/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_SUM.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-11 05:52:11,743 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-11 05:52:11,745 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-11 05:52:11,814 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-11 05:52:11,815 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-11 05:52:11,817 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-11 05:52:11,820 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-11 05:52:11,822 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-11 05:52:11,825 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-11 05:52:11,829 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-11 05:52:11,830 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-11 05:52:11,831 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-11 05:52:11,831 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-11 05:52:11,833 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-11 05:52:11,834 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-11 05:52:11,835 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-11 05:52:11,835 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-11 05:52:11,836 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-11 05:52:11,838 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-11 05:52:11,842 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-11 05:52:11,843 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-11 05:52:11,844 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-11 05:52:11,845 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-11 05:52:11,845 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-11 05:52:11,850 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-11 05:52:11,850 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-11 05:52:11,850 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-11 05:52:11,851 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-11 05:52:11,852 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-11 05:52:11,852 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-11 05:52:11,852 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-11 05:52:11,853 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-11 05:52:11,854 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-11 05:52:11,854 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-11 05:52:11,855 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-11 05:52:11,855 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-11 05:52:11,856 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-11 05:52:11,856 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-11 05:52:11,856 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-11 05:52:11,856 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-11 05:52:11,857 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-11 05:52:11,858 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_SUM.epf [2022-01-11 05:52:11,886 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-11 05:52:11,886 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-11 05:52:11,887 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-11 05:52:11,887 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-11 05:52:11,888 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-11 05:52:11,888 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-11 05:52:11,888 INFO L138 SettingsManager]: * Use SBE=true [2022-01-11 05:52:11,888 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-11 05:52:11,888 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-11 05:52:11,888 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-11 05:52:11,889 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-11 05:52:11,889 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-11 05:52:11,889 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-11 05:52:11,889 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-11 05:52:11,889 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-11 05:52:11,889 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-11 05:52:11,889 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-11 05:52:11,889 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-11 05:52:11,889 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-11 05:52:11,889 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-11 05:52:11,890 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-11 05:52:11,890 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 05:52:11,890 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-11 05:52:11,890 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-11 05:52:11,890 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-11 05:52:11,890 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-11 05:52:11,890 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-11 05:52:11,890 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-11 05:52:11,890 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-11 05:52:11,890 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-11 05:52:11,890 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-11 05:52:11,891 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-11 05:52:11,891 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-11 05:52:11,891 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_SUM WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-11 05:52:12,077 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-11 05:52:12,105 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-11 05:52:12,107 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-11 05:52:12,108 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-11 05:52:12,108 INFO L275 PluginConnector]: CDTParser initialized [2022-01-11 05:52:12,109 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c [2022-01-11 05:52:12,159 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1964d541b/4a2a3b4a107e4c7ea00b0c94597062f4/FLAGa92fb1616 [2022-01-11 05:52:12,564 INFO L306 CDTParser]: Found 1 translation units. [2022-01-11 05:52:12,564 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c [2022-01-11 05:52:12,580 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1964d541b/4a2a3b4a107e4c7ea00b0c94597062f4/FLAGa92fb1616 [2022-01-11 05:52:12,597 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1964d541b/4a2a3b4a107e4c7ea00b0c94597062f4 [2022-01-11 05:52:12,598 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-11 05:52:12,599 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-11 05:52:12,600 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-11 05:52:12,600 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-11 05:52:12,605 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-11 05:52:12,606 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 05:52:12" (1/1) ... [2022-01-11 05:52:12,606 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2d5def37 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:12, skipping insertion in model container [2022-01-11 05:52:12,607 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 05:52:12" (1/1) ... [2022-01-11 05:52:12,611 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-11 05:52:12,647 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 05:52:12,857 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-01-11 05:52:12,859 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 05:52:12,875 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-11 05:52:12,887 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 05:52:12,942 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-01-11 05:52:12,943 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 05:52:12,947 INFO L203 MainTranslator]: Completed pre-run [2022-01-11 05:52:13,006 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec2_product52.cil.c[19177,19190] [2022-01-11 05:52:13,010 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 05:52:13,023 INFO L208 MainTranslator]: Completed translation [2022-01-11 05:52:13,024 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13 WrapperNode [2022-01-11 05:52:13,024 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-11 05:52:13,025 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-11 05:52:13,025 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-11 05:52:13,025 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-11 05:52:13,030 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13" (1/1) ... [2022-01-11 05:52:13,048 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13" (1/1) ... [2022-01-11 05:52:13,082 INFO L137 Inliner]: procedures = 60, calls = 158, calls flagged for inlining = 55, calls inlined = 81, statements flattened = 625 [2022-01-11 05:52:13,087 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-11 05:52:13,088 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-11 05:52:13,088 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-11 05:52:13,088 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-11 05:52:13,094 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13" (1/1) ... [2022-01-11 05:52:13,095 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13" (1/1) ... [2022-01-11 05:52:13,098 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13" (1/1) ... [2022-01-11 05:52:13,098 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13" (1/1) ... [2022-01-11 05:52:13,106 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13" (1/1) ... [2022-01-11 05:52:13,112 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13" (1/1) ... [2022-01-11 05:52:13,117 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13" (1/1) ... [2022-01-11 05:52:13,125 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-11 05:52:13,125 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-11 05:52:13,125 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-11 05:52:13,126 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-11 05:52:13,127 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13" (1/1) ... [2022-01-11 05:52:13,132 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 05:52:13,140 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 05:52:13,150 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-11 05:52:13,160 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-11 05:52:13,194 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-11 05:52:13,194 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-11 05:52:13,194 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-11 05:52:13,194 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-11 05:52:13,272 INFO L234 CfgBuilder]: Building ICFG [2022-01-11 05:52:13,276 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-11 05:52:13,671 INFO L275 CfgBuilder]: Performing block encoding [2022-01-11 05:52:13,681 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-11 05:52:13,681 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-11 05:52:13,683 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 05:52:13 BoogieIcfgContainer [2022-01-11 05:52:13,683 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-11 05:52:13,684 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-11 05:52:13,684 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-11 05:52:13,685 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-11 05:52:13,686 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 05:52:13" (1/1) ... [2022-01-11 05:52:13,783 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 05:52:13 BasicIcfg [2022-01-11 05:52:13,784 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-11 05:52:13,785 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-11 05:52:13,785 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-11 05:52:13,787 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-11 05:52:13,787 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.01 05:52:12" (1/4) ... [2022-01-11 05:52:13,794 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@55fe5746 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 05:52:13, skipping insertion in model container [2022-01-11 05:52:13,794 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:52:13" (2/4) ... [2022-01-11 05:52:13,795 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@55fe5746 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 05:52:13, skipping insertion in model container [2022-01-11 05:52:13,795 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 05:52:13" (3/4) ... [2022-01-11 05:52:13,795 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@55fe5746 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 05:52:13, skipping insertion in model container [2022-01-11 05:52:13,795 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 05:52:13" (4/4) ... [2022-01-11 05:52:13,796 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product52.cil.cTransformedIcfg [2022-01-11 05:52:13,799 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-11 05:52:13,800 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-11 05:52:13,840 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-11 05:52:13,845 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-11 05:52:13,845 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-11 05:52:13,861 INFO L276 IsEmpty]: Start isEmpty. Operand has 174 states, 170 states have (on average 1.4) internal successors, (238), 173 states have internal predecessors, (238), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:13,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-01-11 05:52:13,867 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:13,868 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:13,868 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:13,872 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:13,872 