./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 6a5b3ee1add5adeacf75c411f0af51a190ac6f33 ...................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 6a5b3ee1add5adeacf75c411f0af51a190ac6f33 ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 13:05:04,357 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 13:05:04,358 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 13:05:04,365 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 13:05:04,365 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 13:05:04,366 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 13:05:04,367 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 13:05:04,368 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 13:05:04,369 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 13:05:04,370 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 13:05:04,371 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 13:05:04,371 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 13:05:04,372 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 13:05:04,372 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 13:05:04,373 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 13:05:04,374 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 13:05:04,374 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 13:05:04,375 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 13:05:04,376 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 13:05:04,377 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 13:05:04,378 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 13:05:04,379 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 13:05:04,380 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 13:05:04,380 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 13:05:04,382 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 13:05:04,382 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 13:05:04,382 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 13:05:04,383 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 13:05:04,383 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 13:05:04,384 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 13:05:04,384 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 13:05:04,384 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 13:05:04,385 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 13:05:04,385 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 13:05:04,386 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 13:05:04,386 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 13:05:04,386 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 13:05:04,386 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 13:05:04,387 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 13:05:04,387 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 13:05:04,387 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 13:05:04,388 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2019-12-07 13:05:04,398 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 13:05:04,398 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 13:05:04,399 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 13:05:04,399 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 13:05:04,399 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 13:05:04,399 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 13:05:04,399 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2019-12-07 13:05:04,399 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 13:05:04,399 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 13:05:04,399 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2019-12-07 13:05:04,400 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2019-12-07 13:05:04,400 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 13:05:04,400 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2019-12-07 13:05:04,400 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2019-12-07 13:05:04,400 INFO L138 SettingsManager]: * Simplification Technique=SIMPLIFY_QUICK [2019-12-07 13:05:04,401 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 13:05:04,401 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 13:05:04,401 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 13:05:04,401 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 13:05:04,401 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 13:05:04,401 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 13:05:04,401 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 13:05:04,401 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 13:05:04,402 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 13:05:04,402 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 13:05:04,402 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 13:05:04,402 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 13:05:04,402 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 13:05:04,402 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 13:05:04,402 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 13:05:04,402 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 13:05:04,403 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 13:05:04,403 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 13:05:04,403 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 13:05:04,403 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 13:05:04,403 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2019-12-07 13:05:04,403 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-12-07 13:05:04,403 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 13:05:04,403 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 13:05:04,404 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 13:05:04,404 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 6a5b3ee1add5adeacf75c411f0af51a190ac6f33 [2019-12-07 13:05:04,503 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 13:05:04,510 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 13:05:04,513 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 13:05:04,513 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 13:05:04,514 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 13:05:04,514 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2019-12-07 13:05:04,555 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/data/b0c384fe9/5e9aa80b78ee4e53a5f3f27724eb5949/FLAGa3bd2b3bf [2019-12-07 13:05:04,920 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 13:05:04,920 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2019-12-07 13:05:04,929 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/data/b0c384fe9/5e9aa80b78ee4e53a5f3f27724eb5949/FLAGa3bd2b3bf [2019-12-07 13:05:04,941 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/data/b0c384fe9/5e9aa80b78ee4e53a5f3f27724eb5949 [2019-12-07 13:05:04,944 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 13:05:04,945 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 13:05:04,946 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 13:05:04,946 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 13:05:04,949 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 13:05:04,949 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:05:04" (1/1) ... [2019-12-07 13:05:04,951 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@581b80cd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:04, skipping insertion in model container [2019-12-07 13:05:04,952 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:05:04" (1/1) ... [2019-12-07 13:05:04,957 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 13:05:04,990 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 13:05:05,208 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 13:05:05,217 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2019-12-07 13:05:05,217 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@15217f49 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:05, skipping insertion in model container [2019-12-07 13:05:05,218 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 13:05:05,218 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2019-12-07 13:05:05,220 INFO L168 Benchmark]: Toolchain (without parser) took 274.29 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 105.9 MB). Free memory was 948.9 MB in the beginning and 1.1 GB in the end (delta: -146.4 MB). Peak memory consumption was 24.4 MB. Max. memory is 11.5 GB. [2019-12-07 13:05:05,220 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 963.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 13:05:05,221 INFO L168 Benchmark]: CACSL2BoogieTranslator took 272.08 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 105.9 MB). Free memory was 943.5 MB in the beginning and 1.1 GB in the end (delta: -151.7 MB). Peak memory consumption was 19.1 MB. Max. memory is 11.5 GB. [2019-12-07 13:05:05,222 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 963.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 272.08 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 105.9 MB). Free memory was 943.5 MB in the beginning and 1.1 GB in the end (delta: -151.7 MB). Peak memory consumption was 19.1 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 615]: Unsupported Syntax Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.25-f470102 [2019-12-07 13:05:06,371 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 13:05:06,373 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 13:05:06,382 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 13:05:06,382 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 13:05:06,383 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 13:05:06,384 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 13:05:06,386 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 13:05:06,387 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 13:05:06,388 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 13:05:06,389 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 13:05:06,390 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 13:05:06,390 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 13:05:06,391 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 13:05:06,392 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 13:05:06,393 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 13:05:06,394 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 13:05:06,395 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 13:05:06,396 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 13:05:06,398 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 13:05:06,400 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 13:05:06,401 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 13:05:06,402 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 13:05:06,403 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 13:05:06,405 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 13:05:06,405 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 13:05:06,405 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 13:05:06,406 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 13:05:06,406 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 13:05:06,407 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 13:05:06,408 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 13:05:06,408 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 13:05:06,409 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 13:05:06,409 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 13:05:06,410 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 13:05:06,410 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 13:05:06,411 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 13:05:06,411 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 13:05:06,411 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 13:05:06,412 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 13:05:06,412 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 13:05:06,413 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf [2019-12-07 13:05:06,423 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 13:05:06,423 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 13:05:06,424 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 13:05:06,424 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 13:05:06,424 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 13:05:06,424 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 13:05:06,425 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 13:05:06,425 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 13:05:06,425 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 13:05:06,425 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 13:05:06,425 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 13:05:06,426 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 13:05:06,426 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 13:05:06,426 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 13:05:06,426 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 13:05:06,426 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 13:05:06,426 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 13:05:06,426 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2019-12-07 13:05:06,426 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2019-12-07 13:05:06,427 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 13:05:06,427 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 13:05:06,427 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 13:05:06,427 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 13:05:06,427 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 13:05:06,427 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 13:05:06,427 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 13:05:06,427 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 13:05:06,427 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 13:05:06,428 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 13:05:06,428 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 13:05:06,428 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 13:05:06,428 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2019-12-07 13:05:06,428 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --rewrite-divk --print-success --lang smt [2019-12-07 13:05:06,428 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 13:05:06,428 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 13:05:06,429 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 13:05:06,429 INFO L138 SettingsManager]: * Logic for external solver=AUFBV Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 6a5b3ee1add5adeacf75c411f0af51a190ac6f33 [2019-12-07 13:05:06,594 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 13:05:06,603 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 13:05:06,606 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 13:05:06,607 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 13:05:06,607 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 13:05:06,607 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2019-12-07 13:05:06,648 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/data/197ed09af/9a669bfb7c1f41e393f014acd4b7c9ab/FLAG92c0b3b45 [2019-12-07 13:05:07,026 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 13:05:07,026 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2019-12-07 13:05:07,035 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/data/197ed09af/9a669bfb7c1f41e393f014acd4b7c9ab/FLAG92c0b3b45 [2019-12-07 13:05:07,043 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/data/197ed09af/9a669bfb7c1f41e393f014acd4b7c9ab [2019-12-07 13:05:07,045 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 13:05:07,046 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 13:05:07,047 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 13:05:07,047 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 13:05:07,049 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 13:05:07,049 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:05:07" (1/1) ... [2019-12-07 13:05:07,051 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4e05d898 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07, skipping insertion in model container [2019-12-07 13:05:07,051 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:05:07" (1/1) ... [2019-12-07 13:05:07,056 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 13:05:07,082 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 13:05:07,292 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 13:05:07,302 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2019-12-07 13:05:07,307 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 13:05:07,346 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 13:05:07,349 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 13:05:07,387 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 13:05:07,409 INFO L208 MainTranslator]: Completed translation [2019-12-07 13:05:07,410 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07 WrapperNode [2019-12-07 13:05:07,410 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 13:05:07,410 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 13:05:07,410 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 13:05:07,411 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 13:05:07,416 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07" (1/1) ... [2019-12-07 13:05:07,429 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07" (1/1) ... [2019-12-07 13:05:07,456 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 13:05:07,457 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 13:05:07,457 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 13:05:07,457 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 13:05:07,463 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07" (1/1) ... [2019-12-07 13:05:07,463 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07" (1/1) ... [2019-12-07 13:05:07,467 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07" (1/1) ... [2019-12-07 13:05:07,468 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07" (1/1) ... [2019-12-07 13:05:07,478 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07" (1/1) ... [2019-12-07 13:05:07,484 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07" (1/1) ... [2019-12-07 13:05:07,486 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07" (1/1) ... [2019-12-07 13:05:07,489 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 13:05:07,489 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 13:05:07,490 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 13:05:07,490 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 13:05:07,490 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 13:05:07,529 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 13:05:07,530 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2019-12-07 13:05:07,530 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 13:05:07,530 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 13:05:08,112 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 13:05:08,113 INFO L287 CfgBuilder]: Removed 170 assume(true) statements. [2019-12-07 13:05:08,114 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:05:08 BoogieIcfgContainer [2019-12-07 13:05:08,114 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 13:05:08,115 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-12-07 13:05:08,115 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-12-07 13:05:08,118 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-12-07 13:05:08,118 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 01:05:07" (1/3) ... [2019-12-07 13:05:08,119 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@420172e7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 01:05:08, skipping insertion in model container [2019-12-07 13:05:08,119 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:05:07" (2/3) ... [2019-12-07 13:05:08,120 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@420172e7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 01:05:08, skipping insertion in model container [2019-12-07 13:05:08,120 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:05:08" (3/3) ... [2019-12-07 13:05:08,122 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product37.cil.c [2019-12-07 13:05:08,131 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-12-07 13:05:08,138 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2019-12-07 13:05:08,149 INFO L249 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2019-12-07 13:05:08,172 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-12-07 13:05:08,172 INFO L374 AbstractCegarLoop]: Hoare is true [2019-12-07 13:05:08,172 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-12-07 13:05:08,173 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 13:05:08,173 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 13:05:08,173 INFO L378 AbstractCegarLoop]: Difference is false [2019-12-07 13:05:08,173 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 13:05:08,173 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-12-07 13:05:08,188 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states. [2019-12-07 13:05:08,193 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2019-12-07 13:05:08,193 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:08,194 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:08,194 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:08,198 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:08,199 INFO L82 PathProgramCache]: Analyzing trace with hash -2044768007, now seen corresponding path program 1 times [2019-12-07 13:05:08,208 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:08,208 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2146357567] [2019-12-07 13:05:08,209 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 2 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:08,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:08,340 INFO L264 TraceCheckSpWp]: Trace formula consists of 181 conjuncts, 1 conjunts are in the unsatisfiable core [2019-12-07 13:05:08,344 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:08,355 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:08,355 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:08,359 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:08,360 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2146357567] [2019-12-07 13:05:08,360 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:05:08,360 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 2 [2019-12-07 13:05:08,361 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [857797340] [2019-12-07 13:05:08,364 INFO L442 AbstractCegarLoop]: Interpolant automaton has 2 states [2019-12-07 13:05:08,364 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:08,373 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2019-12-07 13:05:08,373 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 13:05:08,375 INFO L87 Difference]: Start difference. First operand 120 states. Second operand 2 states. [2019-12-07 13:05:08,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:08,397 INFO L93 Difference]: Finished difference Result 233 states and 352 transitions. [2019-12-07 13:05:08,397 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 13:05:08,398 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2019-12-07 13:05:08,399 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:08,407 INFO L225 Difference]: With dead ends: 233 [2019-12-07 13:05:08,407 INFO L226 Difference]: Without dead ends: 116 [2019-12-07 13:05:08,410 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 13:05:08,422 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2019-12-07 13:05:08,438 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 116. [2019-12-07 13:05:08,439 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 116 states. [2019-12-07 13:05:08,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116 states to 116 states and 168 transitions. [2019-12-07 13:05:08,441 INFO L78 Accepts]: Start accepts. Automaton has 116 states and 168 transitions. Word has length 19 [2019-12-07 13:05:08,442 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:08,442 INFO L462 AbstractCegarLoop]: Abstraction has 116 states and 168 transitions. [2019-12-07 13:05:08,442 INFO L463 AbstractCegarLoop]: Interpolant automaton has 2 states. [2019-12-07 13:05:08,442 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 168 transitions. [2019-12-07 13:05:08,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2019-12-07 13:05:08,443 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:08,443 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:08,644 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 mathsat -unsat_core_generation=3 [2019-12-07 13:05:08,644 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:08,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:08,645 INFO L82 PathProgramCache]: Analyzing trace with hash -238748454, now seen corresponding path program 1 times [2019-12-07 13:05:08,646 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:08,646 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1601309963] [2019-12-07 13:05:08,646 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 3 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:08,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:08,774 INFO L264 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 13:05:08,775 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:08,790 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:08,790 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:08,800 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:08,800 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1601309963] [2019-12-07 13:05:08,800 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:05:08,800 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 13:05:08,801 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1513318830] [2019-12-07 13:05:08,802 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 13:05:08,802 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:08,802 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 13:05:08,802 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:05:08,803 INFO L87 Difference]: Start difference. First operand 116 states and 168 transitions. Second operand 4 states. [2019-12-07 13:05:08,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:08,817 INFO L93 Difference]: Finished difference Result 116 states and 168 transitions. [2019-12-07 13:05:08,817 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 13:05:08,817 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 20 [2019-12-07 13:05:08,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:08,818 INFO L225 Difference]: With dead ends: 116 [2019-12-07 13:05:08,818 INFO L226 Difference]: Without dead ends: 49 [2019-12-07 13:05:08,819 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:05:08,820 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2019-12-07 13:05:08,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2019-12-07 13:05:08,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2019-12-07 13:05:08,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 70 transitions. [2019-12-07 13:05:08,825 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 70 transitions. Word has length 20 [2019-12-07 13:05:08,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:08,825 INFO L462 AbstractCegarLoop]: Abstraction has 49 states and 70 transitions. [2019-12-07 13:05:08,825 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 13:05:08,826 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 70 transitions. [2019-12-07 13:05:08,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2019-12-07 13:05:08,826 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:08,827 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:09,027 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 mathsat -unsat_core_generation=3 [2019-12-07 13:05:09,027 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:09,027 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:09,028 INFO L82 PathProgramCache]: Analyzing trace with hash 2013244568, now seen corresponding path program 1 times [2019-12-07 13:05:09,028 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:09,028 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [296701566] [2019-12-07 13:05:09,028 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 4 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:09,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:09,157 INFO L264 TraceCheckSpWp]: Trace formula consists of 188 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 13:05:09,159 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:09,166 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:09,167 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:09,174 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:09,174 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [296701566] [2019-12-07 13:05:09,174 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:05:09,175 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 3 [2019-12-07 13:05:09,175 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [268545300] [2019-12-07 13:05:09,175 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 13:05:09,175 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:09,175 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 13:05:09,176 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:05:09,176 INFO L87 Difference]: Start difference. First operand 49 states and 70 transitions. Second operand 4 states. [2019-12-07 13:05:09,182 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:09,183 INFO L93 Difference]: Finished difference Result 91 states and 133 transitions. [2019-12-07 13:05:09,183 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 13:05:09,183 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 26 [2019-12-07 13:05:09,183 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:09,184 INFO L225 Difference]: With dead ends: 91 [2019-12-07 13:05:09,184 INFO L226 Difference]: Without dead ends: 49 [2019-12-07 13:05:09,184 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:05:09,185 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2019-12-07 13:05:09,188 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2019-12-07 13:05:09,189 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2019-12-07 13:05:09,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 69 transitions. [2019-12-07 13:05:09,189 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 69 transitions. Word has length 26 [2019-12-07 13:05:09,190 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:09,190 INFO L462 AbstractCegarLoop]: Abstraction has 49 states and 69 transitions. [2019-12-07 13:05:09,190 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 13:05:09,190 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 69 transitions. [2019-12-07 13:05:09,191 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2019-12-07 13:05:09,191 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:09,191 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:09,391 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 