/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data --core.log.level.for.class de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN -tc ../../../trunk/examples/toolchains/AutomizerCInlineTransformed.xml -s ../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_SUM.epf -i ../../../trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-a10ec3b [2022-01-11 05:55:42,344 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-01-11 05:55:42,345 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-01-11 05:55:42,414 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-01-11 05:55:42,414 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-01-11 05:55:42,415 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-01-11 05:55:42,418 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-01-11 05:55:42,419 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-01-11 05:55:42,420 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-01-11 05:55:42,421 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-01-11 05:55:42,421 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-01-11 05:55:42,422 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-01-11 05:55:42,422 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-01-11 05:55:42,427 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-01-11 05:55:42,445 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-01-11 05:55:42,447 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-01-11 05:55:42,447 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-01-11 05:55:42,451 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-01-11 05:55:42,453 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-01-11 05:55:42,454 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-01-11 05:55:42,455 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-01-11 05:55:42,459 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-01-11 05:55:42,460 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-01-11 05:55:42,460 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-01-11 05:55:42,464 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-01-11 05:55:42,464 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-01-11 05:55:42,464 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-01-11 05:55:42,465 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-01-11 05:55:42,465 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-01-11 05:55:42,465 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-01-11 05:55:42,466 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-01-11 05:55:42,466 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-01-11 05:55:42,466 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-01-11 05:55:42,467 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-01-11 05:55:42,467 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-01-11 05:55:42,467 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-01-11 05:55:42,468 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-01-11 05:55:42,468 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-01-11 05:55:42,468 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-01-11 05:55:42,469 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-01-11 05:55:42,469 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-01-11 05:55:42,473 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/automizer/BvToInt/svcomp-Reach-64bit-Automizer_BvToInt_SUM.epf [2022-01-11 05:55:42,493 INFO L113 SettingsManager]: Loading preferences was successful [2022-01-11 05:55:42,493 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-01-11 05:55:42,493 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-01-11 05:55:42,494 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-01-11 05:55:42,494 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-01-11 05:55:42,494 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-01-11 05:55:42,495 INFO L138 SettingsManager]: * Use SBE=true [2022-01-11 05:55:42,495 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-01-11 05:55:42,495 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-01-11 05:55:42,495 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-01-11 05:55:42,496 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-01-11 05:55:42,496 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-01-11 05:55:42,496 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-01-11 05:55:42,496 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-01-11 05:55:42,496 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-01-11 05:55:42,496 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-01-11 05:55:42,496 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-01-11 05:55:42,496 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-01-11 05:55:42,496 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-01-11 05:55:42,496 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-01-11 05:55:42,496 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-01-11 05:55:42,498 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 05:55:42,498 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-01-11 05:55:42,498 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-01-11 05:55:42,498 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-01-11 05:55:42,498 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-01-11 05:55:42,498 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-01-11 05:55:42,498 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-01-11 05:55:42,498 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-01-11 05:55:42,498 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-01-11 05:55:42,498 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-01-11 05:55:42,499 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-01-11 05:55:42,500 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-01-11 05:55:42,500 INFO L138 SettingsManager]: * TransformationType=BV_TO_INT_SUM WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.core: Log level for class -> de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=WARN; [2022-01-11 05:55:42,690 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-01-11 05:55:42,705 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-01-11 05:55:42,706 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-01-11 05:55:42,707 INFO L271 PluginConnector]: Initializing CDTParser... [2022-01-11 05:55:42,717 INFO L275 PluginConnector]: CDTParser initialized [2022-01-11 05:55:42,718 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c [2022-01-11 05:55:42,782 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2e68090a7/0a63932e9c154a8bbcf12f5452b1792b/FLAGc6e06fbc3 [2022-01-11 05:55:43,245 INFO L306 CDTParser]: Found 1 translation units. [2022-01-11 05:55:43,246 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c [2022-01-11 05:55:43,256 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2e68090a7/0a63932e9c154a8bbcf12f5452b1792b/FLAGc6e06fbc3 [2022-01-11 05:55:43,272 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2e68090a7/0a63932e9c154a8bbcf12f5452b1792b [2022-01-11 05:55:43,274 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-01-11 05:55:43,277 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-01-11 05:55:43,278 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-01-11 05:55:43,278 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-01-11 05:55:43,289 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-01-11 05:55:43,290 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,290 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5a24aa2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43, skipping insertion in model container [2022-01-11 05:55:43,291 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,295 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-01-11 05:55:43,331 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 05:55:43,549 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2022-01-11 05:55:43,553 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 05:55:43,564 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-01-11 05:55:43,570 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-01-11 05:55:43,634 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2022-01-11 05:55:43,635 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 05:55:43,657 INFO L203 MainTranslator]: Completed pre-run [2022-01-11 05:55:43,705 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/trunk/examples/svcomp/product-lines/minepump_spec5_product51.cil.c[18485,18498] [2022-01-11 05:55:43,706 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-01-11 05:55:43,740 INFO L208 MainTranslator]: Completed translation [2022-01-11 05:55:43,740 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43 WrapperNode [2022-01-11 05:55:43,740 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-01-11 05:55:43,741 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-01-11 05:55:43,741 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-01-11 05:55:43,741 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-01-11 05:55:43,746 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,768 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,800 INFO L137 Inliner]: procedures = 60, calls = 159, calls flagged for inlining = 56, calls inlined = 86, statements flattened = 646 [2022-01-11 05:55:43,800 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-01-11 05:55:43,801 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-01-11 05:55:43,801 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-01-11 05:55:43,801 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-01-11 05:55:43,808 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,808 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,812 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,813 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,822 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,845 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,847 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,860 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-01-11 05:55:43,861 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-01-11 05:55:43,861 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-01-11 05:55:43,861 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-01-11 05:55:43,862 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43" (1/1) ... [2022-01-11 05:55:43,881 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-01-11 05:55:43,892 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 05:55:43,933 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-01-11 05:55:43,952 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-01-11 05:55:43,962 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-01-11 05:55:43,962 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-01-11 05:55:43,962 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-01-11 05:55:43,963 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-01-11 05:55:44,030 INFO L234 CfgBuilder]: Building ICFG [2022-01-11 05:55:44,031 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-01-11 05:55:44,364 INFO L275 CfgBuilder]: Performing block encoding [2022-01-11 05:55:44,370 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-01-11 05:55:44,370 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-01-11 05:55:44,371 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 05:55:44 BoogieIcfgContainer [2022-01-11 05:55:44,371 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-01-11 05:55:44,372 INFO L113 PluginConnector]: ------------------------IcfgTransformer---------------------------- [2022-01-11 05:55:44,372 INFO L271 PluginConnector]: Initializing IcfgTransformer... [2022-01-11 05:55:44,374 INFO L275 PluginConnector]: IcfgTransformer initialized [2022-01-11 05:55:44,376 INFO L185 PluginConnector]: Executing the observer IcfgTransformationObserver from plugin IcfgTransformer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 05:55:44" (1/1) ... [2022-01-11 05:55:44,467 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 05:55:44 BasicIcfg [2022-01-11 05:55:44,467 INFO L132 PluginConnector]: ------------------------ END IcfgTransformer---------------------------- [2022-01-11 05:55:44,468 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-01-11 05:55:44,468 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-01-11 05:55:44,470 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-01-11 05:55:44,470 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.01 05:55:43" (1/4) ... [2022-01-11 05:55:44,471 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@65843676 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 05:55:44, skipping insertion in model container [2022-01-11 05:55:44,471 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.01 05:55:43" (2/4) ... [2022-01-11 05:55:44,471 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@65843676 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.01 05:55:44, skipping insertion in model container [2022-01-11 05:55:44,471 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.01 05:55:44" (3/4) ... [2022-01-11 05:55:44,471 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@65843676 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 05:55:44, skipping insertion in model container [2022-01-11 05:55:44,471 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.icfgtransformation CFG 11.01 05:55:44" (4/4) ... [2022-01-11 05:55:44,472 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product51.cil.cTransformedIcfg [2022-01-11 05:55:44,475 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-01-11 05:55:44,476 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-01-11 05:55:44,521 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-01-11 05:55:44,525 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-01-11 05:55:44,525 INFO L340 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-01-11 05:55:44,539 INFO L276 IsEmpty]: Start isEmpty. Operand has 179 states, 175 states have (on average 1.3885714285714286) internal successors, (243), 178 states have internal