./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 023bd19a3cee0a73a15679923c85e228e629b6a0 ...................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 023bd19a3cee0a73a15679923c85e228e629b6a0 ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 13:11:53,557 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 13:11:53,559 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 13:11:53,566 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 13:11:53,567 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 13:11:53,567 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 13:11:53,568 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 13:11:53,570 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 13:11:53,571 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 13:11:53,572 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 13:11:53,572 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 13:11:53,573 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 13:11:53,573 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 13:11:53,574 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 13:11:53,575 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 13:11:53,575 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 13:11:53,576 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 13:11:53,577 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 13:11:53,578 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 13:11:53,580 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 13:11:53,581 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 13:11:53,582 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 13:11:53,583 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 13:11:53,583 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 13:11:53,585 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 13:11:53,585 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 13:11:53,585 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 13:11:53,586 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 13:11:53,586 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 13:11:53,586 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 13:11:53,587 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 13:11:53,587 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 13:11:53,587 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 13:11:53,588 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 13:11:53,588 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 13:11:53,589 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 13:11:53,589 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 13:11:53,589 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 13:11:53,589 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 13:11:53,590 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 13:11:53,590 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 13:11:53,591 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2019-12-07 13:11:53,600 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 13:11:53,600 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 13:11:53,601 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 13:11:53,601 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 13:11:53,601 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 13:11:53,601 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 13:11:53,601 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2019-12-07 13:11:53,601 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 13:11:53,601 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 13:11:53,602 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2019-12-07 13:11:53,602 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2019-12-07 13:11:53,602 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 13:11:53,602 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2019-12-07 13:11:53,602 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2019-12-07 13:11:53,602 INFO L138 SettingsManager]: * Simplification Technique=SIMPLIFY_QUICK [2019-12-07 13:11:53,602 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 13:11:53,603 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 13:11:53,603 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 13:11:53,603 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 13:11:53,603 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 13:11:53,603 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 13:11:53,603 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 13:11:53,603 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 13:11:53,603 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 13:11:53,603 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 13:11:53,604 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 13:11:53,604 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 13:11:53,604 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 13:11:53,604 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 13:11:53,604 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 13:11:53,604 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 13:11:53,604 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 13:11:53,605 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 13:11:53,605 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 13:11:53,605 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 13:11:53,605 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2019-12-07 13:11:53,605 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-12-07 13:11:53,605 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 13:11:53,605 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 13:11:53,605 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 13:11:53,605 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 023bd19a3cee0a73a15679923c85e228e629b6a0 [2019-12-07 13:11:53,708 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 13:11:53,718 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 13:11:53,721 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 13:11:53,722 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 13:11:53,722 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 13:11:53,723 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2019-12-07 13:11:53,769 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/data/16223c337/7ed66c636f384bc1bb5e405486fefb35/FLAG7bcc26456 [2019-12-07 13:11:54,247 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 13:11:54,248 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2019-12-07 13:11:54,256 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/data/16223c337/7ed66c636f384bc1bb5e405486fefb35/FLAG7bcc26456 [2019-12-07 13:11:54,745 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/data/16223c337/7ed66c636f384bc1bb5e405486fefb35 [2019-12-07 13:11:54,747 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 13:11:54,748 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 13:11:54,749 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 13:11:54,749 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 13:11:54,752 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 13:11:54,752 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:11:54" (1/1) ... [2019-12-07 13:11:54,754 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@71f2f420 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:54, skipping insertion in model container [2019-12-07 13:11:54,755 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:11:54" (1/1) ... [2019-12-07 13:11:54,760 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 13:11:54,788 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 13:11:54,991 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 13:11:55,000 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2019-12-07 13:11:55,000 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@46752e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:55, skipping insertion in model container [2019-12-07 13:11:55,000 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 13:11:55,001 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2019-12-07 13:11:55,002 INFO L168 Benchmark]: Toolchain (without parser) took 253.45 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 100.7 MB). Free memory was 944.7 MB in the beginning and 1.1 GB in the end (delta: -145.4 MB). Peak memory consumption was 23.2 MB. Max. memory is 11.5 GB. [2019-12-07 13:11:55,003 INFO L168 Benchmark]: CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 960.8 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 13:11:55,003 INFO L168 Benchmark]: CACSL2BoogieTranslator took 251.47 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 100.7 MB). Free memory was 944.7 MB in the beginning and 1.1 GB in the end (delta: -145.4 MB). Peak memory consumption was 23.2 MB. Max. memory is 11.5 GB. [2019-12-07 13:11:55,004 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 960.8 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 251.47 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 100.7 MB). Free memory was 944.7 MB in the beginning and 1.1 GB in the end (delta: -145.4 MB). Peak memory consumption was 23.2 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 234]: Unsupported Syntax Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.25-f470102 [2019-12-07 13:11:56,139 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 13:11:56,140 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 13:11:56,148 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 13:11:56,148 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 13:11:56,149 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 13:11:56,150 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 13:11:56,151 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 13:11:56,153 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 13:11:56,153 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 13:11:56,154 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 13:11:56,155 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 13:11:56,155 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 13:11:56,156 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 13:11:56,156 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 13:11:56,157 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 13:11:56,158 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 13:11:56,158 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 13:11:56,160 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 13:11:56,161 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 13:11:56,162 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 13:11:56,163 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 13:11:56,164 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 13:11:56,165 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 13:11:56,167 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 13:11:56,167 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 13:11:56,167 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 13:11:56,167 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 13:11:56,168 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 13:11:56,168 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 13:11:56,169 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 13:11:56,169 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 13:11:56,170 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 13:11:56,170 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 13:11:56,171 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 