mathsat -unsat_core_generation=3 [2019-12-07 13:05:09,392 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:09,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:09,393 INFO L82 PathProgramCache]: Analyzing trace with hash -997731729, now seen corresponding path program 1 times [2019-12-07 13:05:09,394 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:09,394 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [472606960] [2019-12-07 13:05:09,394 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 5 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:09,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:09,522 INFO L264 TraceCheckSpWp]: Trace formula consists of 190 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 13:05:09,524 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:09,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:09,529 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:09,531 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:09,532 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [472606960] [2019-12-07 13:05:09,532 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:05:09,532 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 13:05:09,532 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [948526223] [2019-12-07 13:05:09,532 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 13:05:09,532 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:09,533 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 13:05:09,533 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 13:05:09,533 INFO L87 Difference]: Start difference. First operand 49 states and 69 transitions. Second operand 3 states. [2019-12-07 13:05:09,598 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:09,599 INFO L93 Difference]: Finished difference Result 115 states and 165 transitions. [2019-12-07 13:05:09,599 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 13:05:09,599 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2019-12-07 13:05:09,600 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:09,601 INFO L225 Difference]: With dead ends: 115 [2019-12-07 13:05:09,601 INFO L226 Difference]: Without dead ends: 73 [2019-12-07 13:05:09,601 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 13:05:09,602 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2019-12-07 13:05:09,610 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 71. [2019-12-07 13:05:09,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 71 states. [2019-12-07 13:05:09,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 99 transitions. [2019-12-07 13:05:09,611 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 99 transitions. Word has length 28 [2019-12-07 13:05:09,611 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:09,612 INFO L462 AbstractCegarLoop]: Abstraction has 71 states and 99 transitions. [2019-12-07 13:05:09,612 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 13:05:09,612 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 99 transitions. [2019-12-07 13:05:09,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 13:05:09,613 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:09,613 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:09,814 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 mathsat -unsat_core_generation=3 [2019-12-07 13:05:09,815 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:09,815 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:09,815 INFO L82 PathProgramCache]: Analyzing trace with hash -1921834210, now seen corresponding path program 1 times [2019-12-07 13:05:09,816 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:09,816 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [381091052] [2019-12-07 13:05:09,817 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 6 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:09,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:09,972 INFO L264 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:05:09,974 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:09,985 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:09,985 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:09,993 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:09,993 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [381091052] [2019-12-07 13:05:09,993 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:05:09,993 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 13:05:09,994 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2097192379] [2019-12-07 13:05:09,994 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 13:05:09,994 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:09,994 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 13:05:09,995 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 13:05:09,995 INFO L87 Difference]: Start difference. First operand 71 states and 99 transitions. Second operand 5 states. [2019-12-07 13:05:10,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:10,052 INFO L93 Difference]: Finished difference Result 190 states and 264 transitions. [2019-12-07 13:05:10,052 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-12-07 13:05:10,052 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2019-12-07 13:05:10,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:10,053 INFO L225 Difference]: With dead ends: 190 [2019-12-07 13:05:10,053 INFO L226 Difference]: Without dead ends: 126 [2019-12-07 13:05:10,054 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 13:05:10,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2019-12-07 13:05:10,061 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 77. [2019-12-07 13:05:10,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 77 states. [2019-12-07 13:05:10,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 105 transitions. [2019-12-07 13:05:10,062 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 105 transitions. Word has length 34 [2019-12-07 13:05:10,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:10,063 INFO L462 AbstractCegarLoop]: Abstraction has 77 states and 105 transitions. [2019-12-07 13:05:10,063 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 13:05:10,063 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 105 transitions. [2019-12-07 13:05:10,063 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 13:05:10,064 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:10,064 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:10,264 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 mathsat -unsat_core_generation=3 [2019-12-07 13:05:10,265 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:10,265 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:10,265 INFO L82 PathProgramCache]: Analyzing trace with hash -988370501, now seen corresponding path program 1 times [2019-12-07 13:05:10,266 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:10,267 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [202599658] [2019-12-07 13:05:10,267 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 7 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:10,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:10,392 INFO L264 TraceCheckSpWp]: Trace formula consists of 200 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:05:10,394 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:10,408 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:10,408 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:10,411 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:10,411 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [202599658] [2019-12-07 13:05:10,412 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:05:10,412 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 13:05:10,412 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [932953959] [2019-12-07 13:05:10,412 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 13:05:10,412 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:10,412 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 13:05:10,413 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 13:05:10,413 INFO L87 Difference]: Start difference. First operand 77 states and 105 transitions. Second operand 5 states. [2019-12-07 13:05:10,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:10,533 INFO L93 Difference]: Finished difference Result 260 states and 358 transitions. [2019-12-07 13:05:10,533 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 13:05:10,533 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2019-12-07 13:05:10,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:10,535 INFO L225 Difference]: With dead ends: 260 [2019-12-07 13:05:10,535 INFO L226 Difference]: Without dead ends: 190 [2019-12-07 13:05:10,535 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-12-07 13:05:10,536 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 190 states. [2019-12-07 13:05:10,545 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 190 to 76. [2019-12-07 13:05:10,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 76 states. [2019-12-07 13:05:10,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 102 transitions. [2019-12-07 13:05:10,545 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 102 transitions. Word has length 34 [2019-12-07 13:05:10,546 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:10,546 INFO L462 AbstractCegarLoop]: Abstraction has 76 states and 102 transitions. [2019-12-07 13:05:10,546 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 13:05:10,546 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 102 transitions. [2019-12-07 13:05:10,546 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 13:05:10,547 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:10,547 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:10,747 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 mathsat -unsat_core_generation=3 [2019-12-07 13:05:10,748 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:10,748 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:10,748 INFO L82 PathProgramCache]: Analyzing trace with hash -1220769632, now seen corresponding path program 1 times [2019-12-07 13:05:10,749 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:10,749 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1357730793] [2019-12-07 13:05:10,749 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 8 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:10,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:10,854 INFO L264 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 13:05:10,855 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:10,862 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:10,862 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:10,872 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:10,872 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1357730793] [2019-12-07 13:05:10,872 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:05:10,872 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2019-12-07 13:05:10,872 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [918847447] [2019-12-07 13:05:10,873 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 13:05:10,873 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:10,873 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 13:05:10,873 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2019-12-07 13:05:10,873 INFO L87 Difference]: Start difference. First operand 76 states and 102 transitions. Second operand 6 states. [2019-12-07 13:05:10,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:10,919 INFO L93 Difference]: Finished difference Result 199 states and 267 transitions. [2019-12-07 13:05:10,920 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 13:05:10,920 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 34 [2019-12-07 13:05:10,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:10,921 INFO L225 Difference]: With dead ends: 199 [2019-12-07 13:05:10,921 INFO L226 Difference]: Without dead ends: 130 [2019-12-07 13:05:10,922 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 13:05:10,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130 states. [2019-12-07 13:05:10,930 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130 to 80. [2019-12-07 13:05:10,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 80 states. [2019-12-07 13:05:10,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 106 transitions. [2019-12-07 13:05:10,931 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 106 transitions. Word has length 34 [2019-12-07 13:05:10,931 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:10,931 INFO L462 AbstractCegarLoop]: Abstraction has 80 states and 106 transitions. [2019-12-07 13:05:10,931 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 13:05:10,931 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 106 transitions. [2019-12-07 13:05:10,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 13:05:10,932 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:10,932 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:11,132 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 mathsat -unsat_core_generation=3 [2019-12-07 13:05:11,133 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:11,134 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:11,134 INFO L82 PathProgramCache]: Analyzing trace with hash -1807575646, now seen corresponding path program 1 times [2019-12-07 13:05:11,134 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:11,135 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1530183431] [2019-12-07 13:05:11,135 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 9 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:11,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:11,261 INFO L264 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 13:05:11,262 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:11,267 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:11,267 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:11,276 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:11,276 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1530183431] [2019-12-07 13:05:11,276 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:05:11,276 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 3 [2019-12-07 13:05:11,276 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [523734258] [2019-12-07 13:05:11,277 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 13:05:11,277 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:11,277 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 13:05:11,277 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:05:11,277 INFO L87 Difference]: Start difference. First operand 80 states and 106 transitions. Second operand 4 states. [2019-12-07 13:05:11,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:11,319 INFO L93 Difference]: Finished difference Result 240 states and 322 transitions. [2019-12-07 13:05:11,320 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 13:05:11,320 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2019-12-07 13:05:11,320 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:11,321 INFO L225 Difference]: With dead ends: 240 [2019-12-07 13:05:11,321 INFO L226 Difference]: Without dead ends: 167 [2019-12-07 13:05:11,321 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:05:11,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2019-12-07 13:05:11,333 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 137. [2019-12-07 13:05:11,333 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 137 states. [2019-12-07 13:05:11,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 