INFO L85 PathProgramCache]: Analyzing trace with hash -312105872, now seen corresponding path program 1 times [2022-01-11 05:52:13,881 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:13,881 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1107679758] [2022-01-11 05:52:13,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:13,882 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:14,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:14,087 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:14,087 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:14,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1107679758] [2022-01-11 05:52:14,088 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1107679758] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:14,088 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:14,089 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 05:52:14,090 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2138494788] [2022-01-11 05:52:14,091 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:14,095 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-11 05:52:14,095 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:14,127 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-11 05:52:14,128 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 05:52:14,132 INFO L87 Difference]: Start difference. First operand has 174 states, 170 states have (on average 1.4) internal successors, (238), 173 states have internal predecessors, (238), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:14,163 INFO L93 Difference]: Finished difference Result 337 states and 464 transitions. [2022-01-11 05:52:14,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-11 05:52:14,165 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-01-11 05:52:14,165 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:14,172 INFO L225 Difference]: With dead ends: 337 [2022-01-11 05:52:14,172 INFO L226 Difference]: Without dead ends: 164 [2022-01-11 05:52:14,174 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 05:52:14,177 INFO L933 BasicCegarLoop]: 228 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:14,177 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 228 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:14,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164 states. [2022-01-11 05:52:14,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164 to 164. [2022-01-11 05:52:14,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 161 states have (on average 1.3664596273291925) internal successors, (220), 163 states have internal predecessors, (220), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 220 transitions. [2022-01-11 05:52:14,208 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 220 transitions. Word has length 19 [2022-01-11 05:52:14,209 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:14,209 INFO L470 AbstractCegarLoop]: Abstraction has 164 states and 220 transitions. [2022-01-11 05:52:14,209 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,209 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 220 transitions. [2022-01-11 05:52:14,210 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-01-11 05:52:14,210 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:14,210 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:14,210 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-11 05:52:14,210 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:14,211 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:14,211 INFO L85 PathProgramCache]: Analyzing trace with hash 1352428722, now seen corresponding path program 1 times [2022-01-11 05:52:14,211 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:14,211 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1406188225] [2022-01-11 05:52:14,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:14,212 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:14,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:14,285 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:14,286 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:14,286 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1406188225] [2022-01-11 05:52:14,286 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1406188225] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:14,286 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:14,286 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 05:52:14,286 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065650151] [2022-01-11 05:52:14,286 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:14,287 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:14,287 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:14,288 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:14,288 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:14,288 INFO L87 Difference]: Start difference. First operand 164 states and 220 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:14,352 INFO L93 Difference]: Finished difference Result 384 states and 519 transitions. [2022-01-11 05:52:14,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:14,352 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-01-11 05:52:14,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:14,354 INFO L225 Difference]: With dead ends: 384 [2022-01-11 05:52:14,354 INFO L226 Difference]: Without dead ends: 228 [2022-01-11 05:52:14,355 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:14,356 INFO L933 BasicCegarLoop]: 229 mSDtfsCounter, 202 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 202 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:14,356 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [202 Valid, 309 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:14,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2022-01-11 05:52:14,379 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 219. [2022-01-11 05:52:14,379 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 219 states, 216 states have (on average 1.375) internal successors, (297), 218 states have internal predecessors, (297), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 219 states to 219 states and 297 transitions. [2022-01-11 05:52:14,380 INFO L78 Accepts]: Start accepts. Automaton has 219 states and 297 transitions. Word has length 20 [2022-01-11 05:52:14,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:14,381 INFO L470 AbstractCegarLoop]: Abstraction has 219 states and 297 transitions. [2022-01-11 05:52:14,381 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 2 states have internal predecessors, (20), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,381 INFO L276 IsEmpty]: Start isEmpty. Operand 219 states and 297 transitions. [2022-01-11 05:52:14,382 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-01-11 05:52:14,382 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:14,382 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:14,382 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-11 05:52:14,382 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:14,383 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:14,383 INFO L85 PathProgramCache]: Analyzing trace with hash -703290023, now seen corresponding path program 1 times [2022-01-11 05:52:14,383 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:14,383 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1801271980] [2022-01-11 05:52:14,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:14,383 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:14,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:14,464 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:14,465 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:14,465 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1801271980] [2022-01-11 05:52:14,465 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1801271980] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:14,465 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:14,465 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 05:52:14,465 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1873544403] [2022-01-11 05:52:14,465 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:14,466 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:14,466 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:14,466 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:14,466 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:14,467 INFO L87 Difference]: Start difference. First operand 219 states and 297 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:14,560 INFO L93 Difference]: Finished difference Result 490 states and 663 transitions. [2022-01-11 05:52:14,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:14,561 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-01-11 05:52:14,561 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:14,565 INFO L225 Difference]: With dead ends: 490 [2022-01-11 05:52:14,565 INFO L226 Difference]: Without dead ends: 279 [2022-01-11 05:52:14,568 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:14,569 INFO L933 BasicCegarLoop]: 226 mSDtfsCounter, 141 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:14,570 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [141 Valid, 334 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 05:52:14,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 279 states. [2022-01-11 05:52:14,585 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 279 to 273. [2022-01-11 05:52:14,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 270 states have (on average 1.325925925925926) internal successors, (358), 272 states have internal predecessors, (358), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 358 transitions. [2022-01-11 05:52:14,587 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 358 transitions. Word has length 25 [2022-01-11 05:52:14,587 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:14,587 INFO L470 AbstractCegarLoop]: Abstraction has 273 states and 358 transitions. [2022-01-11 05:52:14,587 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 2 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,587 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 358 transitions. [2022-01-11 05:52:14,588 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-01-11 05:52:14,588 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:14,588 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:14,588 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-11 05:52:14,588 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:14,589 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:14,589 INFO L85 PathProgramCache]: Analyzing trace with hash -2142947567, now seen corresponding path program 1 times [2022-01-11 05:52:14,589 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:14,589 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1705673018] [2022-01-11 05:52:14,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:14,589 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:14,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:14,630 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:14,630 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:14,631 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1705673018] [2022-01-11 05:52:14,631 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1705673018] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:14,631 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:14,631 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 05:52:14,631 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [539246861] [2022-01-11 05:52:14,631 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:14,632 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:14,632 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:14,633 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:14,633 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:14,633 INFO L87 Difference]: Start difference. First operand 273 states and 358 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:14,677 INFO L93 Difference]: Finished difference Result 538 states and 708 transitions. [2022-01-11 05:52:14,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:14,677 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-01-11 05:52:14,677 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:14,680 INFO L225 Difference]: With dead ends: 538 [2022-01-11 05:52:14,681 INFO L226 Difference]: Without dead ends: 532 [2022-01-11 05:52:14,681 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:14,684 INFO L933 BasicCegarLoop]: 211 mSDtfsCounter, 176 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 176 SdHoareTripleChecker+Valid, 405 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:14,685 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [176 Valid, 405 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:14,685 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 532 states. [2022-01-11 05:52:14,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 532 to 532. [2022-01-11 05:52:14,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 532 states, 529 states have (on average 1.3156899810964082) internal successors, (696), 531 states have internal predecessors, (696), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 532 states to 532 states and 696 transitions. [2022-01-11 05:52:14,707 INFO L78 Accepts]: Start accepts. Automaton has 532 states and 696 transitions. Word has length 30 [2022-01-11 05:52:14,707 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:14,707 INFO L470 AbstractCegarLoop]: Abstraction has 532 states and 696 transitions. [2022-01-11 