13:11:56,171 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 13:11:56,171 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 13:11:56,172 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 13:11:56,172 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 13:11:56,172 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 13:11:56,173 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 13:11:56,173 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf [2019-12-07 13:11:56,183 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 13:11:56,184 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 13:11:56,184 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 13:11:56,184 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 13:11:56,185 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 13:11:56,185 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 13:11:56,185 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 13:11:56,185 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 13:11:56,185 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 13:11:56,186 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 13:11:56,186 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 13:11:56,186 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 13:11:56,186 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 13:11:56,186 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 13:11:56,186 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 13:11:56,187 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 13:11:56,187 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 13:11:56,187 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2019-12-07 13:11:56,187 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2019-12-07 13:11:56,187 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 13:11:56,187 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 13:11:56,187 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 13:11:56,188 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 13:11:56,188 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 13:11:56,188 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 13:11:56,188 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 13:11:56,188 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 13:11:56,188 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 13:11:56,188 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 13:11:56,189 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 13:11:56,189 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 13:11:56,189 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2019-12-07 13:11:56,189 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --rewrite-divk --print-success --lang smt [2019-12-07 13:11:56,189 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 13:11:56,189 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 13:11:56,189 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 13:11:56,190 INFO L138 SettingsManager]: * Logic for external solver=AUFBV Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 023bd19a3cee0a73a15679923c85e228e629b6a0 [2019-12-07 13:11:56,353 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 13:11:56,362 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 13:11:56,364 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 13:11:56,365 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 13:11:56,365 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 13:11:56,365 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2019-12-07 13:11:56,404 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/data/176010ef0/808ac4240d534d0dbde09658d3de895c/FLAG23dfb3a5e [2019-12-07 13:11:56,868 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 13:11:56,869 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2019-12-07 13:11:56,881 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/data/176010ef0/808ac4240d534d0dbde09658d3de895c/FLAG23dfb3a5e [2019-12-07 13:11:56,893 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/data/176010ef0/808ac4240d534d0dbde09658d3de895c [2019-12-07 13:11:56,895 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 13:11:56,896 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 13:11:56,896 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 13:11:56,897 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 13:11:56,899 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 13:11:56,899 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:11:56" (1/1) ... [2019-12-07 13:11:56,901 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5b70e7d3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:56, skipping insertion in model container [2019-12-07 13:11:56,901 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 01:11:56" (1/1) ... [2019-12-07 13:11:56,905 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 13:11:56,938 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 13:11:57,122 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 13:11:57,166 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2019-12-07 13:11:57,171 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 13:11:57,212 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 13:11:57,217 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 13:11:57,258 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 13:11:57,282 INFO L208 MainTranslator]: Completed translation [2019-12-07 13:11:57,282 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57 WrapperNode [2019-12-07 13:11:57,282 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 13:11:57,283 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 13:11:57,283 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 13:11:57,283 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 13:11:57,288 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57" (1/1) ... [2019-12-07 13:11:57,302 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57" (1/1) ... [2019-12-07 13:11:57,327 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 13:11:57,327 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 13:11:57,327 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 13:11:57,328 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 13:11:57,334 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57" (1/1) ... [2019-12-07 13:11:57,334 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57" (1/1) ... [2019-12-07 13:11:57,338 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57" (1/1) ... [2019-12-07 13:11:57,338 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57" (1/1) ... [2019-12-07 13:11:57,348 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57" (1/1) ... [2019-12-07 13:11:57,355 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57" (1/1) ... [2019-12-07 13:11:57,357 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57" (1/1) ... [2019-12-07 13:11:57,360 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 13:11:57,361 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 13:11:57,361 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 13:11:57,361 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 13:11:57,362 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 13:11:57,402 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 13:11:57,402 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2019-12-07 13:11:57,402 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 13:11:57,402 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 13:11:57,952 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 13:11:57,952 INFO L287 CfgBuilder]: Removed 172 assume(true) statements. [2019-12-07 13:11:57,953 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:11:57 BoogieIcfgContainer [2019-12-07 13:11:57,953 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 13:11:57,954 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-12-07 13:11:57,954 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-12-07 13:11:57,956 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-12-07 13:11:57,956 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 01:11:56" (1/3) ... [2019-12-07 13:11:57,957 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1d0783b7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 01:11:57, skipping insertion in model container [2019-12-07 13:11:57,957 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 01:11:57" (2/3) ... [2019-12-07 13:11:57,957 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1d0783b7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 01:11:57, skipping insertion in model container [2019-12-07 13:11:57,957 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:11:57" (3/3) ... [2019-12-07 13:11:57,959 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product38.cil.c [2019-12-07 13:11:57,965 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-12-07 13:11:57,971 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2019-12-07 13:11:57,979 INFO L249 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2019-12-07 13:11:57,995 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-12-07 13:11:57,995 INFO L374 AbstractCegarLoop]: Hoare is true [2019-12-07 13:11:57,995 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-12-07 13:11:57,995 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 13:11:57,996 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 13:11:57,996 INFO L378 AbstractCegarLoop]: Difference is false [2019-12-07 13:11:57,996 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 13:11:57,996 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-12-07 13:11:58,008 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states. [2019-12-07 13:11:58,012 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2019-12-07 13:11:58,012 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:11:58,013 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:11:58,013 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:11:58,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:11:58,017 INFO L82 PathProgramCache]: Analyzing trace with hash 1109177434, now seen corresponding path program 1 times [2019-12-07 13:11:58,026 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:11:58,026 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [164502069] [2019-12-07 13:11:58,026 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 2 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with mathsat -unsat_core_generation=3 [2019-12-07 13:11:58,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:11:58,171 INFO L264 TraceCheckSpWp]: Trace formula consists of 181 conjuncts, 1 conjunts are in the unsatisfiable core [2019-12-07 13:11:58,174 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:11:58,185 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:11:58,186 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:11:58,189 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:11:58,190 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [164502069] [2019-12-07 13:11:58,190 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:11:58,191 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 2 [2019-12-07 13:11:58,191 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1233282201] [2019-12-07 13:11:58,195 INFO L442 AbstractCegarLoop]: Interpolant automaton has 2 states [2019-12-07 13:11:58,196 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:11:58,205 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2019-12-07 13:11:58,206 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 13:11:58,208 INFO L87 Difference]: Start difference. First