182 transitions. [2019-12-07 13:05:11,333 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 182 transitions. Word has length 34 [2019-12-07 13:05:11,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:11,333 INFO L462 AbstractCegarLoop]: Abstraction has 137 states and 182 transitions. [2019-12-07 13:05:11,334 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 13:05:11,334 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 182 transitions. [2019-12-07 13:05:11,334 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2019-12-07 13:05:11,334 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:11,334 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:11,535 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 mathsat -unsat_core_generation=3 [2019-12-07 13:05:11,535 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:11,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:11,536 INFO L82 PathProgramCache]: Analyzing trace with hash 1091445474, now seen corresponding path program 1 times [2019-12-07 13:05:11,536 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:11,537 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1970251832] [2019-12-07 13:05:11,537 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 10 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:11,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:11,675 INFO L264 TraceCheckSpWp]: Trace formula consists of 203 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 13:05:11,676 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:11,696 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:11,696 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:11,700 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:11,700 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1970251832] [2019-12-07 13:05:11,700 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:05:11,700 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 13:05:11,701 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1634028359] [2019-12-07 13:05:11,701 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 13:05:11,701 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:11,701 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 13:05:11,701 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 13:05:11,701 INFO L87 Difference]: Start difference. First operand 137 states and 182 transitions. Second operand 6 states. [2019-12-07 13:05:12,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:12,002 INFO L93 Difference]: Finished difference Result 669 states and 899 transitions. [2019-12-07 13:05:12,002 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 13:05:12,002 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2019-12-07 13:05:12,002 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:12,005 INFO L225 Difference]: With dead ends: 669 [2019-12-07 13:05:12,005 INFO L226 Difference]: Without dead ends: 539 [2019-12-07 13:05:12,006 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2019-12-07 13:05:12,007 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 539 states. [2019-12-07 13:05:12,029 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 539 to 245. [2019-12-07 13:05:12,029 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 245 states. [2019-12-07 13:05:12,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 245 states to 245 states and 321 transitions. [2019-12-07 13:05:12,031 INFO L78 Accepts]: Start accepts. Automaton has 245 states and 321 transitions. Word has length 35 [2019-12-07 13:05:12,031 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:12,031 INFO L462 AbstractCegarLoop]: Abstraction has 245 states and 321 transitions. [2019-12-07 13:05:12,031 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 13:05:12,031 INFO L276 IsEmpty]: Start isEmpty. Operand 245 states and 321 transitions. [2019-12-07 13:05:12,032 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2019-12-07 13:05:12,032 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:12,032 INFO L410 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:12,233 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 mathsat -unsat_core_generation=3 [2019-12-07 13:05:12,233 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:12,233 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:12,233 INFO L82 PathProgramCache]: Analyzing trace with hash -365209503, now seen corresponding path program 1 times [2019-12-07 13:05:12,233 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:12,234 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [298792612] [2019-12-07 13:05:12,234 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 11 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:12,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:12,334 INFO L264 TraceCheckSpWp]: Trace formula consists of 230 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:05:12,336 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:12,350 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:12,350 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:12,368 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:12,369 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [298792612] [2019-12-07 13:05:12,369 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1298377552] [2019-12-07 13:05:12,369 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/cvc4 Starting monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:05:12,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:12,469 INFO L264 TraceCheckSpWp]: Trace formula consists of 230 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 13:05:12,470 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:12,475 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:12,475 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:12,480 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:12,480 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [626858156] [2019-12-07 13:05:12,480 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/z3 Starting monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 13:05:12,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:12,571 INFO L264 TraceCheckSpWp]: Trace formula consists of 230 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:05:12,573 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:12,576 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:12,576 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:12,581 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:05:12,581 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 13:05:12,582 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 8 [2019-12-07 13:05:12,582 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2029906142] [2019-12-07 13:05:12,582 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 13:05:12,583 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:12,583 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 13:05:12,583 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2019-12-07 13:05:12,583 INFO L87 Difference]: Start difference. First operand 245 states and 321 transitions. Second operand 8 states. [2019-12-07 13:05:12,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:12,853 INFO L93 Difference]: Finished difference Result 619 states and 836 transitions. [2019-12-07 13:05:12,853 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2019-12-07 13:05:12,854 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 56 [2019-12-07 13:05:12,854 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:12,855 INFO L225 Difference]: With dead ends: 619 [2019-12-07 13:05:12,855 INFO L226 Difference]: Without dead ends: 381 [2019-12-07 13:05:12,856 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 338 GetRequests, 328 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2019-12-07 13:05:12,856 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 381 states. [2019-12-07 13:05:12,867 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 381 to 230. [2019-12-07 13:05:12,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 230 states. [2019-12-07 13:05:12,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 293 transitions. [2019-12-07 13:05:12,868 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 293 transitions. Word has length 56 [2019-12-07 13:05:12,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:12,868 INFO L462 AbstractCegarLoop]: Abstraction has 230 states and 293 transitions. [2019-12-07 13:05:12,868 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 13:05:12,868 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 293 transitions. [2019-12-07 13:05:12,869 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2019-12-07 13:05:12,869 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:12,869 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:13,470 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 cvc4 --incremental --print-success --lang smt --rewrite-divk,13 z3 -smt2 -in SMTLIB2_COMPLIANT=true,11 mathsat -unsat_core_generation=3 [2019-12-07 13:05:13,471 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:13,471 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:13,472 INFO L82 PathProgramCache]: Analyzing trace with hash 607108781, now seen corresponding path program 1 times [2019-12-07 13:05:13,472 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:13,473 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [451025905] [2019-12-07 13:05:13,473 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 14 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:13,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:13,594 INFO L264 TraceCheckSpWp]: Trace formula consists of 287 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:05:13,596 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:13,626 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 75 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 13:05:13,627 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:13,672 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 75 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 13:05:13,672 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [451025905] [2019-12-07 13:05:13,672 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [235364335] [2019-12-07 13:05:13,672 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/cvc4 Starting monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:05:13,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:13,776 INFO L264 TraceCheckSpWp]: Trace formula consists of 287 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:05:13,778 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:13,819 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 58 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:05:13,819 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:13,829 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 58 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:05:13,829 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [800157923] [2019-12-07 13:05:13,829 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/z3 Starting monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 13:05:13,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:13,906 INFO L264 TraceCheckSpWp]: Trace formula consists of 287 conjuncts, 9 conjunts are in the unsatisfiable core [2019-12-07 13:05:13,907 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:13,943 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 89 proven. 2 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 13:05:13,944 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:13,984 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 91 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 13:05:13,984 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 5 imperfect interpolant sequences. [2019-12-07 13:05:13,984 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [5, 5, 5, 5, 8] total 18 [2019-12-07 13:05:13,985 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1937934389] [2019-12-07 13:05:13,985 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 13:05:13,985 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:13,985 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 13:05:13,985 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=256, Unknown=0, NotChecked=0, Total=306 [2019-12-07 13:05:13,985 INFO L87 Difference]: Start difference. First operand 230 states and 293 transitions. Second operand 8 states. [2019-12-07 13:05:14,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:14,335 INFO L93 Difference]: Finished difference Result 937 states and 1202 transitions. [2019-12-07 13:05:14,336 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2019-12-07 13:05:14,336 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 99 [2019-12-07 13:05:14,336 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:14,339 INFO L225 Difference]: With dead ends: 937 [2019-12-07 13:05:14,339 INFO L226 Difference]: Without dead ends: 714 [2019-12-07 13:05:14,340 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 609 GetRequests, 581 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 92 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=161, Invalid=709, Unknown=0, NotChecked=0, Total=870 [2019-12-07 13:05:14,341 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 714 states. [2019-12-07 13:05:14,363 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 714 to 363. [2019-12-07 13:05:14,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 363 states. [2019-12-07 13:05:14,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 363 states to 363 states and 463 transitions. [2019-12-07 13:05:14,365 INFO L78 Accepts]: Start accepts. Automaton has 363 states and 463 transitions. Word has length 99 [2019-12-07 13:05:14,365 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:14,365 INFO L462 AbstractCegarLoop]: Abstraction has 363 states and 463 transitions. [2019-12-07 13:05:14,365 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 13:05:14,365 INFO L276 IsEmpty]: Start isEmpty. Operand 363 states and 463 transitions. [2019-12-07 13:05:14,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2019-12-07 13:05:14,366 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:14,366 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:14,967 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 z3 -smt2 -in SMTLIB2_COMPLIANT=true,14 mathsat -unsat_core_generation=3,15 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:05:14,967 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:14,968 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:14,968 INFO L82 PathProgramCache]: Analyzing trace with hash -1498875534, now seen corresponding path program 1 times [2019-12-07 13:05:14,969 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:14,969 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [572938733] [2019-12-07 13:05:14,969 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 17 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:15,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:15,097 INFO L264 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:05:15,098 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:15,115 INFO L134 CoverageAnalysis]: Checked inductivity of 109 backedges. 90 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 13:05:15,115 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:15,137 INFO L134 CoverageAnalysis]: Checked inductivity of 109 backedges. 