((~bvule32(\result, 0bv32) && ~bvule32(2bv32, waterLevel)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32) - InvariantResult [Line: 865]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, systemActive) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((1bv32 == pumpRunning && 2bv32 == \result) && tmp == 2bv32) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule32(2bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((2bv32 == \result && ~bvule32(\result, 0bv32)) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(\result, 0bv32) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) || ((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) - InvariantResult [Line: 972]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((((\result == 1bv32 && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((~bvule32(2bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, waterLevel) && \result == 1bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 262]: Loop Invariant Derived loop invariant: ((((~bvule32(2bv32, waterLevel) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((~bvule32(1bv32, waterLevel) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: (((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && ~bvule32(\result, 0bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, waterLevel) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((~bvule32(2bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((1bv32 == pumpRunning && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32)) || ((((~bvule32(2bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32)) || ((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: (((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((1bv32 == pumpRunning && 2bv32 == \result) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || ((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((2bv32 == \result && ~bvule32(\result, 0bv32)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((2bv32 == \result && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && waterLevel == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 279]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 243]: Loop Invariant Derived loop invariant: (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 344]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 982]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 382]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 460]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 972]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 972]: Loop Invariant Derived loop invariant: (((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) || ((((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((~bvule32(\result, 0bv32) && ~bvule32(2bv32, waterLevel)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 982]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && waterLevel == \result) && splverifierCounter == 0bv32) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || (((((1bv32 == pumpRunning && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || (((((2bv32 == \result && tmp == 2bv32) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((2bv32 == \result && ~bvule32(\result, 0bv32)) && tmp == 2bv32) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((((((1bv32 == pumpRunning && ~bvule32(tmp, 2bv32)) && ~bvule32(\result, 2bv32)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(2bv32, \result)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && ~bvult64(1bv32, tmp))) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp, 0bv32)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) || ((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: ((((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((1bv32 == pumpRunning && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || ((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp, 0bv32)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 358]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 982]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || (((((1bv32 == pumpRunning && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || (((((2bv32 == \result && tmp == 2bv32) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((2bv32 == \result && ~bvule32(\result, 0bv32)) && tmp == 2bv32) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((((((1bv32 == pumpRunning && ~bvule32(tmp, 2bv32)) && ~bvule32(\result, 2bv32)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(2bv32, \result)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && ~bvult64(1bv32, tmp))) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2022-01-11 00:08:12,970 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...