05:52:14,708 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:14,708 INFO L276 IsEmpty]: Start isEmpty. Operand 532 states and 696 transitions. [2022-01-11 05:52:14,709 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-01-11 05:52:14,709 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:14,709 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:14,709 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-11 05:52:14,710 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:14,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:14,710 INFO L85 PathProgramCache]: Analyzing trace with hash 960342338, now seen corresponding path program 1 times [2022-01-11 05:52:14,710 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:14,710 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1017329125] [2022-01-11 05:52:14,710 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:14,710 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:14,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:14,789 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:14,789 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:14,790 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1017329125] [2022-01-11 05:52:14,790 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1017329125] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:14,791 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:14,791 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 05:52:14,791 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1476164520] [2022-01-11 05:52:14,791 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:14,791 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 05:52:14,792 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:14,792 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 05:52:14,792 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:52:14,793 INFO L87 Difference]: Start difference. First operand 532 states and 696 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:15,044 INFO L93 Difference]: Finished difference Result 1479 states and 1922 transitions. [2022-01-11 05:52:15,045 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-11 05:52:15,045 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-01-11 05:52:15,045 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:15,048 INFO L225 Difference]: With dead ends: 1479 [2022-01-11 05:52:15,048 INFO L226 Difference]: Without dead ends: 955 [2022-01-11 05:52:15,049 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-11 05:52:15,052 INFO L933 BasicCegarLoop]: 515 mSDtfsCounter, 705 mSDsluCounter, 1056 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 705 SdHoareTripleChecker+Valid, 1571 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:15,052 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [705 Valid, 1571 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 05:52:15,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 955 states. [2022-01-11 05:52:15,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 955 to 414. [2022-01-11 05:52:15,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 411 states have (on average 1.3090024330900243) internal successors, (538), 413 states have internal predecessors, (538), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 538 transitions. [2022-01-11 05:52:15,075 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 538 transitions. Word has length 43 [2022-01-11 05:52:15,075 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:15,075 INFO L470 AbstractCegarLoop]: Abstraction has 414 states and 538 transitions. [2022-01-11 05:52:15,075 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,075 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 538 transitions. [2022-01-11 05:52:15,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-01-11 05:52:15,077 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:15,077 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:15,077 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-11 05:52:15,078 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:15,078 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:15,078 INFO L85 PathProgramCache]: Analyzing trace with hash 1471783642, now seen corresponding path program 1 times [2022-01-11 05:52:15,078 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:15,078 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1422191604] [2022-01-11 05:52:15,078 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:15,078 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:15,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:15,116 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:15,117 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:15,117 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1422191604] [2022-01-11 05:52:15,117 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1422191604] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:15,117 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:15,117 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 05:52:15,117 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [51213282] [2022-01-11 05:52:15,117 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:15,118 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:15,118 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:15,118 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:15,118 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:15,118 INFO L87 Difference]: Start difference. First operand 414 states and 538 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,172 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:15,173 INFO L93 Difference]: Finished difference Result 749 states and 973 transitions. [2022-01-11 05:52:15,173 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:15,173 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-01-11 05:52:15,173 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:15,174 INFO L225 Difference]: With dead ends: 749 [2022-01-11 05:52:15,174 INFO L226 Difference]: Without dead ends: 343 [2022-01-11 05:52:15,175 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:15,177 INFO L933 BasicCegarLoop]: 208 mSDtfsCounter, 102 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:15,178 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [102 Valid, 308 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:15,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-01-11 05:52:15,196 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-01-11 05:52:15,197 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 340 states have (on average 1.2441176470588236) internal successors, (423), 342 states have internal predecessors, (423), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 423 transitions. [2022-01-11 05:52:15,198 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 423 transitions. Word has length 56 [2022-01-11 05:52:15,198 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:15,198 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 423 transitions. [2022-01-11 05:52:15,199 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,199 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 423 transitions. [2022-01-11 05:52:15,201 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-01-11 05:52:15,201 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:15,201 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:15,201 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-11 05:52:15,201 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:15,202 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:15,202 INFO L85 PathProgramCache]: Analyzing trace with hash -1639670963, now seen corresponding path program 1 times [2022-01-11 05:52:15,202 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:15,202 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [486155522] [2022-01-11 05:52:15,202 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:15,203 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:15,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:15,279 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:15,279 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:15,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [486155522] [2022-01-11 05:52:15,279 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [486155522] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:15,280 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:15,280 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 05:52:15,280 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1253219800] [2022-01-11 05:52:15,280 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:15,280 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-11 05:52:15,280 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:15,280 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-11 05:52:15,280 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-11 05:52:15,281 INFO L87 Difference]: Start difference. First operand 343 states and 423 transitions. Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:15,364 INFO L93 Difference]: Finished difference Result 1332 states and 1640 transitions. [2022-01-11 05:52:15,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 05:52:15,364 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-01-11 05:52:15,364 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:15,367 INFO L225 Difference]: With dead ends: 1332 [2022-01-11 05:52:15,367 INFO L226 Difference]: Without dead ends: 997 [2022-01-11 05:52:15,368 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:52:15,370 INFO L933 BasicCegarLoop]: 225 mSDtfsCounter, 465 mSDsluCounter, 427 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 465 SdHoareTripleChecker+Valid, 652 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:15,370 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [465 Valid, 652 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:15,372 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 997 states. [2022-01-11 05:52:15,398 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 997 to 351. [2022-01-11 05:52:15,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 351 states, 348 states have (on average 1.2385057471264367) internal successors, (431), 350 states have internal predecessors, (431), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 351 states to 351 states and 431 transitions. [2022-01-11 05:52:15,399 INFO L78 Accepts]: Start accepts. Automaton has 351 states and 431 transitions. Word has length 57 [2022-01-11 05:52:15,399 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:15,399 INFO L470 AbstractCegarLoop]: Abstraction has 351 states and 431 transitions. [2022-01-11 05:52:15,400 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,400 INFO L276 IsEmpty]: Start isEmpty. Operand 351 states and 431 transitions. [2022-01-11 05:52:15,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-01-11 05:52:15,401 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:15,401 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:15,401 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-11 05:52:15,402 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:15,402 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:15,402 INFO L85 PathProgramCache]: Analyzing trace with hash 1193716334, now seen corresponding path program 1 times [2022-01-11 05:52:15,402 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:15,403 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [573974558] [2022-01-11 05:52:15,403 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:15,403 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:15,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:15,470 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:15,470 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:15,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [573974558] [2022-01-11 05:52:15,471 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [573974558] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:15,471 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:15,471 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 05:52:15,471 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [302218693] [2022-01-11 05:52:15,471 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:15,472 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 05:52:15,472 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:15,472 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 05:52:15,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:52:15,473 INFO L87 Difference]: Start difference. First operand 351 states and 431 transitions. Second operand has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:15,564 INFO L93 Difference]: Finished difference Result 919 states and 1129 transitions. [2022-01-11 05:52:15,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 05:52:15,564 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-01-11 05:52:15,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:15,566 INFO L225 Difference]: With dead ends: 919 [2022-01-11 05:52:15,566 INFO L226 Difference]: Without dead ends: 576 [2022-01-11 05:52:15,566 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 05:52:15,568 INFO L933 BasicCegarLoop]: 223 mSDtfsCounter, 312 mSDsluCounter, 632 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 855 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:15,568 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [312 Valid, 855 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:15,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576 states. [2022-01-11 05:52:15,591 