predecessors, (243), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:44,543 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-01-11 05:55:44,543 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:44,544 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:44,544 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:44,548 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:44,548 INFO L85 PathProgramCache]: Analyzing trace with hash -1497495490, now seen corresponding path program 1 times [2022-01-11 05:55:44,554 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:44,554 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1041279203] [2022-01-11 05:55:44,554 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:44,555 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:44,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:44,777 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:55:44,777 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:44,778 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1041279203] [2022-01-11 05:55:44,778 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1041279203] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:55:44,778 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:55:44,778 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 05:55:44,779 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [973065815] [2022-01-11 05:55:44,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:55:44,784 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-01-11 05:55:44,785 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:44,805 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-01-11 05:55:44,806 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 05:55:44,809 INFO L87 Difference]: Start difference. First operand has 179 states, 175 states have (on average 1.3885714285714286) internal successors, (243), 178 states have internal predecessors, (243), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:44,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:44,860 INFO L93 Difference]: Finished difference Result 347 states and 474 transitions. [2022-01-11 05:55:44,861 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-01-11 05:55:44,862 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-01-11 05:55:44,862 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:44,870 INFO L225 Difference]: With dead ends: 347 [2022-01-11 05:55:44,870 INFO L226 Difference]: Without dead ends: 169 [2022-01-11 05:55:44,872 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-01-11 05:55:44,875 INFO L933 BasicCegarLoop]: 233 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:44,875 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 233 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:55:44,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2022-01-11 05:55:44,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 169. [2022-01-11 05:55:44,905 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 166 states have (on average 1.355421686746988) internal successors, (225), 168 states have internal predecessors, (225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:44,906 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 225 transitions. [2022-01-11 05:55:44,907 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 225 transitions. Word has length 21 [2022-01-11 05:55:44,907 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:44,907 INFO L470 AbstractCegarLoop]: Abstraction has 169 states and 225 transitions. [2022-01-11 05:55:44,907 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:44,908 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 225 transitions. [2022-01-11 05:55:44,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-01-11 05:55:44,908 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:44,908 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:44,909 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-01-11 05:55:44,909 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:44,909 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:44,909 INFO L85 PathProgramCache]: Analyzing trace with hash 1486688822, now seen corresponding path program 1 times [2022-01-11 05:55:44,909 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:44,910 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [5610878] [2022-01-11 05:55:44,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:44,910 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:44,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:44,974 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:55:44,974 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:44,974 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [5610878] [2022-01-11 05:55:44,974 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [5610878] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:55:44,975 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:55:44,975 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 05:55:44,975 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2000902438] [2022-01-11 05:55:44,975 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:55:44,976 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:55:44,976 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:44,976 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:55:44,977 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:55:44,977 INFO L87 Difference]: Start difference. First operand 169 states and 225 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,032 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:45,032 INFO L93 Difference]: Finished difference Result 400 states and 535 transitions. [2022-01-11 05:55:45,032 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:55:45,033 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-01-11 05:55:45,033 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:45,035 INFO L225 Difference]: With dead ends: 400 [2022-01-11 05:55:45,035 INFO L226 Difference]: Without dead ends: 239 [2022-01-11 05:55:45,036 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:55:45,037 INFO L933 BasicCegarLoop]: 234 mSDtfsCounter, 206 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 206 SdHoareTripleChecker+Valid, 321 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:45,038 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [206 Valid, 321 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:55:45,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 239 states. [2022-01-11 05:55:45,056 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 239 to 230. [2022-01-11 05:55:45,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 227 states have (on average 1.3568281938325992) internal successors, (308), 229 states have internal predecessors, (308), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 308 transitions. [2022-01-11 05:55:45,057 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 308 transitions. Word has length 22 [2022-01-11 05:55:45,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:45,058 INFO L470 AbstractCegarLoop]: Abstraction has 230 states and 308 transitions. [2022-01-11 05:55:45,058 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 2 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,058 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 308 transitions. [2022-01-11 05:55:45,059 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-01-11 05:55:45,059 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:45,059 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:45,059 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-01-11 05:55:45,059 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:45,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:45,060 INFO L85 PathProgramCache]: Analyzing trace with hash 1073278439, now seen corresponding path program 1 times [2022-01-11 05:55:45,060 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:45,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [31332881] [2022-01-11 05:55:45,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:45,060 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:45,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:45,129 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:55:45,130 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:45,130 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [31332881] [2022-01-11 05:55:45,130 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [31332881] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:55:45,130 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:55:45,130 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 05:55:45,130 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [507875037] [2022-01-11 05:55:45,130 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:55:45,131 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:55:45,131 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:45,131 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:55:45,131 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:55:45,131 INFO L87 Difference]: Start difference. First operand 230 states and 308 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,237 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:45,237 INFO L93 Difference]: Finished difference Result 517 states and 690 transitions. [2022-01-11 05:55:45,238 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:55:45,238 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-01-11 05:55:45,238 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:45,239 INFO L225 Difference]: With dead ends: 517 [2022-01-11 05:55:45,239 INFO L226 Difference]: Without dead ends: 295 [2022-01-11 05:55:45,240 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:55:45,241 INFO L933 BasicCegarLoop]: 229 mSDtfsCounter, 144 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 37 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 37 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:45,241 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [144 Valid, 339 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 37 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 05:55:45,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2022-01-11 05:55:45,262 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 289. [2022-01-11 05:55:45,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 289 states, 286 states have (on average 1.3076923076923077) internal successors, (374), 288 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 289 states to 289 states and 374 transitions. [2022-01-11 05:55:45,266 INFO L78 Accepts]: Start accepts. Automaton has 289 states and 374 transitions. Word has length 27 [2022-01-11 05:55:45,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:45,266 INFO L470 AbstractCegarLoop]: Abstraction has 289 states and 374 transitions. [2022-01-11 05:55:45,266 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 2 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,266 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 374 transitions. [2022-01-11 05:55:45,268 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-01-11 05:55:45,268 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:45,268 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:45,268 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-01-11 05:55:45,268 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:45,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:45,269 INFO L85 PathProgramCache]: Analyzing trace with hash 1008745837, now seen corresponding path program 1 times [2022-01-11 05:55:45,269 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:45,269 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [242177672] [2022-01-11 05:55:45,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:45,269 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:45,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:45,362 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:55:45,362 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:45,362 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [242177672] [2022-01-11 05:55:45,362 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [242177672] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:55:45,363 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:55:45,363 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 05:55:45,363 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [59296529] [2022-01-11 05:55:45,364 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:55:45,364 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 05:55:45,366 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:45,366 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 05:55:45,366 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:55:45,366 INFO L87 Difference]: Start difference. First operand 289 states and 374 transitions. Second operand has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:45,587 INFO L93 Difference]: Finished difference Result 967 states and 1231 transitions. [2022-01-11 05:55:45,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-01-11 05:55:45,588 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-01-11 05:55:45,588 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:45,590 INFO L225 Difference]: With dead ends: 967 [2022-01-11 05:55:45,590 INFO L226 Difference]: Without dead ends: 686 [2022-01-11 05:55:45,593 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-01-11 05:55:45,601 INFO L933 BasicCegarLoop]: 456 mSDtfsCounter, 562 mSDsluCounter, 829 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 562 SdHoareTripleChecker+Valid, 1285 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:45,602 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [562 Valid, 1285 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 163 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 05:55:45,603 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 686 states. [2022-01-11 05:55:45,653 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 686 to 