operand 120 states. Second operand 2 states. [2019-12-07 13:11:58,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:11:58,234 INFO L93 Difference]: Finished difference Result 233 states and 352 transitions. [2019-12-07 13:11:58,234 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 13:11:58,235 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2019-12-07 13:11:58,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:11:58,243 INFO L225 Difference]: With dead ends: 233 [2019-12-07 13:11:58,244 INFO L226 Difference]: Without dead ends: 116 [2019-12-07 13:11:58,246 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 13:11:58,262 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 116 states. [2019-12-07 13:11:58,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 116 to 116. [2019-12-07 13:11:58,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 116 states. [2019-12-07 13:11:58,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 116 states to 116 states and 168 transitions. [2019-12-07 13:11:58,284 INFO L78 Accepts]: Start accepts. Automaton has 116 states and 168 transitions. Word has length 19 [2019-12-07 13:11:58,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:11:58,284 INFO L462 AbstractCegarLoop]: Abstraction has 116 states and 168 transitions. [2019-12-07 13:11:58,285 INFO L463 AbstractCegarLoop]: Interpolant automaton has 2 states. [2019-12-07 13:11:58,285 INFO L276 IsEmpty]: Start isEmpty. Operand 116 states and 168 transitions. [2019-12-07 13:11:58,285 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2019-12-07 13:11:58,286 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:11:58,286 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:11:58,487 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 mathsat -unsat_core_generation=3 [2019-12-07 13:11:58,487 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:11:58,488 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:11:58,489 INFO L82 PathProgramCache]: Analyzing trace with hash -1379770309, now seen corresponding path program 1 times [2019-12-07 13:11:58,490 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:11:58,491 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [200424315] [2019-12-07 13:11:58,491 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 3 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with mathsat -unsat_core_generation=3 [2019-12-07 13:11:58,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:11:58,707 INFO L264 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 13:11:58,709 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:11:58,725 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:11:58,726 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:11:58,736 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:11:58,736 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [200424315] [2019-12-07 13:11:58,736 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:11:58,736 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 13:11:58,737 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1961054470] [2019-12-07 13:11:58,738 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 13:11:58,738 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:11:58,738 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 13:11:58,739 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:11:58,739 INFO L87 Difference]: Start difference. First operand 116 states and 168 transitions. Second operand 4 states. [2019-12-07 13:11:58,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:11:58,754 INFO L93 Difference]: Finished difference Result 116 states and 168 transitions. [2019-12-07 13:11:58,755 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 13:11:58,755 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 20 [2019-12-07 13:11:58,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:11:58,756 INFO L225 Difference]: With dead ends: 116 [2019-12-07 13:11:58,756 INFO L226 Difference]: Without dead ends: 49 [2019-12-07 13:11:58,757 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:11:58,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2019-12-07 13:11:58,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2019-12-07 13:11:58,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2019-12-07 13:11:58,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 70 transitions. [2019-12-07 13:11:58,763 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 70 transitions. Word has length 20 [2019-12-07 13:11:58,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:11:58,764 INFO L462 AbstractCegarLoop]: Abstraction has 49 states and 70 transitions. [2019-12-07 13:11:58,764 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 13:11:58,764 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 70 transitions. [2019-12-07 13:11:58,765 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2019-12-07 13:11:58,765 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:11:58,765 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:11:58,965 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 mathsat -unsat_core_generation=3 [2019-12-07 13:11:58,966 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:11:58,966 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:11:58,967 INFO L82 PathProgramCache]: Analyzing trace with hash 872222713, now seen corresponding path program 1 times [2019-12-07 13:11:58,967 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:11:58,968 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1263263880] [2019-12-07 13:11:58,968 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 4 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with mathsat -unsat_core_generation=3 [2019-12-07 13:11:59,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:11:59,186 INFO L264 TraceCheckSpWp]: Trace formula consists of 189 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 13:11:59,188 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:11:59,195 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:11:59,195 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:11:59,202 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:11:59,202 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1263263880] [2019-12-07 13:11:59,202 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:11:59,202 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 13:11:59,203 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1122707901] [2019-12-07 13:11:59,203 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 13:11:59,203 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:11:59,203 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 13:11:59,203 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:11:59,204 INFO L87 Difference]: Start difference. First operand 49 states and 70 transitions. Second operand 4 states. [2019-12-07 13:11:59,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:11:59,245 INFO L93 Difference]: Finished difference Result 91 states and 133 transitions. [2019-12-07 13:11:59,246 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 13:11:59,246 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 26 [2019-12-07 13:11:59,246 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:11:59,247 INFO L225 Difference]: With dead ends: 91 [2019-12-07 13:11:59,247 INFO L226 Difference]: Without dead ends: 49 [2019-12-07 13:11:59,248 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:11:59,248 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2019-12-07 13:11:59,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2019-12-07 13:11:59,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2019-12-07 13:11:59,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 69 transitions. [2019-12-07 13:11:59,255 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 69 transitions. Word has length 26 [2019-12-07 13:11:59,255 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:11:59,255 INFO L462 AbstractCegarLoop]: Abstraction has 49 states and 69 transitions. [2019-12-07 13:11:59,255 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 13:11:59,255 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 69 transitions. [2019-12-07 13:11:59,256 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2019-12-07 13:11:59,256 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:11:59,256 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:11:59,457 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 mathsat -unsat_core_generation=3 [2019-12-07 13:11:59,458 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:11:59,459 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:11:59,459 INFO L82 PathProgramCache]: Analyzing trace with hash 1991893424, now seen corresponding path program 1 times [2019-12-07 13:11:59,461 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:11:59,462 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [437369090] [2019-12-07 13:11:59,463 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 5 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with mathsat -unsat_core_generation=3 [2019-12-07 13:11:59,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:11:59,745 INFO L264 TraceCheckSpWp]: Trace formula consists of 191 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 13:11:59,746 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:11:59,752 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:11:59,752 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:11:59,754 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:11:59,754 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [437369090] [2019-12-07 13:11:59,754 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:11:59,754 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 13:11:59,755 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792612803] [2019-12-07 13:11:59,755 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 13:11:59,755 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:11:59,755 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 13:11:59,755 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 13:11:59,755 INFO L87 Difference]: Start difference. First operand 49 states and 69 transitions. Second operand 3 states. [2019-12-07 13:11:59,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:11:59,807 INFO L93 Difference]: Finished difference Result 115 states and 165 transitions. [2019-12-07 13:11:59,808 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 13:11:59,808 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2019-12-07 13:11:59,808 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:11:59,809 INFO L225 Difference]: With dead ends: 115 [2019-12-07 13:11:59,809 INFO L226 Difference]: Without dead ends: 73 [2019-12-07 13:11:59,810 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 13:11:59,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2019-12-07 13:11:59,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 71. [2019-12-07 13:11:59,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 71 states. [2019-12-07 13:11:59,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 99 transitions. [2019-12-07 13:11:59,818 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 99 transitions. Word has length 28 [2019-12-07 13:11:59,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:11:59,818 INFO L462 AbstractCegarLoop]: Abstraction has 71 states and 99 transitions. [2019-12-07 13:11:59,818 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 13:11:59,819 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 99 transitions. [2019-12-07 13:11:59,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 