90 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 13:05:15,138 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [572938733] [2019-12-07 13:05:15,138 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:05:15,138 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2019-12-07 13:05:15,138 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [568742267] [2019-12-07 13:05:15,138 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 13:05:15,138 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:15,139 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 13:05:15,139 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2019-12-07 13:05:15,139 INFO L87 Difference]: Start difference. First operand 363 states and 463 transitions. Second operand 8 states. [2019-12-07 13:05:15,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:15,390 INFO L93 Difference]: Finished difference Result 838 states and 1077 transitions. [2019-12-07 13:05:15,391 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 13:05:15,391 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 101 [2019-12-07 13:05:15,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:15,394 INFO L225 Difference]: With dead ends: 838 [2019-12-07 13:05:15,394 INFO L226 Difference]: Without dead ends: 482 [2019-12-07 13:05:15,395 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 196 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2019-12-07 13:05:15,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 482 states. [2019-12-07 13:05:15,421 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 482 to 363. [2019-12-07 13:05:15,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 363 states. [2019-12-07 13:05:15,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 363 states to 363 states and 457 transitions. [2019-12-07 13:05:15,422 INFO L78 Accepts]: Start accepts. Automaton has 363 states and 457 transitions. Word has length 101 [2019-12-07 13:05:15,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:15,423 INFO L462 AbstractCegarLoop]: Abstraction has 363 states and 457 transitions. [2019-12-07 13:05:15,423 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 13:05:15,423 INFO L276 IsEmpty]: Start isEmpty. Operand 363 states and 457 transitions. [2019-12-07 13:05:15,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2019-12-07 13:05:15,423 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:15,423 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:15,624 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 mathsat -unsat_core_generation=3 [2019-12-07 13:05:15,624 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:15,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:15,625 INFO L82 PathProgramCache]: Analyzing trace with hash 603001017, now seen corresponding path program 1 times [2019-12-07 13:05:15,626 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:15,626 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [131689363] [2019-12-07 13:05:15,626 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 18 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:15,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:15,794 INFO L264 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:05:15,796 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:15,825 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:05:15,825 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:15,843 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:05:15,843 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [131689363] [2019-12-07 13:05:15,843 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1199584315] [2019-12-07 13:05:15,843 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/cvc4 Starting monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:05:15,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:15,952 INFO L264 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:05:15,954 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:15,970 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:05:15,970 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:15,987 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:05:15,987 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [922636695] [2019-12-07 13:05:15,987 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/z3 Starting monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 13:05:16,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:16,080 INFO L264 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:05:16,081 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:16,090 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:05:16,090 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:16,100 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:05:16,100 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 13:05:16,100 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 5 [2019-12-07 13:05:16,100 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1187808850] [2019-12-07 13:05:16,101 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 13:05:16,101 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:16,101 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 13:05:16,101 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 13:05:16,101 INFO L87 Difference]: Start difference. First operand 363 states and 457 transitions. Second operand 6 states. [2019-12-07 13:05:16,211 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:16,211 INFO L93 Difference]: Finished difference Result 1268 states and 1617 transitions. [2019-12-07 13:05:16,212 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 13:05:16,212 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 102 [2019-12-07 13:05:16,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:16,215 INFO L225 Difference]: With dead ends: 1268 [2019-12-07 13:05:16,215 INFO L226 Difference]: Without dead ends: 912 [2019-12-07 13:05:16,216 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 612 GetRequests, 602 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2019-12-07 13:05:16,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 912 states. [2019-12-07 13:05:16,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 912 to 714. [2019-12-07 13:05:16,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 714 states. [2019-12-07 13:05:16,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 714 states to 714 states and 884 transitions. [2019-12-07 13:05:16,272 INFO L78 Accepts]: Start accepts. Automaton has 714 states and 884 transitions. Word has length 102 [2019-12-07 13:05:16,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:16,273 INFO L462 AbstractCegarLoop]: Abstraction has 714 states and 884 transitions. [2019-12-07 13:05:16,273 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 13:05:16,273 INFO L276 IsEmpty]: Start isEmpty. Operand 714 states and 884 transitions. [2019-12-07 13:05:16,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2019-12-07 13:05:16,274 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:16,274 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:16,875 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 mathsat -unsat_core_generation=3,20 z3 -smt2 -in SMTLIB2_COMPLIANT=true,19 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:05:16,876 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:16,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:16,876 INFO L82 PathProgramCache]: Analyzing trace with hash 151833521, now seen corresponding path program 1 times [2019-12-07 13:05:16,877 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:16,877 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [65751498] [2019-12-07 13:05:16,878 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 21 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:16,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:05:16,999 INFO L264 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:05:17,000 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:17,022 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2019-12-07 13:05:17,022 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:17,053 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2019-12-07 13:05:17,054 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [65751498] [2019-12-07 13:05:17,054 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:05:17,054 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 10 [2019-12-07 13:05:17,054 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2036574331] [2019-12-07 13:05:17,054 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-12-07 13:05:17,054 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:17,054 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-12-07 13:05:17,054 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2019-12-07 13:05:17,055 INFO L87 Difference]: Start difference. First operand 714 states and 884 transitions. Second operand 10 states. [2019-12-07 13:05:17,326 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:17,326 INFO L93 Difference]: Finished difference Result 1721 states and 2143 transitions. [2019-12-07 13:05:17,327 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2019-12-07 13:05:17,327 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 103 [2019-12-07 13:05:17,327 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:17,331 INFO L225 Difference]: With dead ends: 1721 [2019-12-07 13:05:17,331 INFO L226 Difference]: Without dead ends: 1014 [2019-12-07 13:05:17,332 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 212 GetRequests, 199 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=66, Invalid=144, Unknown=0, NotChecked=0, Total=210 [2019-12-07 13:05:17,332 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1014 states. [2019-12-07 13:05:17,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1014 to 650. [2019-12-07 13:05:17,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 650 states. [2019-12-07 13:05:17,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 650 states to 650 states and 794 transitions. [2019-12-07 13:05:17,377 INFO L78 Accepts]: Start accepts. Automaton has 650 states and 794 transitions. Word has length 103 [2019-12-07 13:05:17,377 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:17,377 INFO L462 AbstractCegarLoop]: Abstraction has 650 states and 794 transitions. [2019-12-07 13:05:17,377 INFO L463 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-12-07 13:05:17,377 INFO L276 IsEmpty]: Start isEmpty. Operand 650 states and 794 transitions. [2019-12-07 13:05:17,378 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2019-12-07 13:05:17,378 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:05:17,378 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:05:17,578 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 mathsat -unsat_core_generation=3 [2019-12-07 13:05:17,579 INFO L410 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:05:17,579 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:05:17,579 INFO L82 PathProgramCache]: Analyzing trace with hash -1991077733, now seen corresponding path program 2 times [2019-12-07 13:05:17,579 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:05:17,579 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1995174074] [2019-12-07 13:05:17,579 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/mathsat Starting monitored process 22 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with mathsat -unsat_core_generation=3 [2019-12-07 13:05:18,278 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 13:05:18,279 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 13:05:18,304 INFO L264 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:05:18,305 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:18,329 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 17 proven. 80 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 13:05:18,329 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:18,383 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 17 proven. 80 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 13:05:18,383 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1995174074] [2019-12-07 13:05:18,383 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1452886482] [2019-12-07 13:05:18,383 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/cvc4 Starting monitored process 23 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:05:19,841 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 13:05:19,841 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 13:05:19,872 INFO L264 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 13:05:19,874 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:19,923 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 13:05:19,923 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:19,963 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 13:05:19,964 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1936293889] [2019-12-07 13:05:19,964 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/z3 Starting monitored process 24 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 13:05:20,087 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 13:05:20,087 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 13:05:20,092 INFO L264 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 13:05:20,093 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:05:20,103 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 13:05:20,103 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:05:20,111 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 13:05:20,111 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 13:05:20,112 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 7, 7, 7, 7] total 14 [2019-12-07 13:05:20,112 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247156015] [2019-12-07 13:05:20,112 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2019-12-07 13:05:20,112 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:05:20,113 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2019-12-07 13:05:20,113 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=145, Unknown=0, NotChecked=0, Total=182 [2019-12-07 13:05:20,113 INFO L87 Difference]: Start difference. First operand 650 states and 794 transitions. Second operand 14 states. [2019-12-07 13:05:20,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:05:20,540 INFO L93 Difference]: Finished difference Result 1333 states and 1635 transitions. [2019-12-07 13:05:20,540 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2019-12-07 13:05:20,540 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 103 [2019-12-07 13:05:20,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:05:20,541 INFO L225 Difference]: With dead ends: 1333 [2019-12-07 13:05:20,541 INFO L226 Difference]: Without dead ends: 0 [2019-12-07 13:05:20,542 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 625 GetRequests, 602 SyntacticMatches, 2 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=122, Invalid=384, Unknown=0, NotChecked=0, Total=506 [2019-12-07 13:05:20,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-12-07 13:05:20,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-12-07 13:05:20,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-12-07 13:05:20,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 13:05:20,542 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 103 [2019-12-07 13:05:20,542 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:05:20,543 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 13:05:20,543 INFO L463 AbstractCegarLoop]: Interpolant automaton has 14 states. [2019-12-07 13:05:20,543 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-12-07 13:05:20,543 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-12-07 13:05:21,144 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 mathsat -unsat_core_generation=3,24 z3 -smt2 -in SMTLIB2_COMPLIANT=true,23 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:05:21,146 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-12-07 13:05:21,286 WARN L192 SmtUtils]: Spent 110.