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576 to 358. [2022-01-11 05:52:15,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 358 states, 355 states have (on average 1.2338028169014084) internal successors, (438), 357 states have internal predecessors, (438), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 358 states to 358 states and 438 transitions. [2022-01-11 05:52:15,596 INFO L78 Accepts]: Start accepts. Automaton has 358 states and 438 transitions. Word has length 57 [2022-01-11 05:52:15,596 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:15,596 INFO L470 AbstractCegarLoop]: Abstraction has 358 states and 438 transitions. [2022-01-11 05:52:15,596 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 5 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,596 INFO L276 IsEmpty]: Start isEmpty. Operand 358 states and 438 transitions. [2022-01-11 05:52:15,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-01-11 05:52:15,597 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:15,597 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:15,598 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-11 05:52:15,598 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:15,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:15,598 INFO L85 PathProgramCache]: Analyzing trace with hash -1515597716, now seen corresponding path program 1 times [2022-01-11 05:52:15,598 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:15,598 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2125040341] [2022-01-11 05:52:15,598 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:15,598 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:15,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:15,691 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:15,691 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:15,691 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2125040341] [2022-01-11 05:52:15,691 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2125040341] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:15,691 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:15,691 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 05:52:15,691 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1802859684] [2022-01-11 05:52:15,691 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:15,692 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 05:52:15,692 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:15,694 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 05:52:15,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:52:15,695 INFO L87 Difference]: Start difference. First operand 358 states and 438 transitions. Second operand has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:15,831 INFO L93 Difference]: Finished difference Result 1386 states and 1696 transitions. [2022-01-11 05:52:15,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-01-11 05:52:15,832 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-01-11 05:52:15,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:15,837 INFO L225 Difference]: With dead ends: 1386 [2022-01-11 05:52:15,837 INFO L226 Difference]: Without dead ends: 893 [2022-01-11 05:52:15,838 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-11 05:52:15,839 INFO L933 BasicCegarLoop]: 228 mSDtfsCounter, 639 mSDsluCounter, 701 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 639 SdHoareTripleChecker+Valid, 929 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:15,839 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [639 Valid, 929 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:15,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 893 states. [2022-01-11 05:52:15,870 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 893 to 459. [2022-01-11 05:52:15,872 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 459 states, 456 states have (on average 1.230263157894737) internal successors, (561), 458 states have internal predecessors, (561), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,873 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 459 states to 459 states and 561 transitions. [2022-01-11 05:52:15,873 INFO L78 Accepts]: Start accepts. Automaton has 459 states and 561 transitions. Word has length 57 [2022-01-11 05:52:15,873 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:15,874 INFO L470 AbstractCegarLoop]: Abstraction has 459 states and 561 transitions. [2022-01-11 05:52:15,874 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 11.4) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,874 INFO L276 IsEmpty]: Start isEmpty. Operand 459 states and 561 transitions. [2022-01-11 05:52:15,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-01-11 05:52:15,875 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:15,875 INFO L514 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:15,875 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-11 05:52:15,876 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:15,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:15,876 INFO L85 PathProgramCache]: Analyzing trace with hash 825326648, now seen corresponding path program 1 times [2022-01-11 05:52:15,877 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:15,877 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [102266774] [2022-01-11 05:52:15,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:15,877 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:15,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:15,936 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:52:15,936 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:15,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [102266774] [2022-01-11 05:52:15,936 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [102266774] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:15,936 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:15,937 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 05:52:15,937 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1446862264] [2022-01-11 05:52:15,937 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:15,937 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:15,937 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:15,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:15,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:15,938 INFO L87 Difference]: Start difference. First operand 459 states and 561 transitions. Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:15,982 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:15,982 INFO L93 Difference]: Finished difference Result 459 states and 561 transitions. [2022-01-11 05:52:15,983 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:15,983 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 65 [2022-01-11 05:52:15,983 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:15,984 INFO L225 Difference]: With dead ends: 459 [2022-01-11 05:52:15,984 INFO L226 Difference]: Without dead ends: 273 [2022-01-11 05:52:15,985 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:15,985 INFO L933 BasicCegarLoop]: 79 mSDtfsCounter, 39 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 86 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:15,986 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [39 Valid, 86 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:15,986 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 273 states. [2022-01-11 05:52:16,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 273 to 273. [2022-01-11 05:52:16,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 273 states, 272 states have (on average 1.2463235294117647) internal successors, (339), 272 states have internal predecessors, (339), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:16,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 339 transitions. [2022-01-11 05:52:16,022 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 339 transitions. Word has length 65 [2022-01-11 05:52:16,022 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:16,023 INFO L470 AbstractCegarLoop]: Abstraction has 273 states and 339 transitions. [2022-01-11 05:52:16,023 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:16,023 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 339 transitions. [2022-01-11 05:52:16,023 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-01-11 05:52:16,023 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:16,023 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:16,024 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-11 05:52:16,024 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:16,024 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:16,024 INFO L85 PathProgramCache]: Analyzing trace with hash -1970291119, now seen corresponding path program 1 times [2022-01-11 05:52:16,024 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:16,024 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [510594519] [2022-01-11 05:52:16,025 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:16,025 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:16,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:16,094 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 05:52:16,095 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:16,095 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [510594519] [2022-01-11 05:52:16,095 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [510594519] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:16,095 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:16,095 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 05:52:16,095 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1135735233] [2022-01-11 05:52:16,095 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:16,095 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:16,096 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:16,096 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:16,096 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:16,096 INFO L87 Difference]: Start difference. First operand 273 states and 339 transitions. Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 2 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:16,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:16,166 INFO L93 Difference]: Finished difference Result 652 states and 812 transitions. [2022-01-11 05:52:16,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:16,167 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 2 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 72 [2022-01-11 05:52:16,167 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:16,168 INFO L225 Difference]: With dead ends: 652 [2022-01-11 05:52:16,168 INFO L226 Difference]: Without dead ends: 387 [2022-01-11 05:52:16,168 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:16,169 INFO L933 BasicCegarLoop]: 78 mSDtfsCounter, 27 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:16,169 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 143 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:16,170 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 387 states. [2022-01-11 05:52:16,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 387 to 387. [2022-01-11 05:52:16,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 387 states, 386 states have (on average 1.2305699481865284) internal successors, (475), 386 states have internal predecessors, (475), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:16,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 387 states to 387 states and 475 transitions. [2022-01-11 05:52:16,207 INFO L78 Accepts]: Start accepts. Automaton has 387 states and 475 transitions. Word has length 72 [2022-01-11 05:52:16,207 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:16,207 INFO L470 AbstractCegarLoop]: Abstraction has 387 states and 475 transitions. [2022-01-11 05:52:16,207 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 2 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:16,207 INFO L276 IsEmpty]: Start isEmpty. Operand 387 states and 475 transitions. [2022-01-11 05:52:16,208 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-01-11 05:52:16,208 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:16,208 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:16,208 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-11 05:52:16,208 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:16,209 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:16,209 INFO L85 PathProgramCache]: Analyzing trace with hash -578031081, now seen corresponding path program 1 times [2022-01-11 05:52:16,209 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:16,209 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [699919404] [2022-01-11 05:52:16,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:16,209 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:16,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:16,287 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 05:52:16,287 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:16,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [699919404] [2022-01-11 05:52:16,287 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [699919404] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-11 05:52:16,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1651550178] [2022-01-11 05:52:16,287 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:16,287 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-11 05:52:16,288 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 05:52:16,289 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-11 05:52:16,290 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-11 