283. [2022-01-11 05:55:45,654 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 280 states have (on average 1.2714285714285714) internal successors, (356), 282 states have internal predecessors, (356), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 356 transitions. [2022-01-11 05:55:45,655 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 356 transitions. Word has length 32 [2022-01-11 05:55:45,655 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:45,655 INFO L470 AbstractCegarLoop]: Abstraction has 283 states and 356 transitions. [2022-01-11 05:55:45,655 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.4) internal successors, (32), 4 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,656 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 356 transitions. [2022-01-11 05:55:45,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-11 05:55:45,659 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:45,659 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:45,659 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-01-11 05:55:45,660 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:45,663 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:45,663 INFO L85 PathProgramCache]: Analyzing trace with hash 427773096, now seen corresponding path program 1 times [2022-01-11 05:55:45,663 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:45,664 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [146373556] [2022-01-11 05:55:45,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:45,664 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:45,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:45,730 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:55:45,731 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:45,731 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [146373556] [2022-01-11 05:55:45,731 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [146373556] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:55:45,732 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:55:45,732 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 05:55:45,732 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [715758086] [2022-01-11 05:55:45,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:55:45,732 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 05:55:45,733 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:45,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 05:55:45,733 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:55:45,733 INFO L87 Difference]: Start difference. First operand 283 states and 356 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:45,845 INFO L93 Difference]: Finished difference Result 817 states and 1015 transitions. [2022-01-11 05:55:45,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 05:55:45,846 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-11 05:55:45,846 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:45,848 INFO L225 Difference]: With dead ends: 817 [2022-01-11 05:55:45,848 INFO L226 Difference]: Without dead ends: 542 [2022-01-11 05:55:45,848 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 05:55:45,852 INFO L933 BasicCegarLoop]: 261 mSDtfsCounter, 374 mSDsluCounter, 739 mSDsCounter, 0 mSdLazyCounter, 84 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 374 SdHoareTripleChecker+Valid, 1000 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 84 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:45,852 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [374 Valid, 1000 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 84 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 05:55:45,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 542 states. [2022-01-11 05:55:45,870 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 542 to 301. [2022-01-11 05:55:45,871 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 298 states have (on average 1.25503355704698) internal successors, (374), 300 states have internal predecessors, (374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 374 transitions. [2022-01-11 05:55:45,873 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 374 transitions. Word has length 33 [2022-01-11 05:55:45,873 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:45,877 INFO L470 AbstractCegarLoop]: Abstraction has 301 states and 374 transitions. [2022-01-11 05:55:45,877 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:45,877 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 374 transitions. [2022-01-11 05:55:45,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-11 05:55:45,880 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:45,880 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:45,880 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-01-11 05:55:45,880 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:45,881 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:45,881 INFO L85 PathProgramCache]: Analyzing trace with hash -77785529, now seen corresponding path program 1 times [2022-01-11 05:55:45,881 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:45,881 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2123997783] [2022-01-11 05:55:45,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:45,882 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:45,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:45,928 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:55:45,928 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:45,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2123997783] [2022-01-11 05:55:45,928 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2123997783] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:55:45,928 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:55:45,928 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-01-11 05:55:45,928 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1122456047] [2022-01-11 05:55:45,929 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:55:45,929 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-01-11 05:55:45,929 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:45,929 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-01-11 05:55:45,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-01-11 05:55:45,929 INFO L87 Difference]: Start difference. First operand 301 states and 374 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:46,009 INFO L93 Difference]: Finished difference Result 752 states and 927 transitions. [2022-01-11 05:55:46,009 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-01-11 05:55:46,009 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-11 05:55:46,010 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:46,011 INFO L225 Difference]: With dead ends: 752 [2022-01-11 05:55:46,011 INFO L226 Difference]: Without dead ends: 459 [2022-01-11 05:55:46,012 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:55:46,013 INFO L933 BasicCegarLoop]: 267 mSDtfsCounter, 226 mSDsluCounter, 390 mSDsCounter, 0 mSdLazyCounter, 58 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 657 SdHoareTripleChecker+Invalid, 73 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 58 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:46,013 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [226 Valid, 657 Invalid, 73 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 58 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:55:46,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 459 states. [2022-01-11 05:55:46,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 459 to 313. [2022-01-11 05:55:46,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 313 states, 310 states have (on average 1.2451612903225806) internal successors, (386), 312 states have internal predecessors, (386), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,033 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 313 states to 313 states and 386 transitions. [2022-01-11 05:55:46,033 INFO L78 Accepts]: Start accepts. Automaton has 313 states and 386 transitions. Word has length 33 [2022-01-11 05:55:46,034 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:46,034 INFO L470 AbstractCegarLoop]: Abstraction has 313 states and 386 transitions. [2022-01-11 05:55:46,034 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 4 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,034 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 386 transitions. [2022-01-11 05:55:46,035 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-01-11 05:55:46,035 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:46,035 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:46,035 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-01-11 05:55:46,035 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:46,035 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:46,035 INFO L85 PathProgramCache]: Analyzing trace with hash -588319706, now seen corresponding path program 1 times [2022-01-11 05:55:46,035 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:46,035 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1391436638] [2022-01-11 05:55:46,036 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:46,036 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:46,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:46,079 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:55:46,079 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:46,079 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1391436638] [2022-01-11 05:55:46,079 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1391436638] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:55:46,079 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:55:46,079 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-01-11 05:55:46,080 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [98485723] [2022-01-11 05:55:46,080 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:55:46,080 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:55:46,080 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:46,089 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:55:46,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:55:46,089 INFO L87 Difference]: Start difference. First operand 313 states and 386 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:46,099 INFO L93 Difference]: Finished difference Result 313 states and 386 transitions. [2022-01-11 05:55:46,100 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:55:46,100 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-01-11 05:55:46,100 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:46,100 INFO L225 Difference]: With dead ends: 313 [2022-01-11 05:55:46,100 INFO L226 Difference]: Without dead ends: 136 [2022-01-11 05:55:46,101 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:55:46,102 INFO L933 BasicCegarLoop]: 92 mSDtfsCounter, 84 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 99 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:46,102 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [84 Valid, 99 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:55:46,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2022-01-11 05:55:46,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 136. [2022-01-11 05:55:46,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 136 states, 135 states have (on average 1.2740740740740741) internal successors, (172), 135 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136 states to 136 states and 172 transitions. [2022-01-11 05:55:46,110 INFO L78 Accepts]: Start accepts. Automaton has 136 states and 172 transitions. Word has length 33 [2022-01-11 05:55:46,110 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:46,110 INFO L470 AbstractCegarLoop]: Abstraction has 136 states and 172 transitions. [2022-01-11 05:55:46,110 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,110 INFO L276 IsEmpty]: Start isEmpty. Operand 136 states and 172 transitions. [2022-01-11 05:55:46,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-01-11 05:55:46,110 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:46,110 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:46,110 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-01-11 05:55:46,111 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:46,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:46,111 INFO L85 PathProgramCache]: Analyzing trace with hash -1305939058, now seen corresponding path program 1 times [2022-01-11 05:55:46,111 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:46,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [938706076] [2022-01-11 05:55:46,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:46,111 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:46,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:46,175 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:55:46,176 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:46,176 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [938706076] [2022-01-11 05:55:46,176 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [938706076] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:55:46,176 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:55:46,176 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-01-11 05:55:46,176 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1695920743] [2022-01-11 05:55:46,176 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:55:46,177 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-01-11 05:55:46,177 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:46,177 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-01-11 05:55:46,177 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:55:46,177 INFO L87 Difference]: Start difference. First operand 136 states and 172 transitions. Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 2 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:46,208 INFO L93 Difference]: Finished difference Result 326 states and 414 transitions. [2022-01-11 05:55:46,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-01-11 05:55:46,208 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 2 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-01-11 05:55:46,209 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:46,210 INFO L225 Difference]: With dead ends: 326 [2022-01-11 05:55:46,210 INFO L226 Difference]: Without dead ends: 198 [2022-01-11 05:55:46,210 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-01-11 05:55:46,211 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 29 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 165 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:46,214 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [29 Valid, 165 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:55:46,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198 states. [2022-01-11 05:55:46,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198 to 198. [2022-01-11 05:55:46,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 197 states have (on average 1.2538071065989849) internal successors, (247), 197 states have internal predecessors, (247), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 247 transitions. [2022-01-11 05:55:46,233 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 247 transitions. Word has length 39 [2022-01-11 05:55:46,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:46,233 INFO L470 AbstractCegarLoop]: Abstraction has 198 states and 247 transitions. [2022-01-11 05:55:46,233 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.0) internal successors, (39), 2 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,233 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 247 transitions. [2022-01-11 05:55:46,234 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-01-11 05:55:46,234 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:46,235 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:46,235 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-01-11 05:55:46,235 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:46,235 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:46,235 INFO L85 PathProgramCache]: Analyzing trace with hash -793726520, now seen corresponding path program 1 times [2022-01-11 05:55:46,235 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:46,235 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [776752930] [2022-01-11 05:55:46,235 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:46,236 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:46,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:46,360 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:55:46,360 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:46,360 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [776752930] [2022-01-11 05:55:46,360 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [776752930] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:55:46,360 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:55:46,361 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 05:55:46,361 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [449126841] [2022-01-11 05:55:46,361 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:55:46,362 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-11 05:55:46,362 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:46,362 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-11 05:55:46,362 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-01-11 05:55:46,363 INFO L87 Difference]: Start difference. First operand 198 states and 247 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:46,535 INFO L93 Difference]: Finished difference Result 954 states and 1214 transitions. [2022-01-11 05:55:46,535 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-01-11 05:55:46,535 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-01-11 05:55:46,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:46,538 INFO L225 Difference]: With dead ends: 954 [2022-01-11 05:55:46,538 INFO L226 Difference]: Without dead ends: 826 [2022-01-11 05:55:46,538 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2022-01-11 05:55:46,539 INFO L933 BasicCegarLoop]: 206 mSDtfsCounter, 451 mSDsluCounter, 581 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 451 SdHoareTripleChecker+Valid, 787 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:46,539 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [451 Valid, 787 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-01-11 05:55:46,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 826 states. [2022-01-11 05:55:46,565 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 826 to 337. [2022-01-11 05:55:46,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 337 states, 336 states have (on average 1.25) internal successors, (420), 336 states have internal predecessors, (420), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 337 states to 337 states and 420 transitions. [2022-01-11 05:55:46,567 INFO L78 Accepts]: Start accepts. Automaton has 337 states and 420 transitions. Word has length 41 [2022-01-11 05:55:46,567 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:46,567 INFO L470 AbstractCegarLoop]: Abstraction has 337 states and 420 transitions. [2022-01-11 05:55:46,567 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,568 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 420 transitions. [2022-01-11 05:55:46,568 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-01-11 05:55:46,568 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:46,568 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:46,568 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-01-11 05:55:46,569 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:46,569 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:46,569 INFO L85 PathProgramCache]: Analyzing trace with hash -1200937696, now seen corresponding path program 1 times [2022-01-11 05:55:46,569 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:46,569 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [430089569] [2022-01-11 05:55:46,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:46,569 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:46,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:46,642 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-01-11 05:55:46,643 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:46,643 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [430089569] [2022-01-11 05:55:46,643 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [430089569] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:55:46,643 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:55:46,643 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-01-11 05:55:46,643 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1892805749] [2022-01-11 05:55:46,643 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:55:46,644 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-01-11 05:55:46,644 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:46,644 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-01-11 05:55:46,644 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-01-11 05:55:46,644 INFO L87 Difference]: Start difference. First operand 337 states and 420 transitions. Second operand has 6 states, 6 states have (on average 11.833333333333334) internal successors, (71), 6 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:46,715 INFO L93 Difference]: Finished difference Result 769 states and 971 transitions. [2022-01-11 05:55:46,716 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 05:55:46,716 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.833333333333334) internal successors, (71), 6 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 71 [2022-01-11 05:55:46,716 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:46,718 INFO L225 Difference]: With dead ends: 769 [2022-01-11 05:55:46,718 INFO L226 Difference]: Without dead ends: 440 [2022-01-11 05:55:46,719 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-01-11 05:55:46,719 INFO L933 BasicCegarLoop]: 163 mSDtfsCounter, 190 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 431 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:46,719 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [190 Valid, 431 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:55:46,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 440 states. [2022-01-11 05:55:46,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 440 to 322. [2022-01-11 05:55:46,753 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 322 states, 321 states have (on average 1.2242990654205608) internal successors, (393), 321 states have internal predecessors, (393), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 322 states to 322 states and 393 transitions. [2022-01-11 05:55:46,754 INFO L78 Accepts]: Start accepts. Automaton has 322 states and 393 transitions. Word has length 71 [2022-01-11 05:55:46,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:46,754 INFO L470 AbstractCegarLoop]: Abstraction has 322 states and 393 transitions. [2022-01-11 05:55:46,754 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 11.833333333333334) internal successors, (71), 6 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,754 INFO L276 IsEmpty]: Start isEmpty. Operand 322 states and 393 transitions. [2022-01-11 05:55:46,755 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2022-01-11 05:55:46,755 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:46,756 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:46,756 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-01-11 05:55:46,756 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:46,756 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:46,756 INFO L85 PathProgramCache]: Analyzing trace with hash -923549581, now seen corresponding path program 1 times [2022-01-11 05:55:46,756 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:46,756 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [323529721] [2022-01-11 05:55:46,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:46,757 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:46,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:46,842 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 74 proven. 0 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-01-11 05:55:46,842 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:46,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [323529721] [2022-01-11 05:55:46,842 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [323529721] provided 1 perfect and 0 imperfect interpolant sequences [2022-01-11 05:55:46,843 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-01-11 05:55:46,843 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-01-11 05:55:46,843 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1768131213] [2022-01-11 05:55:46,843 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-01-11 05:55:46,843 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-01-11 05:55:46,843 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:46,844 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-01-11 05:55:46,844 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-01-11 05:55:46,844 INFO L87 Difference]: Start difference. First operand 322 states and 393 transitions. Second operand has 5 states, 5 states have (on average 18.2) internal successors, (91), 5 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:46,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:46,932 INFO L93 Difference]: Finished difference Result 1188 states and 1463 transitions. [2022-01-11 05:55:46,933 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-01-11 05:55:46,933 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 5 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 128 [2022-01-11 05:55:46,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:46,935 INFO L225 Difference]: With dead ends: 1188 [2022-01-11 05:55:46,935 INFO L226 Difference]: Without dead ends: 874 [2022-01-11 05:55:46,936 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-01-11 05:55:46,937 INFO L933 BasicCegarLoop]: 137 mSDtfsCounter, 318 mSDsluCounter, 373 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 510 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:46,937 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [318 Valid, 510 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-01-11 05:55:46,937 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 874 states. [2022-01-11 05:55:46,998 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 874 to 328. [2022-01-11 05:55:46,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 328 states, 327 states have (on average 1.2201834862385321) internal successors, (399), 327 states have internal predecessors, (399), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:47,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 328 states to 328 states and 399 transitions. [2022-01-11 05:55:47,000 INFO L78 Accepts]: Start accepts. Automaton has 328 states and 399 transitions. Word has length 128 [2022-01-11 05:55:47,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:47,001 INFO L470 AbstractCegarLoop]: Abstraction has 328 states and 399 transitions. [2022-01-11 05:55:47,001 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 18.2) internal successors, (91), 5 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:47,002 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 399 transitions. [2022-01-11 05:55:47,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 129 [2022-01-11 05:55:47,007 INFO L506 BasicCegarLoop]: Found error trace [2022-01-11 05:55:47,007 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:55:47,007 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-01-11 05:55:47,008 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION] === [2022-01-11 05:55:47,008 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-01-11 05:55:47,008 INFO L85 PathProgramCache]: Analyzing trace with hash -799476334, now seen corresponding path program 1 times [2022-01-11 05:55:47,008 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-01-11 05:55:47,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [634735014] [2022-01-11 05:55:47,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:47,009 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-01-11 05:55:47,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:47,204 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 108 proven. 