13:11:59,820 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:11:59,820 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:12:00,020 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 mathsat -unsat_core_generation=3 [2019-12-07 13:12:00,021 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:12:00,022 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:12:00,022 INFO L82 PathProgramCache]: Analyzing trace with hash 1071015423, now seen corresponding path program 1 times [2019-12-07 13:12:00,024 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:12:00,024 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [561050926] [2019-12-07 13:12:00,025 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 6 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with mathsat -unsat_core_generation=3 [2019-12-07 13:12:00,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:00,159 INFO L264 TraceCheckSpWp]: Trace formula consists of 202 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:12:00,161 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:00,175 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:00,176 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:00,183 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:00,183 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [561050926] [2019-12-07 13:12:00,183 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:12:00,183 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 13:12:00,184 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1322835384] [2019-12-07 13:12:00,184 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 13:12:00,184 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:12:00,184 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 13:12:00,185 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 13:12:00,185 INFO L87 Difference]: Start difference. First operand 71 states and 99 transitions. Second operand 5 states. [2019-12-07 13:12:00,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:12:00,247 INFO L93 Difference]: Finished difference Result 190 states and 264 transitions. [2019-12-07 13:12:00,248 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-12-07 13:12:00,248 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2019-12-07 13:12:00,248 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:12:00,249 INFO L225 Difference]: With dead ends: 190 [2019-12-07 13:12:00,249 INFO L226 Difference]: Without dead ends: 126 [2019-12-07 13:12:00,250 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 13:12:00,251 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2019-12-07 13:12:00,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 77. [2019-12-07 13:12:00,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 77 states. [2019-12-07 13:12:00,258 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 105 transitions. [2019-12-07 13:12:00,259 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 105 transitions. Word has length 34 [2019-12-07 13:12:00,259 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:12:00,259 INFO L462 AbstractCegarLoop]: Abstraction has 77 states and 105 transitions. [2019-12-07 13:12:00,259 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 13:12:00,259 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 105 transitions. [2019-12-07 13:12:00,260 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 13:12:00,260 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:12:00,260 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:12:00,461 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 mathsat -unsat_core_generation=3 [2019-12-07 13:12:00,462 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:12:00,463 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:12:00,463 INFO L82 PathProgramCache]: Analyzing trace with hash 2004479132, now seen corresponding path program 1 times [2019-12-07 13:12:00,465 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:12:00,465 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1772700912] [2019-12-07 13:12:00,466 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 7 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with mathsat -unsat_core_generation=3 [2019-12-07 13:12:00,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:00,604 INFO L264 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:12:00,606 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:00,619 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:00,619 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:00,630 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:00,631 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1772700912] [2019-12-07 13:12:00,632 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:12:00,632 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 13:12:00,632 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1335827944] [2019-12-07 13:12:00,632 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 13:12:00,633 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:12:00,633 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 13:12:00,633 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 13:12:00,633 INFO L87 Difference]: Start difference. First operand 77 states and 105 transitions. Second operand 5 states. [2019-12-07 13:12:00,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:12:00,742 INFO L93 Difference]: Finished difference Result 260 states and 358 transitions. [2019-12-07 13:12:00,742 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 13:12:00,742 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2019-12-07 13:12:00,742 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:12:00,743 INFO L225 Difference]: With dead ends: 260 [2019-12-07 13:12:00,743 INFO L226 Difference]: Without dead ends: 190 [2019-12-07 13:12:00,744 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-12-07 13:12:00,745 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 190 states. [2019-12-07 13:12:00,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 190 to 76. [2019-12-07 13:12:00,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 76 states. [2019-12-07 13:12:00,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 102 transitions. [2019-12-07 13:12:00,754 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 102 transitions. Word has length 34 [2019-12-07 13:12:00,754 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:12:00,754 INFO L462 AbstractCegarLoop]: Abstraction has 76 states and 102 transitions. [2019-12-07 13:12:00,755 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 13:12:00,755 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 102 transitions. [2019-12-07 13:12:00,755 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 13:12:00,755 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:12:00,755 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:12:00,956 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 mathsat -unsat_core_generation=3 [2019-12-07 13:12:00,957 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:12:00,957 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:12:00,958 INFO L82 PathProgramCache]: Analyzing trace with hash 1772080001, now seen corresponding path program 1 times [2019-12-07 13:12:00,959 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:12:00,959 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1561891541] [2019-12-07 13:12:00,959 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 8 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with mathsat -unsat_core_generation=3 [2019-12-07 13:12:01,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:01,099 INFO L264 TraceCheckSpWp]: Trace formula consists of 202 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 13:12:01,100 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:01,107 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:01,107 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:01,116 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:01,117 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1561891541] [2019-12-07 13:12:01,117 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:12:01,117 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2019-12-07 13:12:01,117 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [103716055] [2019-12-07 13:12:01,117 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 13:12:01,117 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:12:01,118 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 13:12:01,118 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2019-12-07 13:12:01,118 INFO L87 Difference]: Start difference. First operand 76 states and 102 transitions. Second operand 6 states. [2019-12-07 13:12:01,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:12:01,159 INFO L93 Difference]: Finished difference Result 199 states and 267 transitions. [2019-12-07 13:12:01,159 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 13:12:01,159 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 34 [2019-12-07 13:12:01,159 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:12:01,160 INFO L225 Difference]: With dead ends: 199 [2019-12-07 13:12:01,160 INFO L226 Difference]: Without dead ends: 130 [2019-12-07 13:12:01,161 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 13:12:01,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130 states. [2019-12-07 13:12:01,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130 to 80. [2019-12-07 13:12:01,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 80 states. [2019-12-07 13:12:01,169 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 106 transitions. [2019-12-07 13:12:01,170 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 106 transitions. Word has length 34 [2019-12-07 13:12:01,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:12:01,170 INFO L462 AbstractCegarLoop]: Abstraction has 80 states and 106 transitions. [2019-12-07 13:12:01,170 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 13:12:01,170 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 106 transitions. [2019-12-07 13:12:01,170 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 13:12:01,170 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:12:01,171 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:12:01,371 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 mathsat -unsat_core_generation=3 [2019-12-07 13:12:01,372 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:12:01,373 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:12:01,373 INFO L82 PathProgramCache]: Analyzing trace with hash 1185273987, now seen corresponding path program 1 times [2019-12-07 13:12:01,374 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:12:01,375 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1144905982] [2019-12-07 13:12:01,375 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 9 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with mathsat -unsat_core_generation=3 [2019-12-07 13:12:01,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:01,514 INFO L264 TraceCheckSpWp]: Trace formula consists of 202 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 13:12:01,515 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:01,520 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:01,520 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:01,527 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:01,528 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1144905982] [2019-12-07 13:12:01,528 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:12:01,528 