05:52:16,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:16,431 INFO L263 TraceCheckSpWp]: Trace formula consists of 619 conjuncts, 12 conjunts are in the unsatisfiable core [2022-01-11 05:52:16,436 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-11 05:52:17,049 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 05:52:17,049 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-11 05:52:17,228 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-01-11 05:52:17,228 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1651550178] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-11 05:52:17,228 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-11 05:52:17,228 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 6] total 9 [2022-01-11 05:52:17,228 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [767454736] [2022-01-11 05:52:17,228 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-11 05:52:17,229 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-01-11 05:52:17,229 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:17,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-01-11 05:52:17,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=64, Unknown=0, NotChecked=0, Total=90 [2022-01-11 05:52:17,229 INFO L87 Difference]: Start difference. First operand 387 states and 475 transitions. Second operand has 10 states, 10 states have (on average 12.7) internal successors, (127), 9 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:18,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:18,134 INFO L93 Difference]: Finished difference Result 3351 states and 4171 transitions. [2022-01-11 05:52:18,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-01-11 05:52:18,135 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 12.7) internal successors, (127), 9 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-01-11 05:52:18,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:18,145 INFO L225 Difference]: With dead ends: 3351 [2022-01-11 05:52:18,145 INFO L226 Difference]: Without dead ends: 3086 [2022-01-11 05:52:18,146 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 139 SyntacticMatches, 5 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 110 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=163, Invalid=389, Unknown=0, NotChecked=0, Total=552 [2022-01-11 05:52:18,147 INFO L933 BasicCegarLoop]: 249 mSDtfsCounter, 1050 mSDsluCounter, 1247 mSDsCounter, 0 mSdLazyCounter, 187 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1050 SdHoareTripleChecker+Valid, 1496 SdHoareTripleChecker+Invalid, 225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 187 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:18,147 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1050 Valid, 1496 Invalid, 225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 187 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-11 05:52:18,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3086 states. [2022-01-11 05:52:18,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3086 to 1037. [2022-01-11 05:52:18,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1037 states, 1036 states have (on average 1.2316602316602316) internal successors, (1276), 1036 states have internal predecessors, (1276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:18,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1037 states to 1037 states and 1276 transitions. [2022-01-11 05:52:18,280 INFO L78 Accepts]: Start accepts. Automaton has 1037 states and 1276 transitions. Word has length 74 [2022-01-11 05:52:18,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:18,280 INFO L470 AbstractCegarLoop]: Abstraction has 1037 states and 1276 transitions. [2022-01-11 05:52:18,280 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 12.7) internal successors, (127), 9 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:18,280 INFO L276 IsEmpty]: Start isEmpty. Operand 1037 states and 1276 transitions. [2022-01-11 05:52:18,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-01-11 05:52:18,281 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:18,281 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:18,302 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-01-11 05:52:18,484 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-11 05:52:18,484 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:18,485 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:18,485 INFO L85 PathProgramCache]: Analyzing trace with hash 929520728, now seen corresponding path program 1 times [2022-01-11 05:52:18,485 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:18,485 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1616746909] [2022-01-11 05:52:18,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:18,485 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:18,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:18,537 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-01-11 05:52:18,537 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:18,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1616746909] [2022-01-11 05:52:18,537 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1616746909] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:18,537 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:18,538 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 05:52:18,538 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [385303278] [2022-01-11 05:52:18,538 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:18,538 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 05:52:18,538 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:18,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 05:52:18,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:52:18,539 INFO L87 Difference]: Start difference. First operand 1037 states and 1276 transitions. Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:18,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:18,645 INFO L93 Difference]: Finished difference Result 1920 states and 2341 transitions. [2022-01-11 05:52:18,645 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-01-11 05:52:18,645 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 74 [2022-01-11 05:52:18,645 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:18,648 INFO L225 Difference]: With dead ends: 1920 [2022-01-11 05:52:18,648 INFO L226 Difference]: Without dead ends: 891 [2022-01-11 05:52:18,649 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 05:52:18,649 INFO L933 BasicCegarLoop]: 131 mSDtfsCounter, 234 mSDsluCounter, 265 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 234 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:18,649 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [234 Valid, 396 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:18,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 891 states. [2022-01-11 05:52:18,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 891 to 362. [2022-01-11 05:52:18,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 362 states, 361 states have (on average 1.1939058171745152) internal successors, (431), 361 states have internal predecessors, (431), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:18,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 362 states to 362 states and 431 transitions. [2022-01-11 05:52:18,705 INFO L78 Accepts]: Start accepts. Automaton has 362 states and 431 transitions. Word has length 74 [2022-01-11 05:52:18,705 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:18,705 INFO L470 AbstractCegarLoop]: Abstraction has 362 states and 431 transitions. [2022-01-11 05:52:18,705 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:18,705 INFO L276 IsEmpty]: Start isEmpty. Operand 362 states and 431 transitions. [2022-01-11 05:52:18,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2022-01-11 05:52:18,706 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:52:18,706 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:18,706 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-01-11 05:52:18,706 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:52:18,707 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:52:18,707 INFO L85 PathProgramCache]: Analyzing trace with hash -1456288709, now seen corresponding path program 1 times [2022-01-11 05:52:18,707 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:52:18,707 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [349895393] [2022-01-11 05:52:18,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:52:18,707 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:52:18,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:52:18,736 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-01-11 05:52:18,736 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:52:18,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [349895393] [2022-01-11 05:52:18,736 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [349895393] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:52:18,736 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:52:18,737 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 05:52:18,737 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1189103897] [2022-01-11 05:52:18,737 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:52:18,738 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:52:18,738 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:52:18,738 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:52:18,738 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:18,738 INFO L87 Difference]: Start difference. First operand 362 states and 431 transitions. Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:18,785 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:52:18,785 INFO L93 Difference]: Finished difference Result 705 states and 839 transitions. [2022-01-11 05:52:18,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:52:18,786 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 77 [2022-01-11 05:52:18,786 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:52:18,786 INFO L225 Difference]: With dead ends: 705 [2022-01-11 05:52:18,786 INFO L226 Difference]: Without dead ends: 0 [2022-01-11 05:52:18,786 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:52:18,787 INFO L933 BasicCegarLoop]: 92 mSDtfsCounter, 28 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 158 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:52:18,788 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [28 Valid, 158 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:52:18,788 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-11 05:52:18,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-11 05:52:18,788 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:18,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-11 05:52:18,788 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 77 [2022-01-11 05:52:18,788 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:52:18,788 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-11 05:52:18,789 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:52:18,789 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-11 05:52:18,789 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-11 05:52:18,791 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-11 05:52:18,791 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-11 05:52:18,791 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-11 05:52:18,792 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-01-11 05:52:18,793 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-11 05:52:44,535 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-11 05:52:44,535 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-11 05:52:44,535 INFO L854 garLoopResultBuilder]: At program point L518(lines 514 520) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:44,535 INFO L854 garLoopResultBuilder]: At program point L511(lines 507 513) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:44,535 INFO L854 garLoopResultBuilder]: At program point L526(lines 521 529) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:44,535 INFO L858 garLoopResultBuilder]: For program point L442(lines 442 449) no Hoare annotation was computed. [2022-01-11 05:52:44,536 INFO L854 garLoopResultBuilder]: At program point L414(lines 410 416) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:44,536 INFO L858 garLoopResultBuilder]: For program point L442-2(lines 442 449) no Hoare annotation was computed. [2022-01-11 05:52:44,536 INFO L854 garLoopResultBuilder]: At program point L463(lines 458 465) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:44,536 INFO L861 garLoopResultBuilder]: At program point L451(lines 432 454) the Hoare annotation is: true [2022-01-11 05:52:44,536 INFO L854 garLoopResultBuilder]: At program point L66-2(lines 66 115) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (= ~methAndRunningLastTime~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 1 ~systemActive~0Int)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse3 .cse5 .cse8 .cse6) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse9 .cse4 .