2 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-01-11 05:55:47,204 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-01-11 05:55:47,204 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [634735014] [2022-01-11 05:55:47,204 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [634735014] provided 0 perfect and 1 imperfect interpolant sequences [2022-01-11 05:55:47,204 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [521390066] [2022-01-11 05:55:47,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-01-11 05:55:47,205 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-01-11 05:55:47,205 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-01-11 05:55:47,219 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-01-11 05:55:47,257 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-01-11 05:55:47,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-01-11 05:55:47,370 INFO L263 TraceCheckSpWp]: Trace formula consists of 884 conjuncts, 15 conjunts are in the unsatisfiable core [2022-01-11 05:55:47,375 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-01-11 05:55:47,683 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 69 proven. 2 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-01-11 05:55:47,683 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-01-11 05:55:47,933 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 69 proven. 2 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2022-01-11 05:55:47,934 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [521390066] provided 0 perfect and 2 imperfect interpolant sequences [2022-01-11 05:55:47,934 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-01-11 05:55:47,934 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 15 [2022-01-11 05:55:47,934 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2006968874] [2022-01-11 05:55:47,934 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-01-11 05:55:47,935 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-01-11 05:55:47,935 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-01-11 05:55:47,935 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-01-11 05:55:47,935 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-01-11 05:55:47,935 INFO L87 Difference]: Start difference. First operand 328 states and 399 transitions. Second operand has 15 states, 15 states have (on average 11.133333333333333) internal successors, (167), 15 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:48,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-01-11 05:55:48,479 INFO L93 Difference]: Finished difference Result 1150 states and 1408 transitions. [2022-01-11 05:55:48,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-01-11 05:55:48,484 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 11.133333333333333) internal successors, (167), 15 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 128 [2022-01-11 05:55:48,484 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-01-11 05:55:48,484 INFO L225 Difference]: With dead ends: 1150 [2022-01-11 05:55:48,484 INFO L226 Difference]: Without dead ends: 0 [2022-01-11 05:55:48,486 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 283 GetRequests, 256 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 117 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=176, Invalid=636, Unknown=0, NotChecked=0, Total=812 [2022-01-11 05:55:48,486 INFO L933 BasicCegarLoop]: 252 mSDtfsCounter, 1408 mSDsluCounter, 1451 mSDsCounter, 0 mSdLazyCounter, 174 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1408 SdHoareTripleChecker+Valid, 1703 SdHoareTripleChecker+Invalid, 218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 174 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-01-11 05:55:48,486 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1408 Valid, 1703 Invalid, 218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 174 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-01-11 05:55:48,487 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-01-11 05:55:48,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-01-11 05:55:48,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:48,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-01-11 05:55:48,487 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 128 [2022-01-11 05:55:48,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-01-11 05:55:48,487 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-01-11 05:55:48,488 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 11.133333333333333) internal successors, (167), 15 states have internal predecessors, (167), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-01-11 05:55:48,488 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-01-11 05:55:48,488 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-01-11 05:55:48,490 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (2 of 3 remaining) [2022-01-11 05:55:48,490 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 3 remaining) [2022-01-11 05:55:48,490 INFO L764 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (0 of 3 remaining) [2022-01-11 05:55:48,534 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-01-11 05:55:48,715 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-01-11 05:55:48,718 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-01-11 05:56:00,093 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-01-11 05:56:00,094 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-01-11 05:56:00,094 INFO L854 garLoopResultBuilder]: At program point L471(lines 467 473) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-11 05:56:00,099 INFO L854 garLoopResultBuilder]: At program point L464(lines 460 466) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-11 05:56:00,100 INFO L854 garLoopResultBuilder]: At program point L479(lines 474 482) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-11 05:56:00,100 INFO L858 garLoopResultBuilder]: For program point L368(lines 368 375) no Hoare annotation was computed. [2022-01-11 05:56:00,100 INFO L854 garLoopResultBuilder]: At program point L339(lines 335 341) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-11 05:56:00,100 INFO L858 garLoopResultBuilder]: For program point L368-2(lines 368 375) no Hoare annotation was computed. [2022-01-11 05:56:00,100 INFO L854 garLoopResultBuilder]: At program point L969(lines 964 971) the Hoare annotation is: (and (<= ~waterLevel~0Int 1) (<= 1 ~systemActive~0Int) (= ~pumpRunning~0Int 0) (<= 1 ~waterLevel~0Int)) [2022-01-11 05:56:00,100 INFO L861 garLoopResultBuilder]: At program point L377(lines 358 380) the Hoare annotation is: true [2022-01-11 05:56:00,101 INFO L854 garLoopResultBuilder]: At program point L392-2(lines 392 439) the Hoare annotation is: (let ((.cse6 (<= ~waterLevel~0Int 1))) (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse8 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse10 (= ~pumpRunning~0Int 1)) (.cse9 (or .cse6 (<= 4294967297 ~waterLevel~0Int))) (.cse7 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2)) (.cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) .cse5) (and .cse7 .cse1 .cse8 .cse4 .cse9 .cse5) (and .cse0 .cse1 .cse8 .cse4 .cse9 .cse5) (and (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse7 (<= ~waterLevel~0Int 2) .cse10 (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|) (<= 2 ~waterLevel~0Int) .cse5 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) (and .cse7 .cse8 .cse10 .cse4 .cse9 .cse5) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5)))) [2022-01-11 05:56:00,101 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-01-11 05:56:00,101 INFO L854 garLoopResultBuilder]: At program point L440(lines 391 441) the Hoare annotation is: false [2022-01-11 05:56:00,102 INFO L858 garLoopResultBuilder]: For program point L393(lines 392 439) no Hoare annotation was computed. [2022-01-11 05:56:00,102 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-01-11 05:56:00,102 INFO L854 garLoopResultBuilder]: At program point L184-2(lines 179 187) the Hoare annotation is: false [2022-01-11 05:56:00,102 INFO L858 garLoopResultBuilder]: For program point L394(lines 394 398) no Hoare annotation was computed. [2022-01-11 05:56:00,102 INFO L854 garLoopResultBuilder]: At program point L979-1(lines 972 981) the Hoare annotation is: false [2022-01-11 05:56:00,102 INFO L858 garLoopResultBuilder]: For program point L402(lines 402 408) no Hoare annotation was computed. [2022-01-11 05:56:00,102 INFO L858 garLoopResultBuilder]: For program point L73-3(lines 73 79) no Hoare annotation was computed. [2022-01-11 05:56:00,103 INFO L858 garLoopResultBuilder]: For program point L869(lines 869 873) no Hoare annotation was computed. [2022-01-11 05:56:00,103 INFO L858 garLoopResultBuilder]: For program point L402-2(lines 402 408) no Hoare annotation was computed. [2022-01-11 05:56:00,103 INFO L858 garLoopResultBuilder]: For program point L857-3(lines 857 861) no Hoare annotation was computed. [2022-01-11 05:56:00,103 INFO L858 garLoopResultBuilder]: For program point L73-5(lines 69 91) no Hoare annotation was computed. [2022-01-11 05:56:00,103 INFO L854 garLoopResultBuilder]: At program point L869-2(lines 865 876) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0Int 1)) (.cse0 (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|))) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse8 (= ~pumpRunning~0Int 0)) (.cse10 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (<= ~waterLevel~0Int 2)) (.cse11 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse9 (<= 2 ~waterLevel~0Int)) (.cse6 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse6) (and .cse1 .cse8 .cse4 .cse9 .cse6) (and .cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) .cse10 .cse5 .cse11 .cse6) (and .cse0 .cse1 .cse8 .cse2 .cse3 .cse4 .cse6) (and .cse7 .cse8 .cse10 .cse4 .cse11 .cse9 .cse6))) [2022-01-11 05:56:00,103 INFO L858 garLoopResultBuilder]: For program point L412(lines 412 418) no Hoare annotation was computed. [2022-01-11 05:56:00,103 INFO L854 garLoopResultBuilder]: At program point L857-5(lines 853 864) the Hoare annotation is: false [2022-01-11 05:56:00,103 INFO L858 garLoopResultBuilder]: For program point L131-2(lines 131 148) no Hoare annotation was computed. [2022-01-11 05:56:00,103 INFO L858 garLoopResultBuilder]: For program point L80-3(lines 80 86) no Hoare annotation was computed. [2022-01-11 05:56:00,103 INFO L858 garLoopResultBuilder]: For program point L881(lines 881 885) no Hoare annotation was computed. [2022-01-11 05:56:00,103 INFO L858 garLoopResultBuilder]: For program point L412-2(lines 412 418) no Hoare annotation was computed. [2022-01-11 05:56:00,103 INFO L854 garLoopResultBuilder]: At program point L949-1(lines 944 952) the Hoare annotation is: false [2022-01-11 05:56:00,103 INFO L858 garLoopResultBuilder]: For program point L105-6(lines 105 122) no Hoare annotation was computed. [2022-01-11 05:56:00,103 INFO L854 garLoopResultBuilder]: At program point L926-1(lines 921 929) the Hoare annotation is: false [2022-01-11 05:56:00,103 INFO L854 garLoopResultBuilder]: At program point L881-2(lines 877 888) the Hoare annotation is: (let ((.cse10 (<= ~waterLevel~0Int 1))) (let ((.cse0 (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|))) (.cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse7 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse8 (= ~pumpRunning~0Int 0)) (.cse14 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (<= ~waterLevel~0Int 2)) (.cse9 (<= 2 ~waterLevel~0Int)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse11 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse5 (= ~pumpRunning~0Int 1)) (.cse12 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse13 (or .cse10 (<= 4294967297 ~waterLevel~0Int))) (.cse6 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse6) (and .cse1 .cse8 .cse4 .cse9 .cse6) (and .cse10 .cse1 .cse8 .cse2 .cse6) (and .cse1 .cse8 .cse11 .cse12 .cse13 .cse6) (and .cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) .cse14 .cse5 .cse12 .cse6) (and .cse7 .cse8 .cse11 .cse12 .cse13 .cse6) (and .cse7 .cse8 .cse14 .cse4 .cse12 .cse9 .cse6) (and .cse1 .cse11 .cse5 .cse12 .cse13 .cse6)))) [2022-01-11 05:56:00,104 INFO L858 garLoopResultBuilder]: For program point L422(lines 422 435) no Hoare annotation was computed. [2022-01-11 05:56:00,104 INFO L858 garLoopResultBuilder]: For program point L252-3(lines 252 256) no Hoare annotation was computed. [2022-01-11 05:56:00,104 INFO L858 garLoopResultBuilder]: For program point L934-3(lines 934 940) no Hoare annotation was computed. [2022-01-11 05:56:00,104 INFO L854 garLoopResultBuilder]: At program point L97-7(lines 93 99) the Hoare annotation is: false [2022-01-11 05:56:00,104 INFO L858 garLoopResultBuilder]: For program point L990-2(lines 990 1007) no Hoare annotation was computed. [2022-01-11 05:56:00,104 INFO L858 garLoopResultBuilder]: For program point L428-2(lines 422 435) no Hoare annotation was computed. [2022-01-11 05:56:00,104 INFO L858 garLoopResultBuilder]: For program point L428(lines 428 434) no Hoare annotation was computed. [2022-01-11 05:56:00,104 INFO L858 garLoopResultBuilder]: For program point L252-5(lines 252 256) no Hoare annotation was computed. [2022-01-11 05:56:00,104 INFO L854 garLoopResultBuilder]: At program point L939-3(lines 930 943) the Hoare annotation is: false [2022-01-11 05:56:00,104 INFO L854 garLoopResultBuilder]: At program point L105-7(lines 101 125) the Hoare annotation is: false [2022-01-11 05:56:00,105 INFO L854 garLoopResultBuilder]: At program point L184-3(lines 179 187) the Hoare annotation is: false [2022-01-11 05:56:00,105 INFO L854 garLoopResultBuilder]: At program point L990-3(lines 982 1010) the Hoare annotation is: false [2022-01-11 05:56:00,105 INFO L854 garLoopResultBuilder]: At program point L184(lines 179 187) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0Int 1))) (let ((.cse6 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse7 (= ~pumpRunning~0Int 0)) (.cse9 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse11 (or .cse5 (<= 4294967297 ~waterLevel~0Int))) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~waterLevel~0Int 2)) (.cse2 (= ~pumpRunning~0Int 1)) (.cse10 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse8 (<= 2 ~waterLevel~0Int)) (.cse3 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 (<= 1 ~waterLevel~0Int) .cse4) (and .cse6 .cse7 .cse1 .cse8 .cse4) (and .cse6 .cse7 .cse9 .cse10 .cse11 .cse4) (and .cse0 .cse9 .cse2 .cse10 .cse11 .cse3 .cse4) (and .cse0 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2 .cse10 .cse8 .cse3 .cse4)))) [2022-01-11 05:56:00,105 INFO L858 garLoopResultBuilder]: For program point L266(lines 266 272) no Hoare annotation was computed. [2022-01-11 05:56:00,105 INFO L854 garLoopResultBuilder]: At program point L258-1(lines 243 261) the Hoare annotation is: false [2022-01-11 05:56:00,105 INFO L858 garLoopResultBuilder]: For program point L233-9(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,105 INFO L854 garLoopResultBuilder]: At program point L131-3(lines 127 151) the Hoare annotation is: false [2022-01-11 05:56:00,105 INFO L858 garLoopResultBuilder]: For program point L994-2(lines 994 1004) no Hoare annotation was computed. [2022-01-11 05:56:00,105 INFO L854 garLoopResultBuilder]: At program point L90-1(lines 66 92) the Hoare annotation is: false [2022-01-11 05:56:00,105 INFO L854 garLoopResultBuilder]: At program point L979(lines 972 981) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0Int 1))) (let ((.cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse10 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse12 (or .cse0 (<= 4294967297 ~waterLevel~0Int))) (.cse5 (<= 1 ~systemActive~0Int)) (.cse6 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse7 (<= ~waterLevel~0Int 2)) (.cse8 (= ~pumpRunning~0Int 1)) (.cse11 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse13 (<= 2 ~waterLevel~0Int)) (.cse9 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse5 .cse6 .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse7 .cse8 .cse9 .cse4) (and .cse5 .cse10 .cse6 .cse8 .cse11 .cse12 .cse9 .cse4) (and .cse1 .cse2 .cse7 .cse13 .cse4) (and .cse1 .cse2 .cse10 .cse11 .cse12 .cse4) (and .cse5 .cse6 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse7 .cse8 .cse11 .cse13 .cse9 .cse4)))) [2022-01-11 05:56:00,106 INFO L854 garLoopResultBuilder]: At program point L165(lines 160 167) the Hoare annotation is: (let ((.cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse0 (= ~pumpRunning~0Int 0)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 .cse2) (and .cse0 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse1 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int)) .cse2) (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse0 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (<= ~waterLevel~0Int 2) .cse2))) [2022-01-11 05:56:00,106 INFO L858 garLoopResultBuilder]: For program point L266-2(lines 266 272) no Hoare annotation was computed. [2022-01-11 05:56:00,113 INFO L858 garLoopResultBuilder]: For program point L135-3(lines 135 143) no Hoare annotation was computed. [2022-01-11 05:56:00,113 INFO L858 garLoopResultBuilder]: For program point L233-11(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,114 INFO L858 garLoopResultBuilder]: For program point L995-3(lines 995 1001) no Hoare annotation was computed. [2022-01-11 05:56:00,114 INFO L854 garLoopResultBuilder]: At program point L289-2(lines 289 303) the Hoare annotation is: false [2022-01-11 05:56:00,114 INFO L858 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2022-01-11 05:56:00,114 INFO L854 garLoopResultBuilder]: At program point L274(lines 262 276) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0Int 1)) (.cse0 (= ~pumpRunning~0Int 0)) (.cse1 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 (<= ~waterLevel~0Int 2) (<= 2 ~waterLevel~0Int) .cse1) (and .cse0 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int) (or .cse2 (<= 4294967297 ~waterLevel~0Int)) .cse1) (and .cse2 .cse0 (<= 1 ~waterLevel~0Int) .cse1))) [2022-01-11 05:56:00,114 INFO L854 garLoopResultBuilder]: At program point L165-2(lines 160 167) the Hoare annotation is: false [2022-01-11 05:56:00,114 INFO L858 garLoopResultBuilder]: For program point L105-4(lines 105 122) no Hoare annotation was computed. [2022-01-11 05:56:00,114 INFO L854 garLoopResultBuilder]: At program point L239-3(lines 224 242) the Hoare annotation is: false [2022-01-11 05:56:00,114 INFO L858 garLoopResultBuilder]: For program point L958-1(line 958) no Hoare annotation was computed. [2022-01-11 05:56:00,114 INFO L861 garLoopResultBuilder]: At program point L304(lines 279 308) the Hoare annotation is: true [2022-01-11 05:56:00,114 INFO L858 garLoopResultBuilder]: For program point L290(line 290) no Hoare annotation was computed. [2022-01-11 05:56:00,114 INFO L858 garLoopResultBuilder]: For program point L857(lines 857 861) no Hoare annotation was computed. [2022-01-11 05:56:00,114 INFO L858 garLoopResultBuilder]: For program point L73-2(lines 69 91) no Hoare annotation was computed. [2022-01-11 05:56:00,114 INFO L858 garLoopResultBuilder]: For program point L934-2(lines 934 940) no Hoare annotation was computed. [2022-01-11 05:56:00,115 INFO L854 garLoopResultBuilder]: At program point L97-5(lines 93 99) the Hoare annotation is: false [2022-01-11 05:56:00,115 INFO L858 garLoopResultBuilder]: For program point L109-9(lines 109 117) no Hoare annotation was computed. [2022-01-11 05:56:00,115 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 958) no Hoare annotation was computed. [2022-01-11 05:56:00,115 INFO L854 garLoopResultBuilder]: At program point L959-1(lines 954 961) the Hoare annotation is: false [2022-01-11 05:56:00,115 INFO L861 garLoopResultBuilder]: At program point L445(lines 382 447) the Hoare annotation is: true [2022-01-11 05:56:00,115 INFO L858 garLoopResultBuilder]: For program point L293(lines 293 297) no Hoare annotation was computed. [2022-01-11 05:56:00,115 INFO L854 garLoopResultBuilder]: At program point L857-2(lines 853 864) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse2 (= ~pumpRunning~0Int 1)) (.cse4 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse0 .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (<= 1 ~waterLevel~0Int) .cse4 .cse5))) [2022-01-11 05:56:00,115 INFO L858 garLoopResultBuilder]: For program point L131(lines 131 148) no Hoare annotation was computed. [2022-01-11 05:56:00,115 INFO L858 garLoopResultBuilder]: For program point L80-1(lines 80 86) no Hoare annotation was computed. [2022-01-11 05:56:00,115 INFO L854 garLoopResultBuilder]: At program point L939-2(lines 930 943) the Hoare annotation is: false [2022-01-11 05:56:00,115 INFO L854 garLoopResultBuilder]: At program point L105-5(lines 101 125) the Hoare annotation is: false [2022-01-11 05:56:00,116 INFO L854 garLoopResultBuilder]: At program point L157-3(lines 152 159) the Hoare annotation is: false [2022-01-11 05:56:00,116 INFO L854 garLoopResultBuilder]: At program point L97-6(lines 93 99) the Hoare annotation is: false [2022-01-11 05:56:00,116 INFO L861 garLoopResultBuilder]: At program point L352(lines 344 354) the Hoare annotation is: true [2022-01-11 05:56:00,116 INFO L858 garLoopResultBuilder]: For program point L293-1(lines 293 297) no Hoare annotation was computed. [2022-01-11 05:56:00,116 INFO L854 garLoopResultBuilder]: At program point L949(lines 944 952) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse2 (= ~pumpRunning~0Int 1)) (.cse4 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse0 .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 .cse4 .cse5))) [2022-01-11 05:56:00,116 INFO L858 garLoopResultBuilder]: For program point L105-2(lines 105 122) no Hoare annotation was computed. [2022-01-11 05:56:00,116 INFO L854 garLoopResultBuilder]: At program point L926(lines 921 929) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse6 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse5 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse3 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse2 .cse6 .cse7 .cse4) (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0) .cse5 .cse2 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int) .cse7 .cse3 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) .cse4) (and .cse0 .cse1 .cse2 .cse6 .cse4) (and .cse5 .cse1 .cse2 .cse6 .cse4) (and .cse5 .cse1 .cse2 .cse3 .cse4))) [2022-01-11 05:56:00,116 INFO L858 garLoopResultBuilder]: For program point L233-6(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,116 INFO L854 garLoopResultBuilder]: At program point L184-4(lines 179 187) the Hoare annotation is: false [2022-01-11 05:56:00,116 INFO L858 garLoopResultBuilder]: For program point L252(lines 252 256) no Hoare annotation was computed. [2022-01-11 05:56:00,116 INFO L858 garLoopResultBuilder]: For program point L934-1(lines 934 940) no Hoare annotation was computed. [2022-01-11 05:56:00,116 INFO L854 garLoopResultBuilder]: At program point L97-3(lines 93 99) the Hoare annotation is: false [2022-01-11 05:56:00,116 INFO L858 garLoopResultBuilder]: For program point L990(lines 990 1007) no Hoare annotation was computed. [2022-01-11 05:56:00,116 INFO L858 garLoopResultBuilder]: For program point L233-8(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,117 INFO L854 garLoopResultBuilder]: At program point L979-2(lines 972 981) the Hoare annotation is: false [2022-01-11 05:56:00,117 INFO L858 garLoopResultBuilder]: For program point L252-2(lines 252 256) no Hoare annotation was computed. [2022-01-11 05:56:00,117 INFO L854 garLoopResultBuilder]: At program point L939-1(lines 930 943) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start_isHighWaterSensorDry_#res#1Int| 1)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int) (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4) (and .cse0 .cse1 (<= ~waterLevel~0Int 2) (<= 2 ~waterLevel~0Int) .cse4) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0Int) .cse4))) [2022-01-11 05:56:00,117 INFO L854 garLoopResultBuilder]: At program point L105-3(lines 101 125) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse6 (<= ~waterLevel~0Int 2)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) (.cse7 (<= 2 ~waterLevel~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int) (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5) (and .cse1 .cse6 (= ~pumpRunning~0Int 1) .cse7 .cse5) (and .cse0 .cse4 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0Int) .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse7 .cse5))) [2022-01-11 05:56:00,117 INFO L854 garLoopResultBuilder]: At program point L184-1(lines 179 187) the Hoare annotation is: (let ((.cse0 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse1 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse2 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse3 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1)) (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0) (<= 1 ~systemActive~0Int) .cse0 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int) (= ~pumpRunning~0Int 1) .cse1 .cse2 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|) .cse3) (and (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0) (= ~pumpRunning~0Int 0) .cse0 .cse1 .cse2 .cse3))) [2022-01-11 05:56:00,117 INFO L854 garLoopResultBuilder]: At program point L990-1(lines 982 1010) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse7 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (= ~pumpRunning~0Int 1)) (.cse8 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse6 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2)) (.cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse7 .cse4 .cse8 .cse5) (and .cse0 .cse1 .cse7 .cse4 .cse8 .cse5) (and (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse6 (<= ~waterLevel~0Int 2) .cse9 (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|) (<= 2 ~waterLevel~0Int) .cse5 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) (and .cse6 .cse7 .cse9 .cse4 .cse8 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-01-11 05:56:00,117 INFO L854 garLoopResultBuilder]: At program point L239-2(lines 224 242) the Hoare annotation is: false [2022-01-11 05:56:00,117 INFO L858 garLoopResultBuilder]: For program point L73-6(lines 73 79) no Hoare annotation was computed. [2022-01-11 05:56:00,117 INFO L854 garLoopResultBuilder]: At program point L258(lines 243 261) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0Int 1)) (.cse0 (<= 1 ~systemActive~0Int)) (.cse1 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse2 (= ~pumpRunning~0Int 1)) (.cse4 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse0 .cse1 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse2 (or .cse3 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5) (and .cse3 .cse0 .cse1 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse2 .cse4 .cse5))) [2022-01-11 05:56:00,117 INFO L858 garLoopResultBuilder]: For program point L233-3(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,118 INFO L854 garLoopResultBuilder]: At program point L131-1(lines 127 151) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0Int 1))) (let ((.cse6 (<= ~waterLevel~0Int 2)) (.cse7 (<= 2 ~waterLevel~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse0 (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|))) (.cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1))) (.cse4 (or .cse9 (<= 4294967297 ~waterLevel~0Int))) (.cse11 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse12 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse13 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse10 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0))) (.cse8 (= ~pumpRunning~0Int 1)) (.cse14 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse2 .cse6 .cse7 .cse5) (and .cse1 .cse6 .cse8 .cse7 .cse5) (and .cse9 .cse1 .cse2 .cse10 .cse5) (and .cse11 .cse0 .cse12 .cse1 .cse13 .cse3 .cse8 .cse4 .cse14 .cse5) (and .cse11 .cse9 .cse12 .cse1 .cse13 .cse10 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse8 .cse14 .cse5)))) [2022-01-11 05:56:00,118 INFO L858 garLoopResultBuilder]: For program point L994(lines 994 1004) no Hoare annotation was computed. [2022-01-11 05:56:00,118 INFO L854 garLoopResultBuilder]: At program point L90(lines 66 92) the Hoare annotation is: (let ((.cse0 (<= |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int| 0)) (.cse7 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse9 (= ~pumpRunning~0Int 1)) (.cse8 (or (<= ~waterLevel~0Int 1) (<= 4294967297 ~waterLevel~0Int))) (.cse6 (<= 1 ~systemActive~0Int)) (.cse1 (= ~pumpRunning~0Int 0)) (.cse2 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2)) (.cse3 (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int)) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse7 .cse4 .cse8 .cse5) (and .cse0 .cse1 .cse7 .cse4 .cse8 .cse5) (and (<= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse6 (<= ~waterLevel~0Int 2) .cse9 (< 1 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|) (<= 2 ~waterLevel~0Int) .cse5 (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 2)) (and .cse6 .cse7 .cse9 .cse4 .cse8 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-01-11 05:56:00,118 INFO L858 garLoopResultBuilder]: For program point L109-6(lines 109 117) no Hoare annotation was computed. [2022-01-11 05:56:00,118 INFO L858 garLoopResultBuilder]: For program point L857-6(lines 857 861) no Hoare annotation was computed. [2022-01-11 05:56:00,118 INFO L858 garLoopResultBuilder]: For program point L73-8(lines 69 91) no Hoare annotation was computed. [2022-01-11 05:56:00,118 INFO L858 garLoopResultBuilder]: For program point L135(lines 135 143) no Hoare annotation was computed. [2022-01-11 05:56:00,118 INFO L858 garLoopResultBuilder]: For program point L233-5(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,118 INFO L858 garLoopResultBuilder]: For program point L995(lines 995 1001) no Hoare annotation was computed. [2022-01-11 05:56:00,118 INFO L854 garLoopResultBuilder]: At program point L157-2(lines 152 159) the Hoare annotation is: false [2022-01-11 05:56:00,118 INFO L854 garLoopResultBuilder]: At program point L97-4(lines 93 99) the Hoare annotation is: false [2022-01-11 05:56:00,118 INFO L854 garLoopResultBuilder]: At program point L857-8(lines 853 864) the Hoare annotation is: false [2022-01-11 05:56:00,118 INFO L858 garLoopResultBuilder]: For program point L131-4(lines 131 148) no Hoare annotation was computed. [2022-01-11 05:56:00,119 INFO L858 garLoopResultBuilder]: For program point L80-5(lines 80 86) no Hoare annotation was computed. [2022-01-11 05:56:00,119 INFO L854 garLoopResultBuilder]: At program point L165-1(lines 160 167) the Hoare annotation is: (let ((.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse3 (<= 1 ~switchedOnBeforeTS~0Int)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 .cse4) (and (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse1 .cse2 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) (or .cse0 (<= 4294967297 ~waterLevel~0Int)) .cse3 .cse4))) [2022-01-11 05:56:00,119 INFO L858 garLoopResultBuilder]: For program point L105(lines 105 122) no Hoare annotation was computed. [2022-01-11 05:56:00,119 INFO L854 garLoopResultBuilder]: At program point L239-1(lines 224 242) the Hoare annotation is: (let ((.cse1 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_#res#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (= ~pumpRunning~0Int 0)) (.cse0 (<= ~waterLevel~0Int 1)) (.cse4 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0)) (.cse5 (<= |ULTIMATE.start_ULTIMATE.start_isHighWaterLevel_~tmp___0~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0Int) .cse4 .cse5) (and .cse2 .cse3 (<= ~waterLevel~0Int 2) (<= 2 ~waterLevel~0Int) .cse4) (and .cse1 .cse2 .cse3 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int) (or .cse0 (<= 4294967297 ~waterLevel~0Int)) .cse4 .cse5))) [2022-01-11 05:56:00,119 INFO L858 garLoopResultBuilder]: For program point L958(line 958) no Hoare annotation was computed. [2022-01-11 05:56:00,119 INFO L854 garLoopResultBuilder]: At program point L949-2(lines 944 952) the Hoare annotation is: false [2022-01-11 05:56:00,119 INFO L858 garLoopResultBuilder]: For program point L105-10(lines 105 122) no Hoare annotation was computed. [2022-01-11 05:56:00,119 INFO L854 garLoopResultBuilder]: At program point L926-2(lines 921 929) the Hoare annotation is: false [2022-01-11 05:56:00,119 INFO L858 garLoopResultBuilder]: For program point L934(lines 934 940) no Hoare annotation was computed. [2022-01-11 05:56:00,119 INFO L854 garLoopResultBuilder]: At program point L97-1(lines 93 99) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse5 (<= ~waterLevel~0Int 1)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse4 (= ~pumpRunning~0Int 1)) (.cse6 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse1 .cse2 .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6 .cse7) (and .cse0 .cse5 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 .cse6 .cse7))) [2022-01-11 05:56:00,119 INFO L858 garLoopResultBuilder]: For program point L109-3(lines 109 117) no Hoare annotation was computed. [2022-01-11 05:56:00,119 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 958) no Hoare annotation was computed. [2022-01-11 05:56:00,120 INFO L854 garLoopResultBuilder]: At program point L959(lines 954 961) the Hoare annotation is: false [2022-01-11 05:56:00,120 INFO L858 garLoopResultBuilder]: For program point L252-6(lines 252 256) no Hoare annotation was computed. [2022-01-11 05:56:00,120 INFO L858 garLoopResultBuilder]: For program point L934-5(lines 934 940) no Hoare annotation was computed. [2022-01-11 05:56:00,120 INFO L854 garLoopResultBuilder]: At program point L97-11(lines 93 99) the Hoare annotation is: false [2022-01-11 05:56:00,120 INFO L858 garLoopResultBuilder]: For program point L990-4(lines 990 1007) no Hoare annotation was computed. [2022-01-11 05:56:00,120 INFO L854 garLoopResultBuilder]: At program point L939(lines 930 943) the Hoare annotation is: false [2022-01-11 05:56:00,120 INFO L854 garLoopResultBuilder]: At program point L105-1(lines 101 125) the Hoare annotation is: (let ((.cse0 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 1))) (.cse5 (<= ~waterLevel~0Int 1)) (.cse1 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment_~tmp~1#1Int| 0)) (.cse2 (<= 1 ~systemActive~0Int)) (.cse3 (<= ~pumpRunning~0Int ~switchedOnBeforeTS~0Int)) (.cse4 (= ~pumpRunning~0Int 1)) (.cse6 (<= ~pumpRunning~0Int |ULTIMATE.start_ULTIMATE.start_isPumpRunning_#res#1Int|)) (.cse7 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 (or (<= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 1) (<= 4294967297 |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int|)) .cse1 .cse2 .cse3 (or (<= 4294967297 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) (<= |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int| 1)) .cse4 (or .cse5 (<= 4294967297 ~waterLevel~0Int)) .cse6 .cse7) (and .cse0 .cse5 .cse1 .cse2 .cse3 (not (<= (div (+ 4294967295 ~waterLevel~0Int) 4294967296) 0)) (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| 2) (= 2 |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse4 .cse6 .cse7))) [2022-01-11 05:56:00,120 INFO L854 garLoopResultBuilder]: At program point L157-1(lines 152 159) the Hoare annotation is: (and (<= 1 ~systemActive~0Int) (<= ~waterLevel~0Int 2) (= ~pumpRunning~0Int 1) (<= 2 ~waterLevel~0Int) (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0)) [2022-01-11 05:56:00,120 INFO L854 garLoopResultBuilder]: At program point L97-2(lines 93 99) the Hoare annotation is: (let ((.cse4 (<= ~waterLevel~0Int 1)) (.cse0 (<= |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 0)) (.cse1 (<= 1 ~systemActive~0Int)) (.cse2 (= ~pumpRunning~0Int 0)) (.cse3 (< 0 (+ |ULTIMATE.start_ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0#1Int| 1))) (.cse5 (= |ULTIMATE.start_ULTIMATE.start_test_~splverifierCounter~0#1Int| 0))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0Int |ULTIMATE.start_ULTIMATE.start_getWaterLevel_#res#1Int|) .cse3 (= |ULTIMATE.start_ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~9#1Int| ~waterLevel~0Int) (or .cse4 (<= 4294967297 ~waterLevel~0Int)) .cse5) (and .cse0 .cse4 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0Int) .cse5) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0Int 2) .cse3 (<= 2 ~waterLevel~0Int) .cse5))) [2022-01-11 05:56:00,120 INFO L858 garLoopResultBuilder]: For program point L252-8(lines 252 256) no Hoare annotation was computed. [2022-01-11 05:56:00,120 INFO L854 garLoopResultBuilder]: At program point L939-5(lines 930 943) the Hoare annotation is: false [2022-01-11 05:56:00,120 INFO L854 garLoopResultBuilder]: At program point L105-11(lines 101 125) the Hoare annotation is: false [2022-01-11 05:56:00,121 INFO L854 garLoopResultBuilder]: At program point L184-5(lines 179 187) the Hoare annotation is: false [2022-01-11 05:56:00,121 INFO L854 garLoopResultBuilder]: At program point L990-5(lines 982 1010) the Hoare annotation is: false [2022-01-11 05:56:00,121 INFO L858 garLoopResultBuilder]: For program point L233(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,121 INFO L854 garLoopResultBuilder]: At program point L258-2(lines 243 261) the Hoare annotation is: false [2022-01-11 05:56:00,121 INFO L858 garLoopResultBuilder]: For program point L233-15(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,121 INFO L854 garLoopResultBuilder]: At program point L131-5(lines 127 151) the Hoare annotation is: false [2022-01-11 05:56:00,121 INFO L858 garLoopResultBuilder]: For program point L994-4(lines 994 1004) no Hoare annotation was computed. [2022-01-11 05:56:00,121 INFO L854 garLoopResultBuilder]: At program point L90-2(lines 66 92) the Hoare annotation is: false [2022-01-11 05:56:00,121 INFO L858 garLoopResultBuilder]: For program point L233-2(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,121 INFO L858 garLoopResultBuilder]: For program point L135-6(lines 135 143) no Hoare annotation was computed. [2022-01-11 05:56:00,121 INFO L858 garLoopResultBuilder]: For program point L233-17(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,121 INFO L858 garLoopResultBuilder]: For program point L995-6(lines 995 1001) no Hoare annotation was computed. [2022-01-11 05:56:00,121 INFO L854 garLoopResultBuilder]: At program point L239(lines 224 242) the Hoare annotation is: false [2022-01-11 05:56:00,121 INFO L854 garLoopResultBuilder]: At program point L165-3(lines 160 167) the Hoare annotation is: false [2022-01-11 05:56:00,121 INFO L858 garLoopResultBuilder]: For program point L105-8(lines 105 122) no Hoare annotation was computed. [2022-01-11 05:56:00,122 INFO L854 garLoopResultBuilder]: At program point L239-5(lines 224 242) the Hoare annotation is: false [2022-01-11 05:56:00,122 INFO L858 garLoopResultBuilder]: For program point L958-2(line 958) no Hoare annotation was computed. [2022-01-11 05:56:00,122 INFO L858 garLoopResultBuilder]: For program point L109(lines 109 117) no Hoare annotation was computed. [2022-01-11 05:56:00,122 INFO L858 garLoopResultBuilder]: For program point L934-4(lines 934 940) no Hoare annotation was computed. [2022-01-11 05:56:00,122 INFO L854 garLoopResultBuilder]: At program point L97-9(lines 93 99) the Hoare annotation is: false [2022-01-11 05:56:00,122 INFO L858 garLoopResultBuilder]: For program point L109-15(lines 109 117) no Hoare annotation was computed. [2022-01-11 05:56:00,122 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 958) no Hoare annotation was computed. [2022-01-11 05:56:00,122 INFO L854 garLoopResultBuilder]: At program point L959-2(lines 954 961) the Hoare annotation is: false [2022-01-11 05:56:00,122 INFO L854 garLoopResultBuilder]: At program point L157(lines 152 159) the Hoare annotation is: false [2022-01-11 05:56:00,122 INFO L854 garLoopResultBuilder]: At program point L97(lines 93 99) the Hoare annotation is: false [2022-01-11 05:56:00,122 INFO L854 garLoopResultBuilder]: At program point L939-4(lines 930 943) the Hoare annotation is: false [2022-01-11 05:56:00,122 INFO L854 garLoopResultBuilder]: At program point L105-9(lines 101 125) the Hoare annotation is: false [2022-01-11 05:56:00,122 INFO L854 garLoopResultBuilder]: At program point L157-5(lines 152 159) the Hoare annotation is: false [2022-01-11 05:56:00,122 INFO L854 garLoopResultBuilder]: At program point L97-10(lines 93 99) the Hoare annotation is: false [2022-01-11 05:56:00,123 INFO L858 garLoopResultBuilder]: For program point L233-12(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,123 INFO L858 garLoopResultBuilder]: For program point L233-14(lines 233 237) no Hoare annotation was computed. [2022-01-11 05:56:00,123 INFO L854 garLoopResultBuilder]: At program point L239-4(lines 224 242) the Hoare annotation is: false [2022-01-11 05:56:00,123 INFO L858 garLoopResultBuilder]: For program point L109-12(lines 109 117) no Hoare annotation was computed. [2022-01-11 05:56:00,123 INFO L854 garLoopResultBuilder]: At program point L157-4(lines 152 159) the Hoare annotation is: false [2022-01-11 05:56:00,123 INFO L854 garLoopResultBuilder]: At program point L97-8(lines 93 99) the Hoare annotation is: false [2022-01-11 05:56:00,126 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-01-11 05:56:00,127 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2022-01-11 05:56:00,192 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.01 05:56:00 BasicIcfg [2022-01-11 05:56:00,193 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-01-11 05:56:00,193 INFO L158 Benchmark]: Toolchain (without parser) took 16916.23ms. Allocated memory was 192.9MB in the beginning and 684.7MB in the end (delta: 491.8MB). Free memory was 137.9MB in the beginning and 572.1MB in the end (delta: -434.2MB). Peak memory consumption was 393.9MB. Max. memory is 8.0GB. [2022-01-11 05:56:00,193 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 192.9MB. Free memory is still 155.7MB. There was no memory consumed. Max. memory is 8.0GB. [2022-01-11 05:56:00,193 INFO L158 Benchmark]: CACSL2BoogieTranslator took 462.88ms. Allocated memory is still 192.9MB. Free memory was 137.7MB in the beginning and 150.9MB in the end (delta: -13.2MB). Peak memory consumption was 5.2MB. Max. memory is 8.0GB. [2022-01-11 05:56:00,193 INFO L158 Benchmark]: Boogie Procedure Inliner took 59.25ms. Allocated memory is still 192.9MB. Free memory was 150.9MB in the beginning and 147.3MB in the end (delta: 3.