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 3 [2019-12-07 13:12:01,528 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1335989309] [2019-12-07 13:12:01,528 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 13:12:01,528 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:12:01,528 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 13:12:01,529 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:12:01,529 INFO L87 Difference]: Start difference. First operand 80 states and 106 transitions. Second operand 4 states. [2019-12-07 13:12:01,576 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:12:01,576 INFO L93 Difference]: Finished difference Result 240 states and 322 transitions. [2019-12-07 13:12:01,577 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 13:12:01,577 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2019-12-07 13:12:01,577 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:12:01,578 INFO L225 Difference]: With dead ends: 240 [2019-12-07 13:12:01,578 INFO L226 Difference]: Without dead ends: 167 [2019-12-07 13:12:01,579 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 13:12:01,579 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2019-12-07 13:12:01,591 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 137. [2019-12-07 13:12:01,591 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 137 states. [2019-12-07 13:12:01,592 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 182 transitions. [2019-12-07 13:12:01,592 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 182 transitions. Word has length 34 [2019-12-07 13:12:01,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:12:01,592 INFO L462 AbstractCegarLoop]: Abstraction has 137 states and 182 transitions. [2019-12-07 13:12:01,592 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 13:12:01,592 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 182 transitions. [2019-12-07 13:12:01,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2019-12-07 13:12:01,593 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:12:01,593 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:12:01,794 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 mathsat -unsat_core_generation=3 [2019-12-07 13:12:01,795 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:12:01,795 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:12:01,795 INFO L82 PathProgramCache]: Analyzing trace with hash -210672189, now seen corresponding path program 1 times [2019-12-07 13:12:01,796 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:12:01,797 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1876782313] [2019-12-07 13:12:01,798 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 10 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with mathsat -unsat_core_generation=3 [2019-12-07 13:12:01,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:01,933 INFO L264 TraceCheckSpWp]: Trace formula consists of 204 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 13:12:01,934 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:01,954 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:01,954 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:01,957 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:01,958 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1876782313] [2019-12-07 13:12:01,958 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:12:01,958 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 13:12:01,958 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [673703730] [2019-12-07 13:12:01,958 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 13:12:01,958 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:12:01,959 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 13:12:01,959 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 13:12:01,959 INFO L87 Difference]: Start difference. First operand 137 states and 182 transitions. Second operand 6 states. [2019-12-07 13:12:02,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:12:02,228 INFO L93 Difference]: Finished difference Result 669 states and 899 transitions. [2019-12-07 13:12:02,228 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 13:12:02,228 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2019-12-07 13:12:02,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:12:02,230 INFO L225 Difference]: With dead ends: 669 [2019-12-07 13:12:02,231 INFO L226 Difference]: Without dead ends: 539 [2019-12-07 13:12:02,231 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2019-12-07 13:12:02,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 539 states. [2019-12-07 13:12:02,247 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 539 to 245. [2019-12-07 13:12:02,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 245 states. [2019-12-07 13:12:02,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 245 states to 245 states and 321 transitions. [2019-12-07 13:12:02,248 INFO L78 Accepts]: Start accepts. Automaton has 245 states and 321 transitions. Word has length 35 [2019-12-07 13:12:02,248 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:12:02,249 INFO L462 AbstractCegarLoop]: Abstraction has 245 states and 321 transitions. [2019-12-07 13:12:02,249 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 13:12:02,249 INFO L276 IsEmpty]: Start isEmpty. Operand 245 states and 321 transitions. [2019-12-07 13:12:02,250 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2019-12-07 13:12:02,250 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:12:02,250 INFO L410 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:12:02,451 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 mathsat -unsat_core_generation=3 [2019-12-07 13:12:02,452 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:12:02,453 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:12:02,453 INFO L82 PathProgramCache]: Analyzing trace with hash 681323361, now seen corresponding path program 1 times [2019-12-07 13:12:02,454 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:12:02,455 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [178506323] [2019-12-07 13:12:02,455 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 11 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with mathsat -unsat_core_generation=3 [2019-12-07 13:12:02,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:02,649 INFO L264 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:12:02,650 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:02,666 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:02,666 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:02,685 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:02,686 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [178506323] [2019-12-07 13:12:02,686 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [948385993] [2019-12-07 13:12:02,686 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/cvc4 Starting monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:12:02,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:02,781 INFO L264 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 13:12:02,782 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:02,794 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:02,794 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:02,798 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:02,798 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [728360667] [2019-12-07 13:12:02,798 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/z3 Starting monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 13:12:02,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:02,916 INFO L264 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:12:02,918 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:02,922 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:02,923 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:02,928 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 13:12:02,928 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 13:12:02,929 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 6, 5, 5, 5] total 9 [2019-12-07 13:12:02,929 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [909479304] [2019-12-07 13:12:02,929 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2019-12-07 13:12:02,930 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:12:02,930 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2019-12-07 13:12:02,930 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2019-12-07 13:12:02,930 INFO L87 Difference]: Start difference. First operand 245 states and 321 transitions. Second operand 9 states. [2019-12-07 13:12:03,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:12:03,250 INFO L93 Difference]: Finished difference Result 619 states and 836 transitions. [2019-12-07 13:12:03,250 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 13:12:03,250 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 56 [2019-12-07 13:12:03,251 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:12:03,252 INFO L225 Difference]: With dead ends: 619 [2019-12-07 13:12:03,252 INFO L226 Difference]: Without dead ends: 381 [2019-12-07 13:12:03,253 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 329 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=68, Invalid=142, Unknown=0, NotChecked=0, Total=210 [2019-12-07 13:12:03,254 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 381 states. [2019-12-07 13:12:03,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 381 to 230. [2019-12-07 13:12:03,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 230 states. [2019-12-07 13:12:03,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 293 transitions. [2019-12-07 13:12:03,272 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 293 transitions. Word has length 56 [2019-12-07 13:12:03,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:12:03,273 INFO L462 AbstractCegarLoop]: Abstraction has 230 states and 293 transitions. [2019-12-07 13:12:03,273 INFO L463 AbstractCegarLoop]: Interpolant automaton has 9 states. [2019-12-07 13:12:03,273 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 293 transitions. [2019-12-07 13:12:03,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2019-12-07 13:12:03,274 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:12:03,274 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:12:03,875 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 cvc4 --incremental --print-success --lang smt --rewrite-divk,13 z3 -smt2 -in SMTLIB2_COMPLIANT=true,11 mathsat -unsat_core_generation=3 [2019-12-07 13:12:03,877 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:12:03,878 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:12:03,878 INFO L82 PathProgramCache]: Analyzing trace with hash 914288142, now seen corresponding path program 1 times [2019-12-07 13:12:03,879 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:12:03,880 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [243239325] [2019-12-07 13:12:03,880 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 14 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with mathsat -unsat_core_generation=3 [2019-12-07 13:12:03,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:04,008 INFO L264 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:12:04,010 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:04,047 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 75 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 13:12:04,047 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:04,082 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 75 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 13:12:04,082 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [243239325] [2019-12-07 13:12:04,082 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [171848019] [2019-12-07 13:12:04,082 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/cvc4 Starting monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:12:04,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:04,179 INFO L264 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:12:04,180 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:04,220 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 58 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:12:04,220 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:04,232 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 58 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:12:04,232 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1783226995] [2019-12-07 13:12:04,232 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/z3 Starting monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 13:12:04,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:04,310 INFO L264 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 9 conjunts are in the unsatisfiable core [2019-12-07 13:12:04,311 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:04,348 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 89 proven. 