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-11 05:52:44,536 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-11 05:52:44,536 INFO L854 garLoopResultBuilder]: At program point L116(lines 65 117) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse5 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse6 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse2 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse6 .cse2 .cse3 (<= 1 ~pumpRunning~0Int)) (and .cse1 .cse4 .cse5 .cse6 .cse2 .cse3))) [2022-01-11 05:52:44,536 INFO L858 garLoopResultBuilder]: For program point L67(lines 66 115) no Hoare annotation was computed. [2022-01-11 05:52:44,536 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-11 05:52:44,536 INFO L858 garLoopResultBuilder]: For program point L142-3(lines 142 148) no Hoare annotation was computed. [2022-01-11 05:52:44,536 INFO L858 garLoopResultBuilder]: For program point L68(lines 68 72) no Hoare annotation was computed. [2022-01-11 05:52:44,536 INFO L858 garLoopResultBuilder]: For program point L538-3(lines 538 542) no Hoare annotation was computed. [2022-01-11 05:52:44,536 INFO L858 garLoopResultBuilder]: For program point L142-5(lines 141 160) no Hoare annotation was computed. [2022-01-11 05:52:44,536 INFO L858 garLoopResultBuilder]: For program point L76(lines 76 82) no Hoare annotation was computed. [2022-01-11 05:52:44,536 INFO L854 garLoopResultBuilder]: At program point L538-5(lines 534 545) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,537 INFO L858 garLoopResultBuilder]: For program point L200-2(lines 200 217) no Hoare annotation was computed. [2022-01-11 05:52:44,537 INFO L858 garLoopResultBuilder]: For program point L149-3(lines 149 155) no Hoare annotation was computed. [2022-01-11 05:52:44,537 INFO L858 garLoopResultBuilder]: For program point L550(lines 550 554) no Hoare annotation was computed. [2022-01-11 05:52:44,538 INFO L858 garLoopResultBuilder]: For program point L76-2(lines 76 82) no Hoare annotation was computed. [2022-01-11 05:52:44,538 INFO L854 garLoopResultBuilder]: At program point L630-1(lines 625 633) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,538 INFO L858 garLoopResultBuilder]: For program point L174-6(lines 174 191) no Hoare annotation was computed. [2022-01-11 05:52:44,538 INFO L854 garLoopResultBuilder]: At program point L575-1(lines 570 578) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~pumpRunning~0Int)) (and .cse0 .cse4 .cse1 .cse2) (and .cse4 .cse1 .cse2 .cse3))) [2022-01-11 05:52:44,538 INFO L854 garLoopResultBuilder]: At program point L550-2(lines 546 557) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0Int 0)) (.cse5 (= ~methAndRunningLastTime~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse6 (<= 1 ~systemActive~0Int)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 (= ~systemActive~0Int 0) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)))) [2022-01-11 05:52:44,543 INFO L858 garLoopResultBuilder]: For program point L86(lines 86 92) no Hoare annotation was computed. [2022-01-11 05:52:44,543 INFO L858 garLoopResultBuilder]: For program point L321-3(lines 321 325) no Hoare annotation was computed. [2022-01-11 05:52:44,543 INFO L858 garLoopResultBuilder]: For program point L615-3(lines 615 621) no Hoare annotation was computed. [2022-01-11 05:52:44,544 INFO L854 garLoopResultBuilder]: At program point L166-7(lines 162 168) the Hoare annotation is: false [2022-01-11 05:52:44,544 INFO L858 garLoopResultBuilder]: For program point L474-2(lines 474 491) no Hoare annotation was computed. [2022-01-11 05:52:44,544 INFO L858 garLoopResultBuilder]: For program point L562(lines 562 566) no Hoare annotation was computed. [2022-01-11 05:52:44,544 INFO L858 garLoopResultBuilder]: For program point L86-2(lines 86 92) no Hoare annotation was computed. [2022-01-11 05:52:44,544 INFO L858 garLoopResultBuilder]: For program point L321-5(lines 321 325) no Hoare annotation was computed. [2022-01-11 05:52:44,544 INFO L854 garLoopResultBuilder]: At program point L620-3(lines 611 624) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:44,544 INFO L854 garLoopResultBuilder]: At program point L174-7(lines 170 194) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0) .cse0 (= ~pumpRunning~0Int 0) .cse1))) [2022-01-11 05:52:44,544 INFO L854 garLoopResultBuilder]: At program point L253-1(lines 248 256) the Hoare annotation is: false [2022-01-11 05:52:44,544 INFO L854 garLoopResultBuilder]: At program point L474-3(lines 466 494) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0))) (or (and (<= 1 ~systemActive~0Int) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)) (and (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-01-11 05:52:44,544 INFO L854 garLoopResultBuilder]: At program point L562-2(lines 558 569) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (= ~methAndRunningLastTime~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 1 ~systemActive~0Int)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse3 .cse5 .cse8 .cse6) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse9 .cse4 .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-11 05:52:44,544 INFO L858 garLoopResultBuilder]: For program point L96(lines 96 111) no Hoare annotation was computed. [2022-01-11 05:52:44,544 INFO L854 garLoopResultBuilder]: At program point L327-1(lines 312 330) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,544 INFO L858 garLoopResultBuilder]: For program point L302-9(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,544 INFO L854 garLoopResultBuilder]: At program point L200-3(lines 196 220) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) (and .cse0 (= ~pumpRunning~0Int 0) .cse1))) [2022-01-11 05:52:44,544 INFO L858 garLoopResultBuilder]: For program point L478-2(lines 478 488) no Hoare annotation was computed. [2022-01-11 05:52:44,544 INFO L854 garLoopResultBuilder]: At program point L159-1(lines 138 161) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0))) (or (and (<= 1 ~systemActive~0Int) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)) (and (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-01-11 05:52:44,545 INFO L854 garLoopResultBuilder]: At program point L351(lines 346 353) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0)) (.cse4 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse5 (< ~waterLevel~0Int 4294967296)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse6 (<= 0 ~waterLevel~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int) .cse3) (and .cse4 .cse5 .cse0 .cse1 .cse6 .cse2 .cse3) (and .cse4 .cse5 .cse0 .cse6 .cse2 (<= 1 ~pumpRunning~0Int)))) [2022-01-11 05:52:44,545 INFO L858 garLoopResultBuilder]: For program point L104(lines 104 110) no Hoare annotation was computed. [2022-01-11 05:52:44,545 INFO L858 garLoopResultBuilder]: For program point L204-3(lines 204 212) no Hoare annotation was computed. [2022-01-11 05:52:44,545 INFO L858 garLoopResultBuilder]: For program point L302-11(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,545 INFO L858 garLoopResultBuilder]: For program point L479-3(lines 479 485) no Hoare annotation was computed. [2022-01-11 05:52:44,545 INFO L854 garLoopResultBuilder]: At program point L366-2(lines 366 380) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0))) (or (and (<= 1 ~systemActive~0Int) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)) (and (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-01-11 05:52:44,545 INFO L858 garLoopResultBuilder]: For program point L104-2(lines 96 111) no Hoare annotation was computed. [2022-01-11 05:52:44,545 INFO L858 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2022-01-11 05:52:44,545 INFO L854 garLoopResultBuilder]: At program point L234-2(lines 229 236) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 05:52:44,545 INFO L858 garLoopResultBuilder]: For program point L174-4(lines 174 191) no Hoare annotation was computed. [2022-01-11 05:52:44,545 INFO L854 garLoopResultBuilder]: At program point L308-3(lines 293 311) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:44,545 INFO L858 garLoopResultBuilder]: For program point L1005-1(line 1005) no Hoare annotation was computed. [2022-01-11 05:52:44,545 INFO L861 garLoopResultBuilder]: At program point L381(lines 356 385) the Hoare annotation is: true [2022-01-11 05:52:44,545 INFO L858 garLoopResultBuilder]: For program point L367(line 367) no Hoare annotation was computed. [2022-01-11 05:52:44,545 INFO L858 garLoopResultBuilder]: For program point L142(lines 142 148) no Hoare annotation was computed. [2022-01-11 05:52:44,546 INFO L854 garLoopResultBuilder]: At program point L234(lines 229 236) the Hoare annotation is: (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) (= ~pumpRunning~0Int 0) (<= 0 ~waterLevel~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) [2022-01-11 05:52:44,546 INFO L858 garLoopResultBuilder]: For program point L335-2(lines 335 341) no Hoare annotation was computed. [2022-01-11 05:52:44,546 INFO L858 garLoopResultBuilder]: For program point L615-2(lines 615 621) no Hoare annotation was computed. [2022-01-11 05:52:44,546 INFO L854 garLoopResultBuilder]: At program point L166-5(lines 162 168) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,547 INFO L858 garLoopResultBuilder]: For program point L178-9(lines 178 186) no Hoare annotation was computed. [2022-01-11 05:52:44,547 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2022-01-11 05:52:44,547 INFO L854 garLoopResultBuilder]: At program point L1006-1(lines 1001 1008) the Hoare annotation is: false [2022-01-11 05:52:44,547 INFO L861 garLoopResultBuilder]: At program point L121(lines 56 123) the Hoare annotation is: true [2022-01-11 05:52:44,548 INFO L858 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2022-01-11 05:52:44,548 INFO L858 garLoopResultBuilder]: For program point L538(lines 538 542) no Hoare annotation was computed. [2022-01-11 05:52:44,548 INFO L858 garLoopResultBuilder]: For program point L142-2(lines 141 160) no Hoare annotation was computed. [2022-01-11 05:52:44,548 INFO L854 garLoopResultBuilder]: At program point L343(lines 331 345) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~waterLevel~0Int)) (.cse0 (= ~systemActive~0Int 0))) (or (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 (<= 0 ~waterLevel~0Int) .cse2) (and .cse3 .cse0 .cse1 .cse2 .cse4 (<= ~methaneLevelCritical~0Int 0)) (and (or (and .cse3 .cse1 .cse2 .cse4 (= ~methAndRunningLastTime~0Int 0)) (and .cse3 .cse1 .cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 1)) .cse4 (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 0))) .cse0))) [2022-01-11 05:52:44,548 INFO L854 garLoopResultBuilder]: At program point L620-2(lines 611 624) the Hoare annotation is: false [2022-01-11 05:52:44,548 INFO L854 garLoopResultBuilder]: At program point L174-5(lines 170 194) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,548 INFO L854 garLoopResultBuilder]: At program point L226-3(lines 221 228) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,549 INFO L854 garLoopResultBuilder]: At program point L166-6(lines 162 168) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 05:52:44,549 INFO L861 garLoopResultBuilder]: At program point L426(lines 418 428) the Hoare annotation is: true [2022-01-11 05:52:44,549 INFO L858 garLoopResultBuilder]: For program point L370-1(lines 370 374) no Hoare annotation was computed. [2022-01-11 05:52:44,549 INFO L854 garLoopResultBuilder]: At program point L538-2(lines 534 545) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 ~waterLevel~0Int) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,549 INFO L858 garLoopResultBuilder]: For program point L200(lines 200 217) no Hoare annotation was computed. [2022-01-11 05:52:44,549 INFO L858 garLoopResultBuilder]: For program point L149-1(lines 149 155) no Hoare annotation was computed. [2022-01-11 05:52:44,549 INFO L858 garLoopResultBuilder]: For program point L302-6(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,549 INFO L858 garLoopResultBuilder]: For program point L142-6(lines 142 148) no Hoare annotation was computed. [2022-01-11 05:52:44,549 INFO L854 garLoopResultBuilder]: At program point L630(lines 625 633) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (<= 1 ~waterLevel~0Int) (<= 1 ~pumpRunning~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0)) [2022-01-11 05:52:44,549 INFO L858 garLoopResultBuilder]: For program point L174-2(lines 174 191) no Hoare annotation was computed. [2022-01-11 05:52:44,549 INFO L854 garLoopResultBuilder]: At program point L575(lines 570 578) the Hoare annotation is: (let ((.cse1 (= ~systemActive~0Int 0)) (.cse9 (<= 1 ~pumpRunning~0Int)) (.cse5 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse6 (< ~waterLevel~0Int 4294967296)) (.cse8 (<= 0 ~waterLevel~0Int)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse7 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse4 (<= 1 ~waterLevel~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) .cse8 .cse3 (<= ~methaneLevelCritical~0Int 0) .cse9) (and .cse5 .cse6 .cse1 .cse2 .cse8 .cse3) (and .cse5 .cse6 .cse7 .cse8 .cse3 (= ~methAndRunningLastTime~0Int 0) .cse9) (and .cse5 .cse6 .cse7 .cse2 .cse8 .cse3) (and .cse0 .cse7 .cse2 .cse3 .cse4))) [2022-01-11 05:52:44,550 INFO L858 garLoopResultBuilder]: For program point L302-8(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,550 INFO L858 garLoopResultBuilder]: For program point L538-6(lines 538 542) no Hoare annotation was computed. [2022-01-11 05:52:44,550 INFO L858 garLoopResultBuilder]: For program point L142-8(lines 141 160) no Hoare annotation was computed. [2022-01-11 05:52:44,550 INFO L858 garLoopResultBuilder]: For program point L321(lines 321 325) no Hoare annotation was computed. [2022-01-11 05:52:44,550 INFO L858 garLoopResultBuilder]: For program point L615-1(lines 615 621) no Hoare annotation was computed. [2022-01-11 05:52:44,550 INFO L854 garLoopResultBuilder]: At program point L166-3(lines 162 168) the Hoare annotation is: false [2022-01-11 05:52:44,550 INFO L858 garLoopResultBuilder]: For program point L474(lines 474 491) no Hoare annotation was computed. [2022-01-11 05:52:44,550 INFO L854 garLoopResultBuilder]: At program point L308-2(lines 293 311) the Hoare annotation is: false [2022-01-11 05:52:44,550 INFO