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 95 [2019-12-07 13:05:21,611 WARN L192 SmtUtils]: Spent 239.00 ms on a formula simplification. DAG size of input: 299 DAG size of output: 254 [2019-12-07 13:05:21,932 WARN L192 SmtUtils]: Spent 278.00 ms on a formula simplification. DAG size of input: 311 DAG size of output: 268 [2019-12-07 13:05:22,171 WARN L192 SmtUtils]: Spent 191.00 ms on a formula simplification. DAG size of input: 259 DAG size of output: 214 [2019-12-07 13:05:22,306 WARN L192 SmtUtils]: Spent 108.00 ms on a formula simplification. DAG size of input: 219 DAG size of output: 192 [2019-12-07 13:05:22,476 WARN L192 SmtUtils]: Spent 169.00 ms on a formula simplification. DAG size of input: 288 DAG size of output: 242 [2019-12-07 13:05:22,662 WARN L192 SmtUtils]: Spent 161.00 ms on a formula simplification. DAG size of input: 282 DAG size of output: 240 [2019-12-07 13:05:22,824 WARN L192 SmtUtils]: Spent 158.00 ms on a formula simplification. DAG size of input: 259 DAG size of output: 228 [2019-12-07 13:05:23,214 WARN L192 SmtUtils]: Spent 385.00 ms on a formula simplification. DAG size of input: 93 DAG size of output: 43 [2019-12-07 13:05:23,913 WARN L192 SmtUtils]: Spent 696.00 ms on a formula simplification. DAG size of input: 130 DAG size of output: 48 [2019-12-07 13:05:26,157 WARN L192 SmtUtils]: Spent 2.24 s on a formula simplification. DAG size of input: 248 DAG size of output: 84 [2019-12-07 13:05:26,763 WARN L192 SmtUtils]: Spent 604.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 56 [2019-12-07 13:05:29,789 WARN L192 SmtUtils]: Spent 2.97 s on a formula simplification. DAG size of input: 267 DAG size of output: 92 [2019-12-07 13:05:30,701 WARN L192 SmtUtils]: Spent 910.00 ms on a formula simplification. DAG size of input: 124 DAG size of output: 61 [2019-12-07 13:05:32,317 WARN L192 SmtUtils]: Spent 1.61 s on a formula simplification. DAG size of input: 208 DAG size of output: 71 [2019-12-07 13:05:32,614 WARN L192 SmtUtils]: Spent 296.00 ms on a formula simplification. DAG size of input: 81 DAG size of output: 47 [2019-12-07 13:05:34,709 WARN L192 SmtUtils]: Spent 2.09 s on a formula simplification. DAG size of input: 191 DAG size of output: 82 [2019-12-07 13:05:37,342 WARN L192 SmtUtils]: Spent 2.63 s on a formula simplification. DAG size of input: 235 DAG size of output: 62 [2019-12-07 13:05:37,576 WARN L192 SmtUtils]: Spent 230.00 ms on a formula simplification. DAG size of input: 79 DAG size of output: 44 [2019-12-07 13:05:39,730 WARN L192 SmtUtils]: Spent 2.15 s on a formula simplification. DAG size of input: 232 DAG size of output: 87 [2019-12-07 13:05:41,617 WARN L192 SmtUtils]: Spent 1.88 s on a formula simplification. DAG size of input: 227 DAG size of output: 85 [2019-12-07 13:05:41,620 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 299) no Hoare annotation was computed. [2019-12-07 13:05:41,620 INFO L246 CegarLoopResult]: For program point L498(lines 497 542) no Hoare annotation was computed. [2019-12-07 13:05:41,620 INFO L242 CegarLoopResult]: At program point L135(lines 126 139) the Hoare annotation is: false [2019-12-07 13:05:41,620 INFO L242 CegarLoopResult]: At program point L135-1(lines 126 139) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse9 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse10 (= ~waterLevel~0 (_ bv0 32))) (.cse4 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse12 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse7 (= ~waterLevel~0 (_ bv2 32))) (.cse0 (= (_ bv1 32) |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse11 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse5 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse6 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse3 .cse7 .cse4 .cse5) (and .cse8 .cse0 .cse9 .cse10 .cse1 .cse11 .cse3 .cse12 .cse5 .cse13 .cse6) (and .cse8 .cse0 .cse9 .cse10 .cse1 .cse3 .cse4 .cse12 .cse5 .cse13 .cse6) (and .cse1 .cse3 .cse11 .cse7 .cse5) (and .cse0 .cse1 .cse11 .cse3 .cse2 .cse5 .cse6))) [2019-12-07 13:05:41,620 INFO L242 CegarLoopResult]: At program point L135-2(lines 126 139) the Hoare annotation is: false [2019-12-07 13:05:41,621 INFO L242 CegarLoopResult]: At program point L135-3(lines 126 139) the Hoare annotation is: false [2019-12-07 13:05:41,621 INFO L242 CegarLoopResult]: At program point L135-4(lines 126 139) the Hoare annotation is: false [2019-12-07 13:05:41,621 INFO L242 CegarLoopResult]: At program point L135-5(lines 126 139) the Hoare annotation is: false [2019-12-07 13:05:41,621 INFO L246 CegarLoopResult]: For program point L499(lines 499 503) no Hoare annotation was computed. [2019-12-07 13:05:41,621 INFO L246 CegarLoopResult]: For program point L533(lines 533 537) no Hoare annotation was computed. [2019-12-07 13:05:41,621 INFO L246 CegarLoopResult]: For program point L533-2(lines 527 538) no Hoare annotation was computed. [2019-12-07 13:05:41,621 INFO L246 CegarLoopResult]: For program point L170(lines 170 187) no Hoare annotation was computed. [2019-12-07 13:05:41,621 INFO L242 CegarLoopResult]: At program point L170-1(lines 1 951) the Hoare annotation is: (let ((.cse19 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|)) (.cse21 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse23 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse11 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse16 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse8 (= (_ bv0 32) ~pumpRunning~0)) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (let ((.cse18 (= ~waterLevel~0 (_ bv2 32))) (.cse17 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse9 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse20 (or (and .cse8 .cse5 .cse7 .cse11) (and .cse16 .cse8 .cse5 .cse7))) (.cse12 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse22 (not .cse23)) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse2 (= (_ bv1 32) ~pumpRunning~0)) (.cse3 (= ~waterLevel~0 (_ bv0 32))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse13 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse14 (or (not .cse19) .cse21)) (.cse6 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse15 (not .cse16))) (or (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32)) .cse2 (= (_ bv1 32) ~switchedOnBeforeTS~0) .cse3 .cse4 .cse5 (= ULTIMATE.start_processEnvironment_~tmp~3 (_ bv0 32)) .cse6 .cse7 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (and .cse0 .cse1 .cse3 .cse8 .cse5 .cse6 .cse9 .cse7 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse12 .cse13 .cse14 .cse6 .cse15 .cse7) (and .cse16 .cse2 .cse17 .cse5 .cse18 .cse7 .cse19) (and .cse16 .cse8 .cse5 .cse17 .cse18 .cse7 .cse19) (and .cse0 .cse1 .cse12 .cse20 .cse17 .cse21 .cse22) (and .cse0 .cse1 .cse3 .cse8 .cse5 .cse17 .cse9 .cse7 .cse10 .cse11) (and .cse0 .cse2 .cse5 .cse23 .cse6 .cse7 .cse19) (and .cse16 .cse8 .cse5 .cse6 .cse23 .cse7 .cse19) (and .cse20 .cse12 .cse6 .cse21 .cse22) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse13 .cse14 .cse6 .cse15 .cse7)))) [2019-12-07 13:05:41,621 INFO L246 CegarLoopResult]: For program point L170-2(lines 170 187) no Hoare annotation was computed. [2019-12-07 13:05:41,621 INFO L242 CegarLoopResult]: At program point L170-3(lines 1 951) the Hoare annotation is: false [2019-12-07 13:05:41,621 INFO L246 CegarLoopResult]: For program point L170-4(lines 170 187) no Hoare annotation was computed. [2019-12-07 13:05:41,621 INFO L242 CegarLoopResult]: At program point L170-5(lines 1 951) the Hoare annotation is: false [2019-12-07 13:05:41,621 INFO L242 CegarLoopResult]: At program point L204-2(lines 204 218) the Hoare annotation is: false [2019-12-07 13:05:41,621 INFO L246 CegarLoopResult]: For program point L205(line 205) no Hoare annotation was computed. [2019-12-07 13:05:41,621 INFO L246 CegarLoopResult]: For program point L174(lines 174 184) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point L174-2(lines 174 184) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point L174-4(lines 174 184) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 299) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point L208(lines 208 212) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point L175(lines 175 181) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point L208-1(lines 208 212) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point L175-2(lines 175 181) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point L175-4(lines 175 181) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point L374(lines 374 391) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point L374-1(lines 374 391) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point L374-2(lines 374 391) no Hoare annotation was computed. [2019-12-07 13:05:41,622 INFO L246 CegarLoopResult]: For program point L77(lines 77 81) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L507(lines 507 513) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L242 CegarLoopResult]: At program point L507-1(lines 507 513) the Hoare annotation is: (let ((.cse13 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse8 (= (_ bv0 32) ~pumpRunning~0)) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse22 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse18 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (let ((.cse4 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse3 (= ~waterLevel~0 (_ bv0 32))) (.cse14 (not .cse18)) (.cse11 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse15 (not .cse22)) (.cse16 (= ~waterLevel~0 (_ bv1 32))) (.cse12 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse2 (= (_ bv1 32) ~pumpRunning~0)) (.cse9 (= ~waterLevel~0 (_ bv2 32))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse10 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse20 (or (and .cse8 .cse5 .cse7 .cse13) (and .cse22 .cse8 .cse5 .cse7))) (.cse19 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse6 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse17 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse21 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))))) (or (and .cse0 .cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32)) .cse2 (= (_ bv1 32) ~switchedOnBeforeTS~0) .cse3 .cse4 .cse5 (= ULTIMATE.start_processEnvironment_~tmp~3 (_ bv0 32)) .cse6 .cse7 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (and .cse8 .cse5 .cse9 .cse6 .cse7) (and .cse8 .cse10 .cse5 .cse9 .cse7) (and .cse0 .cse1 .cse3 .cse8 .cse5 .cse6 .cse11 .cse7 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32))) .cse6 .cse7) (and .cse2 .cse5 .cse14 .cse15 .cse16 .cse6 .cse17 .cse7) (and .cse0 .cse2 .cse10 .cse5 .cse9 .cse7 .cse18) (and .cse0 .cse1 .cse3 .cse8 .cse10 .cse5 .cse11 .cse7 .cse12) (and .cse8 .cse10 .cse5 .cse14 .cse11 .cse15 .cse16 .cse7 .cse12) (and .cse2 .cse5 .cse9 .cse6 .cse17 .cse7) (and .cse0 .cse1 .cse19 .cse20 .cse10 .cse17 .cse21) (and .cse20 .cse19 .cse6 .cse17 .cse21)))) [2019-12-07 13:05:41,623 INFO L242 CegarLoopResult]: At program point L574(lines 1 951) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L476(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L476-2(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L476-3(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L476-5(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L476-6(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L476-8(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L476-9(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L476-11(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L476-12(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L476-14(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,623 INFO L246 CegarLoopResult]: For program point L476-15(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L246 CegarLoopResult]: For program point L476-17(lines 476 480) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L242 CegarLoopResult]: At program point L543(lines 496 544) the Hoare annotation is: false [2019-12-07 13:05:41,624 INFO L246 CegarLoopResult]: For program point L378(lines 378 386) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L246 CegarLoopResult]: For program point L378-1(lines 378 386) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L246 CegarLoopResult]: For program point L378-2(lines 378 386) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L246 CegarLoopResult]: For program point L281(lines 281 288) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L249 CegarLoopResult]: At program point L281-1(lines 281 288) the Hoare annotation is: true [2019-12-07 13:05:41,624 INFO L242 CegarLoopResult]: At program point L149(lines 144 151) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 13:05:41,624 INFO L246 CegarLoopResult]: For program point L348(lines 348 365) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L246 CegarLoopResult]: For program point L348-1(lines 348 365) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L246 CegarLoopResult]: For program point L348-2(lines 348 365) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L246 CegarLoopResult]: For program point L348-3(lines 348 365) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L246 CegarLoopResult]: For program point L348-4(lines 348 365) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L246 CegarLoopResult]: For program point L348-5(lines 348 365) no Hoare annotation was computed. [2019-12-07 13:05:41,624 INFO L242 CegarLoopResult]: At program point L316(lines 312 334) the Hoare annotation is: (let ((.cse13 (= ~waterLevel~0 (_ bv2 32))) (.