2 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 13:12:04,348 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:04,397 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 91 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 13:12:04,397 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 5 imperfect interpolant sequences. [2019-12-07 13:12:04,397 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [5, 5, 5, 5, 8] total 18 [2019-12-07 13:12:04,398 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [550137136] [2019-12-07 13:12:04,398 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 13:12:04,398 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:12:04,398 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 13:12:04,398 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=256, Unknown=0, NotChecked=0, Total=306 [2019-12-07 13:12:04,398 INFO L87 Difference]: Start difference. First operand 230 states and 293 transitions. Second operand 8 states. [2019-12-07 13:12:04,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:12:04,756 INFO L93 Difference]: Finished difference Result 937 states and 1202 transitions. [2019-12-07 13:12:04,756 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2019-12-07 13:12:04,756 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 99 [2019-12-07 13:12:04,756 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:12:04,759 INFO L225 Difference]: With dead ends: 937 [2019-12-07 13:12:04,759 INFO L226 Difference]: Without dead ends: 714 [2019-12-07 13:12:04,760 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 609 GetRequests, 581 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 92 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=161, Invalid=709, Unknown=0, NotChecked=0, Total=870 [2019-12-07 13:12:04,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 714 states. [2019-12-07 13:12:04,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 714 to 363. [2019-12-07 13:12:04,785 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 363 states. [2019-12-07 13:12:04,786 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 363 states to 363 states and 463 transitions. [2019-12-07 13:12:04,786 INFO L78 Accepts]: Start accepts. Automaton has 363 states and 463 transitions. Word has length 99 [2019-12-07 13:12:04,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:12:04,786 INFO L462 AbstractCegarLoop]: Abstraction has 363 states and 463 transitions. [2019-12-07 13:12:04,786 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 13:12:04,786 INFO L276 IsEmpty]: Start isEmpty. Operand 363 states and 463 transitions. [2019-12-07 13:12:04,787 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2019-12-07 13:12:04,787 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:12:04,787 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:12:05,388 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 z3 -smt2 -in SMTLIB2_COMPLIANT=true,14 mathsat -unsat_core_generation=3,15 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:12:05,388 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:12:05,389 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:12:05,389 INFO L82 PathProgramCache]: Analyzing trace with hash -580512589, now seen corresponding path program 1 times [2019-12-07 13:12:05,389 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:12:05,389 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [439799497] [2019-12-07 13:12:05,390 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 17 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with mathsat -unsat_core_generation=3 [2019-12-07 13:12:05,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:05,565 INFO L264 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:12:05,566 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:05,582 INFO L134 CoverageAnalysis]: Checked inductivity of 109 backedges. 90 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 13:12:05,582 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:05,605 INFO L134 CoverageAnalysis]: Checked inductivity of 109 backedges. 90 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 13:12:05,605 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [439799497] [2019-12-07 13:12:05,606 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:12:05,606 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2019-12-07 13:12:05,606 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [116454974] [2019-12-07 13:12:05,606 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 13:12:05,606 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:12:05,606 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 13:12:05,606 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2019-12-07 13:12:05,607 INFO L87 Difference]: Start difference. First operand 363 states and 463 transitions. Second operand 8 states. [2019-12-07 13:12:05,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:12:05,851 INFO L93 Difference]: Finished difference Result 838 states and 1077 transitions. [2019-12-07 13:12:05,852 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 13:12:05,852 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 101 [2019-12-07 13:12:05,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:12:05,854 INFO L225 Difference]: With dead ends: 838 [2019-12-07 13:12:05,854 INFO L226 Difference]: Without dead ends: 482 [2019-12-07 13:12:05,855 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 196 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2019-12-07 13:12:05,856 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 482 states. [2019-12-07 13:12:05,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 482 to 363. [2019-12-07 13:12:05,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 363 states. [2019-12-07 13:12:05,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 363 states to 363 states and 457 transitions. [2019-12-07 13:12:05,887 INFO L78 Accepts]: Start accepts. Automaton has 363 states and 457 transitions. Word has length 101 [2019-12-07 13:12:05,887 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:12:05,888 INFO L462 AbstractCegarLoop]: Abstraction has 363 states and 457 transitions. [2019-12-07 13:12:05,888 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 13:12:05,888 INFO L276 IsEmpty]: Start isEmpty. Operand 363 states and 457 transitions. [2019-12-07 13:12:05,889 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2019-12-07 13:12:05,889 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:12:05,889 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:12:06,090 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 mathsat -unsat_core_generation=3 [2019-12-07 13:12:06,091 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:12:06,091 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:12:06,092 INFO L82 PathProgramCache]: Analyzing trace with hash -1330430055, now seen corresponding path program 1 times [2019-12-07 13:12:06,093 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:12:06,093 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2015542246] [2019-12-07 13:12:06,094 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 18 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with mathsat -unsat_core_generation=3 [2019-12-07 13:12:06,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:06,293 INFO L264 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:12:06,294 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:06,323 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:12:06,323 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:06,343 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:12:06,344 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2015542246] [2019-12-07 13:12:06,344 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1661039602] [2019-12-07 13:12:06,344 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/cvc4 Starting monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:12:06,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:06,437 INFO L264 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:12:06,439 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:06,448 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:12:06,448 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:06,457 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:12:06,457 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1977918027] [2019-12-07 13:12:06,458 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/z3 Starting monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 13:12:06,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:06,542 INFO L264 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:12:06,543 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:06,552 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:12:06,552 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:06,562 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 13:12:06,563 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 13:12:06,563 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 5 [2019-12-07 13:12:06,563 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1126938447] [2019-12-07 13:12:06,564 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 13:12:06,564 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:12:06,564 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 13:12:06,564 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 13:12:06,565 INFO L87 Difference]: Start difference. First operand 363 states and 457 transitions. Second operand 6 states. [2019-12-07 13:12:06,675 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:12:06,675 INFO L93 Difference]: Finished difference Result 1268 states and 1617 transitions. [2019-12-07 13:12:06,675 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 13:12:06,676 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 102 [2019-12-07 13:12:06,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:12:06,679 INFO L225 Difference]: With dead ends: 1268 [2019-12-07 13:12:06,679 INFO L226 Difference]: Without dead ends: 912 [2019-12-07 13:12:06,680 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 612 GetRequests, 602 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2019-12-07 