L854 garLoopResultBuilder]: At program point L538-8(lines 534 545) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,550 INFO L858 garLoopResultBuilder]: For program point L200-4(lines 200 217) no Hoare annotation was computed. [2022-01-11 05:52:44,550 INFO L858 garLoopResultBuilder]: For program point L149-5(lines 149 155) no Hoare annotation was computed. [2022-01-11 05:52:44,550 INFO L858 garLoopResultBuilder]: For program point L321-2(lines 321 325) no Hoare annotation was computed. [2022-01-11 05:52:44,550 INFO L854 garLoopResultBuilder]: At program point L620-1(lines 611 624) the Hoare annotation is: (let ((.cse3 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse4 (< ~waterLevel~0Int 4294967296)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse5 (<= 0 ~waterLevel~0Int)) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= 1 |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int|) (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int)) (and .cse3 .cse4 .cse0 .cse1 .cse5 .cse2 (<= ~methaneLevelCritical~0Int 0)) (and .cse3 .cse4 .cse0 .cse1 .cse5 .cse2 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-11 05:52:44,550 INFO L854 garLoopResultBuilder]: At program point L174-3(lines 170 194) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1))) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse5 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse6 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse7 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse8 (<= 1 ~pumpRunning~0Int))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and .cse5 .cse6 .cse0 .cse1 .cse2 .cse3 .cse7 .cse4) (and .cse5 .cse6 .cse2 .cse7 .cse4 (<= ~methaneLevelCritical~0Int 0) .cse8) (and .cse5 .cse6 .cse2 .cse7 .cse4 (= ~methAndRunningLastTime~0Int 0) .cse8))) [2022-01-11 05:52:44,550 INFO L854 garLoopResultBuilder]: At program point L253(lines 248 256) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1)) (.cse5 (<= 1 ~waterLevel~0Int)) (.cse6 (= ~systemActive~0Int 0)) (.cse7 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse8 (< ~waterLevel~0Int 4294967296)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse9 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse1 .cse3 .cse4 .cse5) (and .cse7 .cse8 .cse2 .cse9 .cse4 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) (and .cse7 .cse8 .cse6 .cse1 .cse3 .cse9 .cse4) (and .cse7 .cse8 .cse1 .cse2 .cse3 .cse9 .cse4))) [2022-01-11 05:52:44,551 INFO L854 garLoopResultBuilder]: At program point L474-1(lines 466 494) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (= ~methAndRunningLastTime~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 1 ~systemActive~0Int)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse3 .cse5 .cse8 .cse6) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse9 .cse4 .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-11 05:52:44,551 INFO L858 garLoopResultBuilder]: For program point L178-6(lines 178 186) no Hoare annotation was computed. [2022-01-11 05:52:44,551 INFO L854 garLoopResultBuilder]: At program point L630-2(lines 625 633) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,551 INFO L858 garLoopResultBuilder]: For program point L174-10(lines 174 191) no Hoare annotation was computed. [2022-01-11 05:52:44,551 INFO L854 garLoopResultBuilder]: At program point L575-2(lines 570 578) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse4 (= ~pumpRunning~0Int 0)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (<= ~methaneLevelCritical~0Int 0)) (.cse3 (= ~methAndRunningLastTime~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~pumpRunning~0Int)) (and .cse0 .cse4 .cse1 .cse2) (and .cse4 .cse1 .cse2 .cse3))) [2022-01-11 05:52:44,551 INFO L854 garLoopResultBuilder]: At program point L327(lines 312 330) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 1)) (= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~2#1Int| 1) (<= 1 ~waterLevel~0Int) (= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int| 1) (<= 1 ~pumpRunning~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 0)) [2022-01-11 05:52:44,551 INFO L858 garLoopResultBuilder]: For program point L302-3(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,551 INFO L854 garLoopResultBuilder]: At program point L200-1(lines 196 220) the Hoare annotation is: (let ((.cse5 (<= 1 ~pumpRunning~0Int)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse6 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0Int 0) .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4) (and (<= ~waterLevel~0Int 1) .cse2 .cse6 .cse4 (<= 1 ~waterLevel~0Int)))) [2022-01-11 05:52:44,551 INFO L858 garLoopResultBuilder]: For program point L478(lines 478 488) no Hoare annotation was computed. [2022-01-11 05:52:44,551 INFO L854 garLoopResultBuilder]: At program point L159(lines 138 161) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0Int 0)) (.cse7 (<= ~waterLevel~0Int 1)) (.cse8 (<= 1 ~waterLevel~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse6 (= ~methAndRunningLastTime~0Int 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse9 (<= 1 ~systemActive~0Int)) (.cse4 (<= 0 ~waterLevel~0Int)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse3 .cse5 .cse8 .cse6) (and .cse0 .cse1 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse9 .cse4 .cse5 (<= 1 ~pumpRunning~0Int)))) [2022-01-11 05:52:44,551 INFO L854 garLoopResultBuilder]: At program point L226-2(lines 221 228) the Hoare annotation is: false [2022-01-11 05:52:44,551 INFO L854 garLoopResultBuilder]: At program point L166-4(lines 162 168) the Hoare annotation is: false [2022-01-11 05:52:44,551 INFO L858 garLoopResultBuilder]: For program point L321-6(lines 321 325) no Hoare annotation was computed. [2022-01-11 05:52:44,551 INFO L858 garLoopResultBuilder]: For program point L615-5(lines 615 621) no Hoare annotation was computed. [2022-01-11 05:52:44,551 INFO L854 garLoopResultBuilder]: At program point L166-11(lines 162 168) the Hoare annotation is: false [2022-01-11 05:52:44,551 INFO L858 garLoopResultBuilder]: For program point L474-4(lines 474 491) no Hoare annotation was computed. [2022-01-11 05:52:44,552 INFO L858 garLoopResultBuilder]: For program point L204(lines 204 212) no Hoare annotation was computed. [2022-01-11 05:52:44,552 INFO L858 garLoopResultBuilder]: For program point L302-5(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,552 INFO L858 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2022-01-11 05:52:44,552 INFO L858 garLoopResultBuilder]: For program point L321-8(lines 321 325) no Hoare annotation was computed. [2022-01-11 05:52:44,552 INFO L854 garLoopResultBuilder]: At program point L620-5(lines 611 624) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:44,552 INFO L854 garLoopResultBuilder]: At program point L174-11(lines 170 194) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0) .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3 .cse4))) [2022-01-11 05:52:44,552 INFO L854 garLoopResultBuilder]: At program point L253-2(lines 248 256) the Hoare annotation is: false [2022-01-11 05:52:44,552 INFO L854 garLoopResultBuilder]: At program point L474-5(lines 466 494) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0))) (or (and (<= 1 ~systemActive~0Int) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)) (and (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-01-11 05:52:44,552 INFO L854 garLoopResultBuilder]: At program point L234-1(lines 229 236) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~2#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))) (< 0 (+ |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 1)) (= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp___0~2#1Int| 1) (<= 1 ~waterLevel~0Int) (= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_#res#1Int| 1) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterSensorDry_#res#1Int| 0) (<= |ULTIMATE.start_ULTIMATE.start_isLowWaterLevel_~tmp~4#1Int| 0)) [2022-01-11 05:52:44,553 INFO L858 garLoopResultBuilder]: For program point L174(lines 174 191) no Hoare annotation was computed. [2022-01-11 05:52:44,553 INFO L854 garLoopResultBuilder]: At program point L308-1(lines 293 311) the Hoare annotation is: (let ((.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~1#1Int| 0)) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse2 (< ~waterLevel~0Int 4294967296)) (.cse4 (<= 1 ~systemActive~0Int)) (.cse5 (= ~pumpRunning~0Int 0)) (.cse6 (<= 0 ~waterLevel~0Int)) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse1 (<= ~waterLevel~0Int 1) .cse3 .cse4 .cse5 .cse7 (<= 1 ~waterLevel~0Int)) (and .cse0 .cse2 .cse4 .cse5 .cse6 .cse7 (<= ~methaneLevelCritical~0Int 0)) (and .cse0 .cse2 .cse4 .cse5 .cse6 .cse7 (= ~methAndRunningLastTime~0Int 0)))) [2022-01-11 05:52:44,553 INFO L858 garLoopResultBuilder]: For program point L1005(line 1005) no Hoare annotation was computed. [2022-01-11 05:52:44,553 INFO L854 garLoopResultBuilder]: At program point L327-2(lines 312 330) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,553 INFO L858 garLoopResultBuilder]: For program point L302-15(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,553 INFO L854 garLoopResultBuilder]: At program point L200-5(lines 196 220) the Hoare annotation is: (let ((.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse2 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse3 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse4 (<= ~methaneLevelCritical~0Int 0))) (or (and .cse0 (= ~pumpRunning~0Int 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)))) [2022-01-11 05:52:44,553 INFO L858 garLoopResultBuilder]: For program point L478-4(lines 478 488) no Hoare annotation was computed. [2022-01-11 05:52:44,553 INFO L854 garLoopResultBuilder]: At program point L159-2(lines 138 161) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0)) (.cse1 (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1))) (.cse2 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0)) (.cse3 (<= ~methaneLevelCritical~0Int 0)) (.cse4 (= ~methAndRunningLastTime~0Int 0))) (or (and (<= 1 ~systemActive~0Int) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~pumpRunning~0Int)) (and (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-01-11 05:52:44,553 INFO L858 garLoopResultBuilder]: For program point L615(lines 615 621) no Hoare annotation was computed. [2022-01-11 05:52:44,553 INFO L854 garLoopResultBuilder]: At program point L166-1(lines 162 168) the Hoare annotation is: false [2022-01-11 05:52:44,553 INFO L858 garLoopResultBuilder]: For program point L178-3(lines 178 186) no Hoare annotation was computed. [2022-01-11 05:52:44,553 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2022-01-11 05:52:44,553 INFO L854 garLoopResultBuilder]: At program point L1006(lines 1001 1008) the Hoare annotation is: false [2022-01-11 05:52:44,553 INFO L858 garLoopResultBuilder]: For program point L204-6(lines 204 212) no Hoare annotation was computed. [2022-01-11 05:52:44,553 INFO L858 garLoopResultBuilder]: For program point L302-17(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,553 INFO L858 garLoopResultBuilder]: For program point L479-6(lines 479 485) no Hoare annotation was computed. [2022-01-11 05:52:44,554 INFO L854 garLoopResultBuilder]: At program point L620(lines 611 624) the Hoare annotation is: false [2022-01-11 05:52:44,554 INFO L854 garLoopResultBuilder]: At program point L174-1(lines 170 194) the Hoare annotation is: false [2022-01-11 05:52:44,554 INFO L854 garLoopResultBuilder]: At program point L226-1(lines 221 228) the Hoare annotation is: (let ((.cse0 (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296))) (.cse1 (< ~waterLevel~0Int 4294967296)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= 0 ~waterLevel~0Int)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648))))) (.cse5 (<= 1 ~pumpRunning~0Int))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0Int 0) .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~methAndRunningLastTime~0Int 0) .cse5))) [2022-01-11 05:52:44,554 INFO L854 garLoopResultBuilder]: At program point L166-2(lines 162 168) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1))) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse4 (<= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| (+ 3 (* 4294967296 (div |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 2147483648)))))) (or (and (<= ~waterLevel~0Int 1) .