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse14 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse15 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse9 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse16 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse17 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse5 (= (_ bv1 32) ~pumpRunning~0)) (.cse6 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse7 (= ~waterLevel~0 (_ bv0 32))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse1 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse10 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse3 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse11 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (.cse12 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse8 .cse1 .cse9 .cse10 .cse11 .cse12 .cse4) (and .cse5 .cse6 .cse2 .cse8 .cse1 .cse3 .cse12 .cse4) (and .cse0 .cse1 .cse13 .cse3 .cse4) (and .cse0 .cse9 .cse1 .cse13 .cse4) (and .cse0 .cse9 .cse1 .cse2 .cse4) (and .cse5 .cse6 .cse2 .cse8 .cse1 .cse9 .cse12 .cse4) (and .cse14 .cse15 .cse7 .cse0 .cse1 .cse3 .cse16 .cse4 .cse17) (and .cse14 .cse15 .cse7 .cse0 .cse9 .cse1 .cse16 .cse4 .cse17) (and .cse5 .cse6 .cse7 .cse8 .cse1 .cse10 .cse3 .cse11 .cse12 .cse4))) [2019-12-07 13:05:41,625 INFO L242 CegarLoopResult]: At program point L316-1(lines 312 334) the Hoare annotation is: false [2019-12-07 13:05:41,625 INFO L242 CegarLoopResult]: At program point L316-2(lines 312 334) the Hoare annotation is: false [2019-12-07 13:05:41,625 INFO L242 CegarLoopResult]: At program point L482(lines 467 485) the Hoare annotation is: false [2019-12-07 13:05:41,625 INFO L242 CegarLoopResult]: At program point L482-1(lines 467 485) the Hoare annotation is: (let ((.cse5 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse1 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse10 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse11 (= ~waterLevel~0 (_ bv0 32))) (.cse4 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 (_ bv0 32))) (.cse12 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse6 (not (= ULTIMATE.start_isHighWaterLevel_~tmp~4 (_ bv0 32)))) (.cse8 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse13 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse3 (= |ULTIMATE.start_isHighWaterLevel_#res| (_ bv0 32))) (.cse14 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse2 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse15 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse9 (= ~waterLevel~0 (_ bv2 32))) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse2 .cse9 .cse5 .cse7) (and .cse10 .cse11 .cse0 .cse2 .cse4 .cse5 .cse12 .cse6 .cse8 .cse13 .cse3 .cse7 .cse14) (and .cse0 .cse15 .cse1 .cse2 .cse3 .cse4 .cse6 .cse7 .cse8) (and .cse10 .cse11 .cse0 .cse2 .cse4 .cse12 .cse6 .cse8 .cse13 .cse15 .cse3 .cse7 .cse14) (and .cse0 .cse2 .cse15 .cse9 .cse7))) [2019-12-07 13:05:41,625 INFO L242 CegarLoopResult]: At program point L482-2(lines 467 485) the Hoare annotation is: false [2019-12-07 13:05:41,625 INFO L242 CegarLoopResult]: At program point L482-3(lines 467 485) the Hoare annotation is: false [2019-12-07 13:05:41,625 INFO L242 CegarLoopResult]: At program point L482-4(lines 467 485) the Hoare annotation is: false [2019-12-07 13:05:41,625 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-12-07 13:05:41,625 INFO L242 CegarLoopResult]: At program point L482-5(lines 467 485) the Hoare annotation is: false [2019-12-07 13:05:41,625 INFO L246 CegarLoopResult]: For program point L53(lines 53 57) no Hoare annotation was computed. [2019-12-07 13:05:41,625 INFO L246 CegarLoopResult]: For program point L53-3(lines 53 57) no Hoare annotation was computed. [2019-12-07 13:05:41,625 INFO L246 CegarLoopResult]: For program point L53-6(lines 53 57) no Hoare annotation was computed. [2019-12-07 13:05:41,625 INFO L242 CegarLoopResult]: At program point L582(lines 577 585) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 13:05:41,625 INFO L246 CegarLoopResult]: For program point L517(lines 517 523) no Hoare annotation was computed. [2019-12-07 13:05:41,626 INFO L242 CegarLoopResult]: At program point L517-1(lines 517 523) the Hoare annotation is: (let ((.cse23 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse3 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse19 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse25 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse5 (= (_ bv0 32) ~pumpRunning~0)) (.cse6 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (let ((.cse13 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse14 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse0 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse1 (or (and .cse5 .cse6 .cse8 .cse19) (and .cse25 .cse5 .cse6 .cse8))) (.cse4 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse16 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse18 (= ULTIMATE.start_processEnvironment_~tmp~3 (_ bv0 32))) (.cse24 (= ~waterLevel~0 (_ bv1 32))) (.cse9 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse10 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse11 (= ~waterLevel~0 (_ bv0 32))) (.cse17 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse2 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse20 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse21 (or .cse23 .cse3)) (.cse22 (not .cse25)) (.cse15 (= (_ bv1 32) ~pumpRunning~0)) (.cse7 (= ~waterLevel~0 (_ bv2 32))) (.cse12 (= ~methaneLevelCritical~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse2 .cse6 .cse7 .cse8) (and .cse9 .cse10 .cse11 .cse5 .cse6 .cse12 .cse13 .cse8 .cse14) (and .cse9 .cse10 .cse11 .cse5 .cse2 .cse6 .cse13 .cse8 .cse14) (and .cse9 .cse10 .cse15 .cse16 .cse11 .cse17 .cse6 .cse18 .cse12 .cse8 .cse19) (and .cse9 .cse10 .cse15 .cse11 .cse17 .cse6 .cse20 .cse21 .cse12 .cse22 .cse8) (and .cse0 .cse1 .cse12 .cse3 .cse4) (and .cse15 .cse6 .cse2 .cse7 .cse8) (and .cse9 .cse10 .cse15 .cse16 .cse11 .cse2 .cse17 .cse6 .cse18 .cse8 .cse19) (and .cse15 .cse2 .cse6 .cse23 .cse22 .cse24 .cse3 .cse8) (and .cse5 .cse6 .cse7 .cse12 .cse8) (and .cse15 .cse6 .cse23 .cse22 .cse24 .cse12 .cse3 .cse8) (and .cse9 .cse10 .cse15 .cse11 .cse17 .cse6 .cse2 .cse20 .cse21 .cse22 .cse8) (and .cse15 .cse6 .cse7 .cse12 .cse8)))) [2019-12-07 13:05:41,626 INFO L242 CegarLoopResult]: At program point L418(lines 411 421) the Hoare annotation is: (let ((.cse5 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse10 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse11 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse12 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse1 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse13 (= ~waterLevel~0 (_ bv0 32))) (.cse2 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse3 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse14 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse15 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (.cse6 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse9 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse0 .cse1 .cse2 .cse3 .cse5 .cse11 .cse7 .cse8 .cse12) (and .cse10 .cse0 .cse1 .cse13 .cse2 .cse3 .cse14 .cse15 .cse11 .cse7 .cse8 .cse12) (and .cse0 .cse1 .cse13 .cse2 .cse3 .cse4 .cse14 .cse15 .cse6 .cse7 .cse8 .cse9))) [2019-12-07 13:05:41,626 INFO L242 CegarLoopResult]: At program point L418-1(lines 411 421) the Hoare annotation is: false [2019-12-07 13:05:41,626 INFO L246 CegarLoopResult]: For program point L352(lines 352 360) no Hoare annotation was computed. [2019-12-07 13:05:41,626 INFO L242 CegarLoopResult]: At program point L418-2(lines 411 421) the Hoare annotation is: false [2019-12-07 13:05:41,626 INFO L246 CegarLoopResult]: For program point L352-1(lines 352 360) no Hoare annotation was computed. [2019-12-07 13:05:41,626 INFO L246 CegarLoopResult]: For program point L352-2(lines 352 360) no Hoare annotation was computed. [2019-12-07 13:05:41,626 INFO L242 CegarLoopResult]: At program point L253(lines 249 255) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 13:05:41,626 INFO L246 CegarLoopResult]: For program point L352-3(lines 352 360) no Hoare annotation was computed. [2019-12-07 13:05:41,626 INFO L246 CegarLoopResult]: For program point L352-4(lines 352 360) no Hoare annotation was computed. [2019-12-07 13:05:41,626 INFO L246 CegarLoopResult]: For program point L352-5(lines 352 360) no Hoare annotation was computed. [2019-12-07 13:05:41,626 INFO L242 CegarLoopResult]: At program point L122(lines 117 125) the Hoare annotation is: (let ((.cse10 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (let ((.cse4 (not .cse10)) (.cse7 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse12 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse8 (= (_ bv1 32) ~pumpRunning~0)) (.cse13 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse3 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse15 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse16 (= ULTIMATE.start_processEnvironment_~tmp~3 (_ bv0 32))) (.cse5 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse17 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse14 (= ~waterLevel~0 (_ bv0 32))) (.cse18 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse19 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse2 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse11 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse9 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse6 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse2 .cse5 .cse9 .cse6 .cse10) (and .cse8 .cse11 .cse2 .cse9 .cse6 .cse10) (and .cse0 .cse12 .cse8 .cse13 .cse14 .cse15 .cse2 .cse16 .cse5 .cse6 .cse17) (and .cse0 .cse1 .cse3 .cse2 .cse11 .cse4 .cse6 .cse7) (and .cse1 .cse2 .cse9 .cse5 .cse6 .cse10) (and .cse0 .cse14 .cse1 .cse2 .cse4 .cse5 .cse18 .cse6 .cse19 .cse7) (and .cse0 .cse12 .cse8 .cse13 .cse3 .cse2 .cse15 .cse16 .cse5 .cse6 .cse17) (and .cse0 .cse14 .cse1 .cse11 .cse2 .cse18 .cse6 .cse19) (and .cse1 .cse2 .cse11 .cse9 .cse6 .cse10)))) [2019-12-07 13:05:41,627 INFO L242 CegarLoopResult]: At program point L122-1(lines 117 125) the Hoare annotation is: false [2019-12-07 13:05:41,627 INFO L242 CegarLoopResult]: At program point L122-2(lines 117 125) the Hoare annotation is: false [2019-12-07 13:05:41,627 INFO L242 CegarLoopResult]: At program point L90(lines 85 93) the Hoare annotation is: (let ((.cse3 (= ~waterLevel~0 (_ bv0 32))) (.cse6 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse7 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (.cse11 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse12 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse0 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse2 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse4 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse13 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse8 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse9 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse11 .cse6 .cse7 .cse12 .cse9 .cse10) (and .cse1 .cse2 .cse4 .cse5 .cse11 .cse13 .cse12 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse13 .cse8 .cse9 .cse10))) [2019-12-07 13:05:41,627 INFO L242 CegarLoopResult]: At program point L90-1(lines 85 93) the Hoare annotation is: false [2019-12-07 13:05:41,627 INFO L242 CegarLoopResult]: At program point L90-2(lines 85 93) the Hoare annotation is: false [2019-12-07 13:05:41,627 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-12-07 13:05:41,627 INFO L242 CegarLoopResult]: At program point L323(lines 323 329) the Hoare annotation is: (let ((.cse20 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse21 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse8 (= (_ bv0 32) ~pumpRunning~0)) (.cse1 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (let ((.cse6 (or (and .cse8 .cse1 .cse4 .cse20) (and .cse21 .cse8 .cse1 .cse4))) (.cse15 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse10 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse5 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse16 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse12 (= ULTIMATE.start_processEnvironment_~tmp~3 (_ bv0 32))) (.cse7 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse14 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse11 (= ~waterLevel~0 (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse17 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse18 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (not .cse21)) (.cse19 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse3 (= ~waterLevel~0 (_ bv2 32))) (.cse9 (= ~methaneLevelCritical~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse2 .cse6 .cse7) (and .cse8 .cse1 .cse3 .cse9 .cse4) (and .cse8 .cse2 .cse1 .cse3 .cse4) (and .cse0 .cse10 .cse11 .cse1 .cse12 .cse13 .cse9 .cse7 .cse14 .cse15 .cse16 .cse17 .cse4) (and (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0) (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|) .cse11 .cse8 .cse1 .cse9 .cse18 .cse4 .cse19 .cse20) (and .cse6 .cse5 .cse9 .cse7) (and .cse15 .cse0 .cse10 .cse5 .cse1 .cse16 .cse12 .cse9 .cse7 .cse4 .cse14) (and .cse11 .cse8 .cse2 .cse1 .cse17 .cse18 .cse13 .cse4 .cse19) (and .cse0 .cse1 .cse3 .cse9 .cse4)))) [2019-12-07 13:05:41,627 INFO L242 CegarLoopResult]: At program point L323-1(lines 323 329) the Hoare annotation is: false [2019-12-07 13:05:41,627 INFO L249 CegarLoopResult]: At program point L290(lines 271 293) the Hoare annotation is: true [2019-12-07 13:05:41,627 INFO L242 CegarLoopResult]: At program point L323-2(lines 323 329) the Hoare annotation is: false [2019-12-07 13:05:41,627 INFO L242 CegarLoopResult]: At program point L159(lines 316 322) the Hoare annotation is: (let ((.cse20 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse1 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse25 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (let ((.cse15 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse16 (not .cse25)) (.cse17 (= ~waterLevel~0 (_ bv1 32))) (.cse19 (= ULTIMATE.start_processEnvironment_~tmp~3 (_ bv0 32))) (.cse10 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse6 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse7 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse8 (= ~waterLevel~0 (_ bv0 32))) (.cse24 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse21 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse3 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse22 (or (and .cse0 .cse1 .cse4 .cse5 .cse20) (and .cse25 .cse0 .cse1 .cse4 .cse5))) (.cse23 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse12 (= (_ bv1 32) ~pumpRunning~0)) (.cse13 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse9 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse14 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse2 (= ~waterLevel~0 (_ bv2 32))) (.cse18 (not (= ~waterLevel~0 (_ bv3 32))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse0 .cse9 .cse1 .cse10 .cse4 .cse5 .cse11) (and .cse0 .cse9 .cse1 .cse2 .cse4 .cse5) (and .cse12 .cse13 .cse14 .cse1 .cse15 .cse16 .cse17 .cse3 .cse18 .cse5) (and .cse6 .cse7 .cse12 .cse13 .cse8 .cse14 .cse1 .cse19 .cse3 .cse5 .cse20) (and .cse12 .cse13 .cse9 .cse14 .cse1 .cse15 .cse16 .cse17 .cse18 .cse5) (and .cse6 .cse7 .cse12 .cse13 .cse8 .cse9 .cse14 .cse1 .cse19 .cse5 .cse20) (and .cse9 .cse21 .cse22 .cse18 .cse23) (and .cse6 .cse7 .cse8 .cse0 .cse1 .cse3 .cse10 .cse4 .cse5 .cse11) (and .cse6 .cse7 .cse12 .cse13 .cse8 .cse14 .cse1 .cse24 .cse3 .cse5) (and .cse12 .cse13 .cse14 .cse1 .cse2 .cse3 .cse18 .cse5) (and .cse6 .cse7 .cse12 .cse13 .cse8 .cse14 .cse9 .cse1 .cse24 .cse5) (and .cse21 .cse3 .cse22 .cse18 .cse23) (and .cse12 .cse13 .cse9 .cse14 .cse1 .cse2 .cse18 .cse5)))) [2019-12-07 13:05:41,628 INFO L242 CegarLoopResult]: At program point L159-1(lines 316 322) the Hoare annotation is: false [2019-12-07 13:05:41,628 INFO L242 CegarLoopResult]: At program point L159-2(lines 316 322) the Hoare annotation is: false [2019-12-07 13:05:41,628 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-12-07 13:05:41,628 INFO L242 CegarLoopResult]: At program point L427(lines 422 430) the Hoare annotation is: (let ((.cse22 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse5 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse15 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse3 (= ~waterLevel~0 (_ bv2 32))) (.cse16 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse17 (= ULTIMATE.start_processEnvironment_~tmp~3 (_ bv0 32))) (.cse18 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse7 (= (_ bv0 32) ~pumpRunning~0)) (.cse13 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse14 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse10 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse11 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse12 (= ~waterLevel~0 (_ bv0 32))) (.cse19 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse20 (or .cse22 .cse5)) (.cse4 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse8 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse2 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse21 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (.cse23 (= ~waterLevel~0 (_ bv1 32))) (.cse6 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse9 .cse6) (and .cse10 .cse11 .cse12 .cse7 .cse8 .cse2 .cse13 .cse9 .cse6 .cse14) (and .cse7 .cse2 .cse15 .cse8 .cse9 .cse6) (and .cse0 .cse8 .cse2 .cse1 .cse3 .cse6) (and .cse7 .cse2 .cse15 .cse9 .cse4 .cse6) (and .cse7 .cse2 .cse3 .cse9 .cse4 .cse6) (and .cse10 .cse11 .cse0 .cse16 .cse12 .cse1 .cse2 .cse17 .cse4 .cse6 .cse18) (and .cse10 .cse11 .cse0 .cse12 .cse1 .cse2 .cse19 .cse20 .cse4 .cse21 .cse6) (and .cse10 .cse11 .cse0 .cse16 .cse12 .cse8 .cse1 .cse2 .cse17 .cse6 .cse18) (and .cse10 .cse11 .cse12 .cse7 .cse2 .cse4 .cse13 .cse9 .cse6 .cse14) (and .cse10 .cse11 .cse0 .cse12 .cse8 .cse1 .cse2 .cse19 .cse20 .cse21 .cse6) (and .cse0 .cse1 .cse2 .cse22 .cse4 .cse21 .cse23 .cse5 .cse6) (and .cse0 .cse8 .cse1 .cse2 .cse22 .cse21 .cse23 .cse5 .cse6)))) [2019-12-07 13:05:41,628 INFO L242 CegarLoopResult]: At program point L427-1(lines 422 430) the Hoare annotation is: (let ((.cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse3 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse4 (= (_ bv1 32) ~pumpRunning~0)) (.cse7 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse8 (= ULTIMATE.start_processEnvironment_~tmp~3 (_ bv0 32))) (.cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse14 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse12 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse15 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse16 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse5 (= ~waterLevel~0 (_ bv0 32))) (.cse13 (= (_ bv0 32) ~pumpRunning~0)) (.cse6 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse17 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse9 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse19 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse20 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse18 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse12 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse13 .cse12 .cse6 .cse14 .cse15 .cse16 .cse17 .cse10 .cse18) (and .cse0 .cse1 .cse5 .cse13 .cse6 .cse14 .cse17 .cse19 .cse10 .cse20) (and .cse0 .cse1 .cse13 .cse12 .cse6 .cse15 .cse16 .cse17 .cse9 .cse10 .cse18) (and .cse0 .cse1 .cse5 .cse13 .cse6 .cse17 .cse9 .cse19 .cse10 .cse20 .cse18))) [2019-12-07 13:05:41,628 INFO L242 CegarLoopResult]: At program point L427-2(lines 422 430) the Hoare annotation is: false [2019-12-07 13:05:41,628 INFO L242 CegarLoopResult]: At program point L427-3(lines 422 430) the Hoare annotation is: false [2019-12-07 13:05:41,628 INFO L242 CegarLoopResult]: At program point L427-4(lines 422 430) the Hoare annotation is: false [2019-12-07 13:05:41,628 INFO L242 CegarLoopResult]: At program point L427-5(lines 422 430) the Hoare annotation is: false [2019-12-07 13:05:41,628 INFO L246 CegarLoopResult]: For program point L130(lines 130 136) no Hoare annotation was computed. [2019-12-07 13:05:41,628 INFO L246 CegarLoopResult]: For program point L130-1(lines 130 136) no Hoare annotation was computed. [2019-12-07 13:05:41,628 INFO L246 CegarLoopResult]: For program point L130-2(lines 130 136) no Hoare annotation was computed. [2019-12-07 13:05:41,628 INFO L246 CegarLoopResult]: For program point L130-3(lines 130 136) no Hoare annotation was computed. [2019-12-07 13:05:41,629 INFO L246 CegarLoopResult]: For program point L130-4(lines 130 136) no Hoare annotation was computed. [2019-12-07 13:05:41,629 INFO L246 CegarLoopResult]: For program point L130-5(lines 130 136) no Hoare annotation was computed. [2019-12-07 13:05:41,629 INFO L246 CegarLoopResult]: For program point L527(lines 527 538) no Hoare annotation was computed. [2019-12-07 13:05:41,629 INFO L246 CegarLoopResult]: For program point L65(lines 65 69) no Hoare annotation was computed. [2019-12-07 13:05:41,629 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-12-07 13:05:41,629 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 299) no Hoare annotation was computed. [2019-12-07 13:05:41,629 INFO L246 CegarLoopResult]: For program point L299(line 299) no Hoare annotation was computed. [2019-12-07 13:05:41,629 INFO L246 CegarLoopResult]: For program point L299-1(line 299) no Hoare annotation was computed. [2019-12-07 13:05:41,629 INFO L246 CegarLoopResult]: For program point L299-2(line 299) no Hoare annotation was computed. [2019-12-07 13:05:41,688 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 01:05:41 BoogieIcfgContainer [2019-12-07 13:05:41,688 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-12-07 13:05:41,688 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 13:05:41,688 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 13:05:41,688 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 13:05:41,689 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:05:08" (3/4) ... [2019-12-07 13:05:41,691 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-12-07 13:05:41,702 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2019-12-07 13:05:41,703 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2019-12-07 13:05:41,704 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2019-12-07 13:05:41,704 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2019-12-07 13:05:41,705 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-12-07 13:05:41,706 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 13:05:41,706 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 13:05:41,725 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((waterLevel == tmp && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && splverifierCounter == 0bv32)) || ((((((2bv32 == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && splverifierCounter == 0bv32) [2019-12-07 13:05:41,725 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((waterLevel == tmp && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(2bv32 == tmp)) && waterLevel == 1bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) [2019-12-07 13:05:41,726 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && splverifierCounter == 0bv32)) || ((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && !(2bv32 == tmp)) && splverifierCounter == 0bv32)) || ((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) [2019-12-07 13:05:41,726 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && !(2bv32 == tmp)) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) [2019-12-07 13:05:41,726 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32))) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && methaneLevelCritical == 0bv32) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32))) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) [2019-12-07 13:05:41,726 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) [2019-12-07 13:05:41,726 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) || (((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32) && \result == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((waterLevel == 0bv32 && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(2bv32 == tmp)) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) [2019-12-07 13:05:41,727 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result) [2019-12-07 13:05:41,727 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) [2019-12-07 13:05:41,728 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 1bv32) || (((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 1bv32) [2019-12-07 13:05:41,728 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && 1bv32 == \result) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && 1bv32 == \result) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 13:05:41,728 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((waterLevel == tmp && waterLevel == \result) && \result == 0bv32) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || (((((((((((waterLevel == tmp && waterLevel == \result) && \result == 0bv32) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 13:05:41,729 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && !(tmp == 0bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((((waterLevel == tmp && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) && waterLevel == \result) && \result == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && !(tmp == 0bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((((waterLevel == tmp && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) && waterLevel == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && \result == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) [2019-12-07 13:05:41,774 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/run_dir_b02a0dfc-f2e6-431f-881f-c9a538a37aa7/bin/utaipan/witness.graphml [2019-12-07 13:05:41,774 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 13:05:41,775 INFO L168 Benchmark]: Toolchain (without parser) took 34729.14 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 481.8 MB). Free memory was 953.7 MB in the beginning and 1.3 GB in the end (delta: -362.2 MB). Peak memory consumption was 119.6 MB. Max. memory is 11.5 GB. [2019-12-07 13:05:41,775 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 13:05:41,775 INFO L168 Benchmark]: CACSL2BoogieTranslator took 363.38 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 133.2 MB). Free memory was 948.4 MB in the beginning and 1.1 GB in the end (delta: -160.4 MB). Peak memory consumption was 22.2 MB. Max. memory is 11.5 GB. [2019-12-07 13:05:41,776 INFO L168 Benchmark]: Boogie Procedure Inliner took 46.06 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2019-12-07 13:05:41,776 INFO L168 Benchmark]: Boogie Preprocessor took 32.62 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 13:05:41,776 INFO L168 Benchmark]: RCFGBuilder took 624.72 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 81.0 MB). Peak memory consumption was 81.0 MB. Max. memory is 11.5 GB. [2019-12-07 13:05:41,776 INFO L168 Benchmark]: TraceAbstraction took 33572.72 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 348.7 MB). Free memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: -308.6 MB). Peak memory consumption was 543.9 MB. Max. memory is 11.5 GB. [2019-12-07 13:05:41,776 INFO L168 Benchmark]: Witness Printer took 86.15 ms. Allocated memory is still 1.5 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 13.5 MB). Peak memory consumption was 13.5 MB. Max. memory is 11.5 GB. [2019-12-07 13:05:41,778 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 363.38 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 133.2 MB). Free memory was 948.4 MB in the beginning and 1.1 GB in the end (delta: -160.4 MB). Peak memory consumption was 22.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 46.06 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 32.62 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 624.72 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 81.0 MB). Peak memory consumption was 81.0 MB. Max. memory is 11.5 GB. * TraceAbstraction took 33572.72 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 348.7 MB). Free memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: -308.6 MB). Peak memory consumption was 543.9 MB. Max. memory is 11.5 GB. * Witness Printer took 86.15 ms. Allocated memory is still 1.5 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 13.5 MB). Peak memory consumption was 13.5 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 299]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 299]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 299]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && 1bv32 == \result) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && 1bv32 == \result) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && !(tmp == 0bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((((waterLevel == tmp && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) && waterLevel == \result) && \result == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && !(tmp == 0bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((((waterLevel == tmp && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) && waterLevel == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && \result == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: ((((((((((((((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && !(2bv32 == tmp)) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: (((((((((((((((waterLevel == tmp && waterLevel == \result) && \result == 0bv32) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || (((((((((((waterLevel == tmp && waterLevel == \result) && \result == 0bv32) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 204]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 144]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 249]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 577]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 517]: Loop Invariant Derived loop invariant: ((((((((((((((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && splverifierCounter == 0bv32)) || ((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && !(2bv32 == tmp)) && splverifierCounter == 0bv32)) || ((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: (((((((((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: ((((((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) || (((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32) && \result == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((waterLevel == 0bv32 && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(2bv32 == tmp)) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: (((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 1bv32) || (((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 1bv32) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((((((waterLevel == tmp && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && splverifierCounter == 0bv32)) || ((((((2bv32 == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && splverifierCounter == 0bv32) - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 312]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: ((((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32))) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && methaneLevelCritical == 0bv32) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32))) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: (((((((((((((((((((((waterLevel == tmp && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(2bv32 == tmp)) && waterLevel == 1bv32) && splverifierCounter == 0bv32) && \result == 1bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 120 locations, 3 error locations. Result: SAFE, OverallTime: 12.9s, OverallIterations: 15, TraceHistogramMax: 4, AutomataDifference: 2.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 20.4s, HoareTripleCheckerStatistics: 1630 SDtfs, 3316 SDslu, 4009 SDs, 0 SdLazy, 615 SolverSat, 146 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.2s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 3129 GetRequests, 3003 SyntacticMatches, 2 SemanticMatches, 124 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 208 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=714occurred in iteration=13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 15 MinimizatonAttempts, 1722 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 49 PreInvPairs, 412 NumberOfFragments, 4209 HoareAnnotationTreeSize, 49 FomulaSimplifications, 5455519 FormulaSimplificationTreeSizeReduction, 1.6s HoareSimplificationTime, 49 FomulaSimplificationsInter, 1517246 FormulaSimplificationTreeSizeReductionInter, 18.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 3.5s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 1548 NumberOfCodeBlocks, 1548 NumberOfCodeBlocksAsserted, 26 NumberOfCheckSat, 3050 ConstructedInterpolants, 0 QuantifiedInterpolants, 578813 SizeOfPredicates, 85 NumberOfNonLiveVariables, 5641 ConjunctsInSsa, 122 ConjunctsInUnsatCore, 46 InterpolantComputations, 23 PerfectInterpolantSequences, 2266/2496 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...