13:12:06,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 912 states. [2019-12-07 13:12:06,726 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 912 to 714. [2019-12-07 13:12:06,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 714 states. [2019-12-07 13:12:06,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 714 states to 714 states and 884 transitions. [2019-12-07 13:12:06,727 INFO L78 Accepts]: Start accepts. Automaton has 714 states and 884 transitions. Word has length 102 [2019-12-07 13:12:06,728 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:12:06,728 INFO L462 AbstractCegarLoop]: Abstraction has 714 states and 884 transitions. [2019-12-07 13:12:06,728 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 13:12:06,728 INFO L276 IsEmpty]: Start isEmpty. Operand 714 states and 884 transitions. [2019-12-07 13:12:06,729 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2019-12-07 13:12:06,729 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:12:06,729 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:12:07,330 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 mathsat -unsat_core_generation=3,20 z3 -smt2 -in SMTLIB2_COMPLIANT=true,19 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:12:07,331 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:12:07,332 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:12:07,332 INFO L82 PathProgramCache]: Analyzing trace with hash -1781597551, now seen corresponding path program 1 times [2019-12-07 13:12:07,333 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:12:07,334 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1919935155] [2019-12-07 13:12:07,334 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 21 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with mathsat -unsat_core_generation=3 [2019-12-07 13:12:07,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 13:12:07,451 INFO L264 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 13:12:07,452 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:07,477 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2019-12-07 13:12:07,477 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:07,507 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2019-12-07 13:12:07,507 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1919935155] [2019-12-07 13:12:07,507 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 13:12:07,508 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 10 [2019-12-07 13:12:07,508 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [263739547] [2019-12-07 13:12:07,508 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-12-07 13:12:07,508 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:12:07,508 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-12-07 13:12:07,508 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2019-12-07 13:12:07,508 INFO L87 Difference]: Start difference. First operand 714 states and 884 transitions. Second operand 10 states. [2019-12-07 13:12:07,789 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:12:07,789 INFO L93 Difference]: Finished difference Result 1721 states and 2143 transitions. [2019-12-07 13:12:07,790 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2019-12-07 13:12:07,790 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 103 [2019-12-07 13:12:07,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:12:07,794 INFO L225 Difference]: With dead ends: 1721 [2019-12-07 13:12:07,794 INFO L226 Difference]: Without dead ends: 1014 [2019-12-07 13:12:07,795 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 212 GetRequests, 199 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=66, Invalid=144, Unknown=0, NotChecked=0, Total=210 [2019-12-07 13:12:07,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1014 states. [2019-12-07 13:12:07,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1014 to 650. [2019-12-07 13:12:07,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 650 states. [2019-12-07 13:12:07,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 650 states to 650 states and 794 transitions. [2019-12-07 13:12:07,869 INFO L78 Accepts]: Start accepts. Automaton has 650 states and 794 transitions. Word has length 103 [2019-12-07 13:12:07,869 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:12:07,869 INFO L462 AbstractCegarLoop]: Abstraction has 650 states and 794 transitions. [2019-12-07 13:12:07,869 INFO L463 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-12-07 13:12:07,869 INFO L276 IsEmpty]: Start isEmpty. Operand 650 states and 794 transitions. [2019-12-07 13:12:07,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2019-12-07 13:12:07,870 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 13:12:07,870 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 13:12:08,070 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 mathsat -unsat_core_generation=3 [2019-12-07 13:12:08,071 INFO L410 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 13:12:08,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 13:12:08,072 INFO L82 PathProgramCache]: Analyzing trace with hash 1189576157, now seen corresponding path program 2 times [2019-12-07 13:12:08,073 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 13:12:08,073 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1886787053] [2019-12-07 13:12:08,074 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/mathsat Starting monitored process 22 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with mathsat -unsat_core_generation=3 [2019-12-07 13:12:09,135 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 13:12:09,136 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 13:12:09,170 INFO L264 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 13:12:09,171 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:09,195 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 17 proven. 80 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 13:12:09,195 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:09,249 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 17 proven. 80 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 13:12:09,249 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1886787053] [2019-12-07 13:12:09,250 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [233240988] [2019-12-07 13:12:09,250 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/cvc4 Starting monitored process 23 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:12:10,767 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 13:12:10,767 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 13:12:10,799 INFO L264 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 13:12:10,800 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:10,852 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 13:12:10,852 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:10,897 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 13:12:10,897 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1440371066] [2019-12-07 13:12:10,897 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/z3 Starting monitored process 24 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 13:12:11,022 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 13:12:11,022 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 13:12:11,027 INFO L264 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 13:12:11,029 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 13:12:11,039 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 13:12:11,039 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 13:12:11,047 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 13:12:11,048 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 13:12:11,048 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 7, 7, 7, 7] total 14 [2019-12-07 13:12:11,048 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [337081091] [2019-12-07 13:12:11,048 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2019-12-07 13:12:11,049 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 13:12:11,049 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2019-12-07 13:12:11,049 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=145, Unknown=0, NotChecked=0, Total=182 [2019-12-07 13:12:11,049 INFO L87 Difference]: Start difference. First operand 650 states and 794 transitions. Second operand 14 states. [2019-12-07 13:12:11,494 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 13:12:11,494 INFO L93 Difference]: Finished difference Result 1333 states and 1635 transitions. [2019-12-07 13:12:11,494 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2019-12-07 13:12:11,494 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 103 [2019-12-07 13:12:11,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 13:12:11,494 INFO L225 Difference]: With dead ends: 1333 [2019-12-07 13:12:11,494 INFO L226 Difference]: Without dead ends: 0 [2019-12-07 13:12:11,496 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 625 GetRequests, 601 SyntacticMatches, 3 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 68 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=122, Invalid=384, Unknown=0, NotChecked=0, Total=506 [2019-12-07 13:12:11,496 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-12-07 13:12:11,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-12-07 13:12:11,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-12-07 13:12:11,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 13:12:11,496 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 103 [2019-12-07 13:12:11,496 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 13:12:11,496 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 13:12:11,496 INFO L463 AbstractCegarLoop]: Interpolant automaton has 14 states. [2019-12-07 13:12:11,496 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-12-07 13:12:11,496 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-12-07 13:12:12,097 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 mathsat -unsat_core_generation=3,24 z3 -smt2 -in SMTLIB2_COMPLIANT=true,23 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 13:12:12,104 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-12-07 13:12:12,490 WARN L192 SmtUtils]: Spent 376.00 ms on a formula simplification. DAG size of input: 291 DAG size of output: 237 [2019-12-07 13:12:12,861 WARN L192 SmtUtils]: Spent 184.00 ms on a formula simplification. DAG size of input: 306 DAG size of output: 227 [2019-12-07 13:12:13,124 WARN L192 SmtUtils]: Spent 238.00 ms on a formula simplification. DAG size of input: 318 DAG size of output: 278 [2019-12-07 13:12:13,230 WARN L192 SmtUtils]: Spent 103.00 ms on a formula simplification. DAG size of input: 225 DAG size of output: 201 [2019-12-07 13:12:13,400 WARN L192 SmtUtils]: Spent 169.00 ms on a formula simplification. DAG size of input: 285 DAG size of output: 219 [2019-12-07 13:12:13,630 WARN L192 SmtUtils]: Spent 227.00 ms on a formula simplification. DAG size of input: 318 DAG size of output: 278 [2019-12-07 13:12:13,824 WARN L192 SmtUtils]: Spent 159.00 ms on a formula simplification. DAG size of input: 266 DAG size of output: 238 [2019-12-07 13:12:14,010 WARN L192 SmtUtils]: Spent 184.00 ms on a formula simplification. DAG size of input: 265 DAG size of output: 227 [2019-12-07 13:12:16,405 WARN L192 SmtUtils]: Spent 2.37 s on a formula simplification. DAG size of input: 228 DAG size of output: 68 [2019-12-07 13:12:18,053 WARN L192 SmtUtils]: Spent 1.60 s on a formula simplification. DAG size of input: 102 DAG size of output: 61 [2019-12-07 13:12:19,122 WARN L192 