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0Int)) (and (<= (div (+ (- 2) ~waterLevel~0Int) (- 4294967296)) (div (+ 2 (* (- 1) ~waterLevel~0Int)) 4294967296)) (< ~waterLevel~0Int 4294967296) .cse0 .cse1 .cse2 .cse3 (<= 0 ~waterLevel~0Int) .cse4))) [2022-01-11 05:52:44,554 INFO L854 garLoopResultBuilder]: At program point L234-3(lines 229 236) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 05:52:44,554 INFO L858 garLoopResultBuilder]: For program point L174-8(lines 174 191) no Hoare annotation was computed. [2022-01-11 05:52:44,554 INFO L854 garLoopResultBuilder]: At program point L308-5(lines 293 311) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0)) [2022-01-11 05:52:44,554 INFO L858 garLoopResultBuilder]: For program point L1005-2(line 1005) no Hoare annotation was computed. [2022-01-11 05:52:44,554 INFO L858 garLoopResultBuilder]: For program point L302(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,554 INFO L858 garLoopResultBuilder]: For program point L615-4(lines 615 621) no Hoare annotation was computed. [2022-01-11 05:52:44,554 INFO L854 garLoopResultBuilder]: At program point L166-9(lines 162 168) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,554 INFO L858 garLoopResultBuilder]: For program point L178-15(lines 178 186) no Hoare annotation was computed. [2022-01-11 05:52:44,554 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 1005) no Hoare annotation was computed. [2022-01-11 05:52:44,554 INFO L854 garLoopResultBuilder]: At program point L1006-2(lines 1001 1008) the Hoare annotation is: false [2022-01-11 05:52:44,554 INFO L858 garLoopResultBuilder]: For program point L302-2(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,554 INFO L854 garLoopResultBuilder]: At program point L620-4(lines 611 624) the Hoare annotation is: false [2022-01-11 05:52:44,555 INFO L854 garLoopResultBuilder]: At program point L174-9(lines 170 194) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,555 INFO L854 garLoopResultBuilder]: At program point L226-5(lines 221 228) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0) (= ~methAndRunningLastTime~0Int 0) (<= 1 ~pumpRunning~0Int)) [2022-01-11 05:52:44,555 INFO L854 garLoopResultBuilder]: At program point L166-10(lines 162 168) the Hoare annotation is: (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1#1Int| 0) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= |ULTIMATE.start_ULTIMATE.start_isMethaneLevelCritical_#res#1Int| 0) (< 0 (+ |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~6#1Int| 0) (<= ~methaneLevelCritical~0Int 0)) [2022-01-11 05:52:44,555 INFO L854 garLoopResultBuilder]: At program point L308(lines 293 311) the Hoare annotation is: false [2022-01-11 05:52:44,555 INFO L858 garLoopResultBuilder]: For program point L302-12(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,555 INFO L858 garLoopResultBuilder]: For program point L178(lines 178 186) no Hoare annotation was computed. [2022-01-11 05:52:44,555 INFO L858 garLoopResultBuilder]: For program point L302-14(lines 302 306) no Hoare annotation was computed. [2022-01-11 05:52:44,555 INFO L854 garLoopResultBuilder]: At program point L226(lines 221 228) the Hoare annotation is: false [2022-01-11 05:52:44,555 INFO L854 garLoopResultBuilder]: At program point L166(lines 162 168) the Hoare annotation is: false [2022-01-11 05:52:44,555 INFO L854 garLoopResultBuilder]: At program point L308-4(lines 293 311) the Hoare annotation is: false [2022-01-11 05:52:44,555 INFO L858 garLoopResultBuilder]: For program point L178-12(lines 178 186) no Hoare annotation was computed. [2022-01-11 05:52:44,556 INFO L854 garLoopResultBuilder]: At program point L226-4(lines 221 228) the Hoare annotation is: false [2022-01-11 05:52:44,556 INFO L854 garLoopResultBuilder]: At program point L166-8(lines 162 168) the Hoare annotation is: false [2022-01-11 05:52:44,558 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:52:44,559 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-11 05:52:44,681 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 05:52:44 BasicIcfg [2022-01-11 05:52:44,681 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-11 05:52:44,682 INFO L158 Benchmark]: Toolchain (without parser) took 32082.39ms. Allocated memory was 188.7MB in the beginning and 746.6MB in the end (delta: 557.8MB). Free memory was 131.1MB in the beginning and 300.5MB in the end (delta: -169.4MB). Peak memory consumption was 436.3MB. Max. memory is 8.0GB. [2022-01-11 05:52:44,682 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 188.7MB. Free memory is still 148.8MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-11 05:52:44,682 INFO L158 Benchmark]: CACSL2BoogieTranslator took 423.90ms. Allocated memory was 188.7MB in the beginning and 307.2MB in the end (delta: 118.5MB). Free memory was 130.9MB in the beginning and 262.4MB in the end (delta: -131.5MB). Peak memory consumption was 7.1MB. Max. memory is 8.0GB. [2022-01-11 05:52:44,683 INFO L158 Benchmark]: Boogie Procedure Inliner took 62.94ms. Allocated memory is still 307.2MB. Free memory was 262.4MB in the beginning and 259.2MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-11 05:52:44,683 INFO L158 Benchmark]: Boogie Preprocessor took 36.71ms. Allocated memory is still 307.2MB. Free memory was 259.2MB in the beginning and 256.1MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-11 05:52:44,683 INFO L158 Benchmark]: RCFGBuilder took 557.62ms. Allocated memory is still 307.2MB. Free memory was 256.1MB in the beginning and 230.9MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 8.0GB. [2022-01-11 05:52:44,683 INFO L158 Benchmark]: IcfgTransformer took 100.10ms. Allocated memory is still 307.2MB. Free memory was 230.9MB in the beginning and 221.5MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. [2022-01-11 05:52:44,683 INFO L158 Benchmark]: TraceAbstraction took 30896.59ms. Allocated memory was 307.2MB in the beginning and 746.6MB in the end (delta: 439.4MB). Free memory was 221.0MB in the beginning and 300.5MB in the end (delta: -79.5MB). Peak memory consumption was 408.0MB. Max. memory is 8.0GB. [2022-01-11 05:52:44,685 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 188.7MB. Free memory is still 148.8MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 423.90ms. Allocated memory was 188.7MB in the beginning and 307.2MB in the end (delta: 118.5MB). Free memory was 130.9MB in the beginning and 262.4MB in the end (delta: -131.5MB). Peak memory consumption was 7.1MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 62.94ms. Allocated memory is still 307.2MB. Free memory was 262.4MB in the beginning and 259.2MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 36.71ms. Allocated memory is still 307.2MB. Free memory was 259.2MB in the beginning and 256.1MB in the end (delta: 3.1MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 557.62ms. Allocated memory is still 307.2MB. Free memory was 256.1MB in the beginning and 230.9MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 8.0GB. * IcfgTransformer took 100.10ms. Allocated memory is still 307.2MB. Free memory was 230.9MB in the beginning and 221.5MB in the end (delta: 9.4MB). Peak memory consumption was 9.4MB. Max. memory is 8.0GB. * TraceAbstraction took 30896.59ms. Allocated memory was 307.2MB in the beginning and 746.6MB in the end (delta: 439.4MB). Free memory was 221.0MB in the beginning and 300.5MB in the end (delta: -79.5MB). Peak memory consumption was 408.0MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1005]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 1005]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 1005]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 174 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 30.7s, OverallIterations: 14, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 25.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4120 SdHoareTripleChecker+Valid, 0.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4120 mSDsluCounter, 7870 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4948 mSDsCounter, 154 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 556 IncrementalHoareTripleChecker+Invalid, 710 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 154 mSolverCounterUnsat, 2922 mSDtfsCounter, 556 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 227 GetRequests, 166 SyntacticMatches, 5 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 120 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1037occurred in iteration=12, InterpolantAutomatonStates: 76, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 14 MinimizatonAttempts, 4432 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 83 LocationsWithAnnotation, 83 PreInvPairs, 270 NumberOfFragments, 3271 HoareAnnotationTreeSize, 83 FomulaSimplifications, 79422 FormulaSimplificationTreeSizeReduction, 17.4s HoareSimplificationTime, 83 FomulaSimplificationsInter, 421494 FormulaSimplificationTreeSizeReductionInter, 8.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 800 NumberOfCodeBlocks, 800 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 858 ConstructedInterpolants, 0 QuantifiedInterpolants, 3725 SizeOfPredicates, 4 NumberOfNonLiveVariables, 619 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 16 InterpolantComputations, 13 PerfectInterpolantSequences, 114/132 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: ((((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive) - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 229]: Loop Invariant Derived loop invariant: (((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 229]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 514]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: ((((((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 570]: Loop Invariant Derived loop invariant: ((((((((systemActive == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32))) || (((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning) - InvariantResult [Line: 570]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: ((((~bvule32(1bv32, pumpRunning) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32) - InvariantResult [Line: 546]: Loop Invariant Derived loop invariant: (((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: ((((((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: (((((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((systemActive == 0bv32 && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule32(\result, 0bv32)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: ((((((((\result == 1bv32 && ~bvule32(1bv32, pumpRunning)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && tmp___0 == 1bv32 - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || (((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: ((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || (((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(tmp, 0bv32)) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 331]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && systemActive == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || (((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (systemActive == 0bv32 && (((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) || ((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning))) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 56]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: ((((((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning)) || (((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 170]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: (((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) || (((((~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31]))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(1bv32, \result)) && 0bv32 == pumpRunning)) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 570]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning) || (((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(\result, 0bv32)) && 0bv32 == pumpRunning)) || ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) || (((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: ((((((((systemActive == 0bv32 && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning) || ((((((systemActive == 0bv32 && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && 0bv32 == pumpRunning)) || (((((methAndRunningLastTime == 0bv32 && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive))) || ((((((~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32]) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: ((((((~bvule32(1bv32, pumpRunning) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && methAndRunningLastTime == 0bv32) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) || ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && ~bvsle32((if !(0bv33 == ~bvurem33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) then (if ~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel))[32:32] == 1bv1 then ~bvadd16(~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33), 1bv33) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)) else ~bvsdiv33(~bvadd16(8589934590bv33, ~zero_extendFrom32To33(waterLevel)), 4294967296bv33)), ~bvadd16(2bv65, ~sign_extendFrom32To64(~bvmul64(18446744073709551615bv64, ~zero_extendFrom32To64(waterLevel))))[64:32])) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(0bv32, waterLevel)) && ~bvult64(~zero_extendFrom32To33(waterLevel), 4294967296bv33)) && ~bvule32(1bv32, systemActive)) - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 229]: Loop Invariant Derived loop invariant: ((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 229]: Loop Invariant Derived loop invariant: (((((((((\result == 1bv32 && ~bvule32(1bv32, tmp)) && ~bvule34(~zero_extendFrom32To34(splverifierCounter), ~bvadd16(3bv34, ~zero_extendFrom33To34(~bvmul64(4294967296bv33, ~zero_extendFrom1To33(splverifierCounter[31:31])))))) && ~bvule32(1bv32, waterLevel)) && ~bvule32(\result, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning) && tmp___0 == 1bv32 - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 611]: Loop Invariant Derived loop invariant: ((~bvule32(methaneLevelCritical, 0bv32) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning - InvariantResult [Line: 221]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: ((((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 0bv32 == pumpRunning - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(\result, 0bv32)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) - InvariantResult [Line: 196]: Loop Invariant Derived loop invariant: (((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, pumpRunning)) && methAndRunningLastTime == 0bv32) && ~bvule32(1bv32, systemActive)) || ((~bvule32(methaneLevelCritical, 0bv32) && ~bvule32(1bv32, systemActive)) && 0bv32 == pumpRunning) - InvariantResult [Line: 293]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 356]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-01-11 05:52:44,752 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...