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-11 05:56:00,193 INFO L158 Benchmark]: Boogie Preprocessor took 59.66ms. Allocated memory is still 192.9MB. Free memory was 147.3MB in the beginning and 144.7MB in the end (delta: 2.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. [2022-01-11 05:56:00,194 INFO L158 Benchmark]: RCFGBuilder took 510.11ms. Allocated memory is still 192.9MB. Free memory was 144.7MB in the beginning and 121.1MB in the end (delta: 23.7MB). Peak memory consumption was 23.1MB. Max. memory is 8.0GB. [2022-01-11 05:56:00,194 INFO L158 Benchmark]: IcfgTransformer took 95.13ms. Allocated memory is still 192.9MB. Free memory was 121.1MB in the beginning and 110.9MB in the end (delta: 10.2MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. [2022-01-11 05:56:00,194 INFO L158 Benchmark]: TraceAbstraction took 15724.57ms. Allocated memory was 192.9MB in the beginning and 684.7MB in the end (delta: 491.8MB). Free memory was 110.6MB in the beginning and 572.1MB in the end (delta: -461.5MB). Peak memory consumption was 365.7MB. Max. memory is 8.0GB. [2022-01-11 05:56:00,195 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 192.9MB. Free memory is still 155.7MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 462.88ms. Allocated memory is still 192.9MB. Free memory was 137.7MB in the beginning and 150.9MB in the end (delta: -13.2MB). Peak memory consumption was 5.2MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 59.25ms. Allocated memory is still 192.9MB. Free memory was 150.9MB in the beginning and 147.3MB in the end (delta: 3.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * Boogie Preprocessor took 59.66ms. Allocated memory is still 192.9MB. Free memory was 147.3MB in the beginning and 144.7MB in the end (delta: 2.6MB). Peak memory consumption was 3.1MB. Max. memory is 8.0GB. * RCFGBuilder took 510.11ms. Allocated memory is still 192.9MB. Free memory was 144.7MB in the beginning and 121.1MB in the end (delta: 23.7MB). Peak memory consumption was 23.1MB. Max. memory is 8.0GB. * IcfgTransformer took 95.13ms. Allocated memory is still 192.9MB. Free memory was 121.1MB in the beginning and 110.9MB in the end (delta: 10.2MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. * TraceAbstraction took 15724.57ms. Allocated memory was 192.9MB in the beginning and 684.7MB in the end (delta: 491.8MB). Free memory was 110.6MB in the beginning and 572.1MB in the end (delta: -461.5MB). Peak memory consumption was 365.7MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 958]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 958]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - PositiveResult [Line: 958]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 179 locations, 3 error locations. Started 1 CEGAR loops. OverallTime: 15.6s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 11.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3992 SdHoareTripleChecker+Valid, 0.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3992 mSDsluCounter, 7530 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4910 mSDsCounter, 189 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 674 IncrementalHoareTripleChecker+Invalid, 863 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 189 mSolverCounterUnsat, 2620 mSDtfsCounter, 674 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 345 GetRequests, 280 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 132 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=337occurred in iteration=9, InterpolantAutomatonStates: 72, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 1958 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 88 LocationsWithAnnotation, 88 PreInvPairs, 401 NumberOfFragments, 2479 HoareAnnotationTreeSize, 88 FomulaSimplifications, 86012 FormulaSimplificationTreeSizeReduction, 5.2s HoareSimplificationTime, 88 FomulaSimplificationsInter, 392840 FormulaSimplificationTreeSizeReductionInter, 6.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 736 NumberOfCodeBlocks, 736 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 850 ConstructedInterpolants, 0 QuantifiedInterpolants, 2138 SizeOfPredicates, 6 NumberOfNonLiveVariables, 884 ConjunctsInSsa, 15 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 532/538 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 877]: Loop Invariant Derived loop invariant: (((((((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((1bv32 == pumpRunning && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 2bv32 == \result) && tmp == 2bv32) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule32(2bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((2bv32 == \result && ~bvule32(\result, 0bv32)) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((((~bvule32(\result, 0bv32) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 243]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule32(1bv32, waterLevel)) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 243]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((((((!~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((2bv32 == \result && tmp == 2bv32) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 392]: Loop Invariant Derived loop invariant: (((((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((1bv32 == pumpRunning && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || (((((2bv32 == \result && tmp == 2bv32) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((2bv32 == \result && ~bvule32(\result, 0bv32)) && tmp == 2bv32) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((((((1bv32 == pumpRunning && ~bvule32(tmp, 2bv32)) && ~bvule32(\result, 2bv32)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(2bv32, \result)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && ~bvult64(1bv32, tmp))) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: (((((((~bvule32(1bv32, switchedOnBeforeTS) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, switchedOnBeforeTS) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 964]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) || ((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule32(\result, 0bv32) && ~bvule32(1bv32, waterLevel)) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((~bvule32(\result, 0bv32) && ~bvule32(2bv32, waterLevel)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: (((1bv32 == pumpRunning && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32) - InvariantResult [Line: 865]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(1bv32, systemActive) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((1bv32 == pumpRunning && 2bv32 == \result) && tmp == 2bv32) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || ((((~bvule32(2bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((2bv32 == \result && ~bvule32(\result, 0bv32)) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((~bvule32(\result, 0bv32) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) || ((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) - InvariantResult [Line: 972]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: (((((((\result == 1bv32 && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((~bvule32(2bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || (((((~bvule32(1bv32, waterLevel) && \result == 1bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 262]: Loop Invariant Derived loop invariant: ((((~bvule32(2bv32, waterLevel) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || (((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((~bvule32(1bv32, waterLevel) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: (((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && ~bvule32(\result, 0bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((((~bvule32(1bv32, waterLevel) && ~bvule32(tmp___0, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(\result, 0bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((~bvule32(2bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: ((((((((~bvule32(1bv32, systemActive) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((1bv32 == pumpRunning && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32)) || ((((~bvule32(2bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32)) || ((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: (((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || ((((1bv32 == pumpRunning && 2bv32 == \result) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || ((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((2bv32 == \result && ~bvule32(\result, 0bv32)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((2bv32 == \result && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && waterLevel == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 279]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 243]: Loop Invariant Derived loop invariant: (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 344]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 982]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 382]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 460]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: (((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 972]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 972]: Loop Invariant Derived loop invariant: (((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) || ((((~bvule32(\result, 0bv32) && ~bvule32(waterLevel, 1bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((~bvule32(\result, 0bv32) && ~bvule32(2bv32, waterLevel)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning)) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvule32(1bv32, systemActive)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || ((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && 2bv32 == \result) && ~bvule32(2bv32, waterLevel)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 982]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && waterLevel == \result) && splverifierCounter == 0bv32) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 66]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || (((((1bv32 == pumpRunning && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || (((((2bv32 == \result && tmp == 2bv32) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((2bv32 == \result && ~bvule32(\result, 0bv32)) && tmp == 2bv32) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((((((1bv32 == pumpRunning && ~bvule32(tmp, 2bv32)) && ~bvule32(\result, 2bv32)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(2bv32, \result)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && ~bvult64(1bv32, tmp))) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp, 0bv32)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 224]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: (((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(1bv32, systemActive)) && ~bvule32(tmp, 0bv32)) && (~bvule33(4294967297bv33, ~zero_extendFrom32To33(\result)) || ~bvule32(\result, 1bv32))) && (~bvule32(tmp, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(tmp)))) && splverifierCounter == 0bv32) || ((((((((((1bv32 == pumpRunning && ~bvule32(pumpRunning, switchedOnBeforeTS)) && ~bvule32(pumpRunning, \result)) && ~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33))) && 2bv32 == \result) && tmp == 2bv32) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && ~bvule32(tmp, 0bv32)) && !~bvule1(~bvadd16(4294967295bv33, ~zero_extendFrom32To33(waterLevel))[32:32], 0bv1)) && splverifierCounter == 0bv32) - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: ((((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && 0bv32 == pumpRunning) || ((((1bv32 == pumpRunning && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32))) || ((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && ~bvule32(1bv32, waterLevel)) && ~bvule32(tmp, 0bv32)) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((((~bvult64(0bv33, ~bvadd16(~zero_extendFrom32To33(tmp), 1bv33)) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && ~bvule32(tmp, 0bv32)) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 152]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 358]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: ((~bvule32(1bv32, waterLevel) && ~bvule32(1bv32, systemActive)) && ~bvule32(waterLevel, 1bv32)) && 0bv32 == pumpRunning - InvariantResult [Line: 982]: Loop Invariant Derived loop invariant: ((((((((((~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) || (((((1bv32 == pumpRunning && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && waterLevel == \result) && splverifierCounter == 0bv32)) || (((((2bv32 == \result && tmp == 2bv32) && waterLevel == tmp) && ~bvule32(1bv32, systemActive)) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || (((((2bv32 == \result && ~bvule32(\result, 0bv32)) && tmp == 2bv32) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning)) || ((((((((1bv32 == pumpRunning && ~bvule32(tmp, 2bv32)) && ~bvule32(\result, 2bv32)) && ~bvule32(2bv32, waterLevel)) && ~bvule32(1bv32, systemActive)) && ~bvule32(2bv32, \result)) && splverifierCounter == 0bv32) && ~bvule32(waterLevel, 2bv32)) && ~bvult64(1bv32, tmp))) || (((((~bvule32(\result, 0bv32) && (~bvule32(waterLevel, 1bv32) || ~bvule33(4294967297bv33, ~zero_extendFrom32To33(waterLevel)))) && waterLevel == tmp) && waterLevel == \result) && splverifierCounter == 0bv32) && 0bv32 == pumpRunning) - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2022-01-11 05:56:00,243 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request...