SmtUtils]: Spent 1.05 s on a formula simplification. DAG size of input: 144 DAG size of output: 70 [2019-12-07 13:12:19,858 WARN L192 SmtUtils]: Spent 731.00 ms on a formula simplification. DAG size of input: 133 DAG size of output: 53 [2019-12-07 13:12:21,843 WARN L192 SmtUtils]: Spent 1.98 s on a formula simplification. DAG size of input: 213 DAG size of output: 80 [2019-12-07 13:12:22,057 WARN L192 SmtUtils]: Spent 211.00 ms on a formula simplification. DAG size of input: 66 DAG size of output: 46 [2019-12-07 13:12:24,379 WARN L192 SmtUtils]: Spent 2.32 s on a formula simplification. DAG size of input: 277 DAG size of output: 89 [2019-12-07 13:12:25,858 WARN L192 SmtUtils]: Spent 1.48 s on a formula simplification. DAG size of input: 201 DAG size of output: 84 [2019-12-07 13:12:27,915 WARN L192 SmtUtils]: Spent 2.06 s on a formula simplification. DAG size of input: 209 DAG size of output: 80 [2019-12-07 13:12:30,119 WARN L192 SmtUtils]: Spent 2.20 s on a formula simplification. DAG size of input: 277 DAG size of output: 89 [2019-12-07 13:12:30,551 WARN L192 SmtUtils]: Spent 416.00 ms on a formula simplification. DAG size of input: 96 DAG size of output: 47 [2019-12-07 13:12:32,494 WARN L192 SmtUtils]: Spent 1.94 s on a formula simplification. DAG size of input: 238 DAG size of output: 83 [2019-12-07 13:12:34,202 WARN L192 SmtUtils]: Spent 1.69 s on a formula simplification. DAG size of input: 220 DAG size of output: 74 [2019-12-07 13:12:34,438 WARN L192 SmtUtils]: Spent 234.00 ms on a formula simplification. DAG size of input: 70 DAG size of output: 50 [2019-12-07 13:12:34,457 INFO L246 CegarLoopResult]: For program point L927(lines 927 933) no Hoare annotation was computed. [2019-12-07 13:12:34,457 INFO L242 CegarLoopResult]: At program point L927-1(lines 927 933) the Hoare annotation is: (let ((.cse18 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse20 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse11 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse19 (= ~waterLevel~0 (_ bv1 32))) (.cse6 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse13 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1))) (.cse16 (or .cse18 .cse20)) (.cse17 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) ~pumpRunning~0)) (.cse21 (= ~waterLevel~0 (_ bv2 32))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse1 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1)) (.cse14 (= (_ bv1 32) ~pumpRunning~0)) (.cse22 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse15 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse12 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse23 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse10 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse3 .cse4 .cse5 .cse11 .cse7 .cse8 .cse10) (and .cse3 .cse5 .cse11 .cse12 .cse7 .cse8 .cse10) (and .cse0 .cse1 .cse13 .cse14 .cse2 .cse4 .cse15 .cse5 .cse16 .cse17 .cse7 .cse8) (and .cse13 .cse14 .cse4 .cse5 .cse18 .cse19 .cse7 .cse20 .cse8) (and .cse3 .cse4 .cse5 .cse21 .cse7 .cse8) (and .cse13 .cse14 .cse5 .cse18 .cse12 .cse19 .cse7 .cse20 .cse8) (and .cse0 .cse1 .cse14 .cse22 .cse2 .cse4 .cse15 .cse5 .cse7 .cse23 .cse8 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse12 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse14 .cse5 .cse21 .cse12 .cse7 .cse20 .cse8) (and .cse0 .cse1 .cse13 .cse14 .cse2 .cse15 .cse5 .cse16 .cse17 .cse12 .cse7 .cse8) (and .cse14 .cse4 .cse5 .cse21 .cse7 .cse20 .cse8) (and .cse3 .cse5 .cse21 .cse12 .cse7 .cse8) (and .cse0 .cse1 .cse14 .cse22 .cse2 .cse15 .cse5 .cse12 .cse7 .cse23 .cse8 .cse10)))) [2019-12-07 13:12:34,457 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2019-12-07 13:12:34,457 INFO L242 CegarLoopResult]: At program point L664(lines 655 668) the Hoare annotation is: false [2019-12-07 13:12:34,457 INFO L242 CegarLoopResult]: At program point L664-1(lines 655 668) the Hoare annotation is: (let ((.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse11 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse14 (= ~waterLevel~0 (_ bv2 32))) (.cse0 (= (_ bv1 32) |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse8 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse9 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1)) (.cse10 (= ~waterLevel~0 (_ bv0 32))) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse3 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse12 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse13 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse7 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse8 .cse9 .cse10 .cse1 .cse4 .cse11 .cse12 .cse5 .cse6 .cse13 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse11 .cse5 .cse6 .cse7) (and .cse1 .cse4 .cse14 .cse11 .cse5 .cse6) (and .cse1 .cse3 .cse4 .cse14 .cse5 .cse6) (and .cse0 .cse8 .cse9 .cse10 .cse1 .cse3 .cse4 .cse12 .cse5 .cse6 .cse13 .cse7))) [2019-12-07 13:12:34,458 INFO L242 CegarLoopResult]: At program point L664-2(lines 655 668) the Hoare annotation is: false [2019-12-07 13:12:34,458 INFO L242 CegarLoopResult]: At program point L664-3(lines 655 668) the Hoare annotation is: false [2019-12-07 13:12:34,458 INFO L242 CegarLoopResult]: At program point L664-4(lines 655 668) the Hoare annotation is: false [2019-12-07 13:12:34,458 INFO L242 CegarLoopResult]: At program point L664-5(lines 655 668) the Hoare annotation is: false [2019-12-07 13:12:34,458 INFO L242 CegarLoopResult]: At program point L173(lines 683 689) the Hoare annotation is: (let ((.cse11 (= ~waterLevel~0 (_ bv2 32))) (.cse19 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse14 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse3 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1)) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse21 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse22 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse17 (= (_ bv0 32) ~pumpRunning~0)) (.cse20 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse18 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse13 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1))) (.cse1 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse2 (= (_ bv1 32) ~pumpRunning~0)) (.cse6 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse15 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse16 (= ~waterLevel~0 (_ bv1 32))) (.cse7 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse12 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse1 .cse2 .cse6 .cse5 .cse11 .cse7 .cse8 .cse12 .cse10) (and .cse13 .cse1 .cse2 .cse6 .cse5 .cse14 .cse15 .cse16 .cse8 .cse12 .cse10) (and .cse17 .cse5 .cse14 .cse11 .cse18 .cse8 .cse10) (and .cse17 .cse5 .cse11 .cse18 .cse7 .cse8 .cse10) (and .cse0 .cse2 .cse1 .cse3 .cse4 .cse14 .cse6 .cse5 .cse19 .cse8 .cse10) (and .cse17 .cse14 .cse20 .cse5 .cse18 .cse8 .cse10) (and .cse2 .cse1 .cse14 .cse5 .cse6 .cse11 .cse8 .cse10) (and .cse0 .cse3 .cse2 .cse1 .cse4 .cse6 .cse5 .cse19 .cse7 .cse8 .cse10) (and .cse0 .cse3 .cse4 .cse17 .cse5 .cse14 .cse18 .cse21 .cse8 .cse10 .cse22) (and .cse0 .cse3 .cse1 .cse2 .cse4 .cse5 .cse6 .cse14 .cse8 .cse9 .cse10) (and .cse0 .cse3 .cse4 .cse17 .cse5 .cse18 .cse7 .cse21 .cse8 .cse10 .cse22) (and .cse17 .cse20 .cse5 .cse7 .cse18 .cse8 .cse10) (and .cse13 .cse1 .cse2 .cse6 .cse5 .cse15 .cse16 .cse7 .cse8 .cse12 .cse10))) [2019-12-07 13:12:34,458 INFO L242 CegarLoopResult]: At program point L173-1(lines 683 689) the Hoare annotation is: false [2019-12-07 13:12:34,458 INFO L242 CegarLoopResult]: At program point L173-2(lines 683 689) the Hoare annotation is: false [2019-12-07 13:12:34,458 INFO L246 CegarLoopResult]: For program point L141(lines 141 148) no Hoare annotation was computed. [2019-12-07 13:12:34,458 INFO L249 CegarLoopResult]: At program point L141-1(lines 141 148) the Hoare annotation is: true [2019-12-07 13:12:34,458 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2019-12-07 13:12:34,458 INFO L246 CegarLoopResult]: For program point L44(line 44) no Hoare annotation was computed. [2019-12-07 13:12:34,458 INFO L246 CegarLoopResult]: For program point L44-1(line 44) no Hoare annotation was computed. [2019-12-07 13:12:34,458 INFO L246 CegarLoopResult]: For program point L44-2(line 44) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L606(lines 606 610) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L937(lines 937 950) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L242 CegarLoopResult]: At program point L112(lines 108 114) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L741(lines 741 758) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L741-1(lines 741 758) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L741-2(lines 741 758) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L908(lines 907 954) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L909(lines 909 913) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L843(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L843-2(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L843-3(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L843-5(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L843-6(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L843-8(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L843-9(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L843-11(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L843-12(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,459 INFO L246 CegarLoopResult]: For program point L843-14(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,460 INFO L246 CegarLoopResult]: For program point L843-15(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,460 INFO L246 CegarLoopResult]: For program point L843-17(lines 843 847) no Hoare annotation was computed. [2019-12-07 13:12:34,460 INFO L249 CegarLoopResult]: At program point L150(lines 131 153) the Hoare annotation is: true [2019-12-07 13:12:34,460 INFO L246 CegarLoopResult]: For program point L745(lines 745 753) no Hoare annotation was computed. [2019-12-07 13:12:34,460 INFO L246 CegarLoopResult]: For program point L745-1(lines 745 753) no Hoare annotation was computed. [2019-12-07 13:12:34,460 INFO L246 CegarLoopResult]: For program point L745-2(lines 745 753) no Hoare annotation was computed. [2019-12-07 13:12:34,460 INFO L246 CegarLoopResult]: For program point L184(lines 184 201) no Hoare annotation was computed. [2019-12-07 13:12:34,460 INFO L242 CegarLoopResult]: At program point L184-1(lines 1 962) the Hoare annotation is: (let ((.cse15 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|)) (.cse13 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1))) (let ((.cse10 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse11 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse8 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse2 (= (_ bv0 32) ~pumpRunning~0)) (.cse3 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse14 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse9 (= ~waterLevel~0 (_ bv0 32))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse1 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1)) (.cse17 (not .cse13)) (.cse16 (= (_ bv1 32) ~pumpRunning~0)) (.cse5 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse18 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse4 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse19 (or (not .cse15) (not (= ~waterLevel~0 (_ bv3 32))))) (.cse20 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse12 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse9 .cse2 .cse3 .cse4 .cse10 .cse6 .cse7 .cse11) (and .cse0 .cse1 .cse9 .cse2 .cse4 .cse12 .cse10 .cse6 .cse7 .cse11 .cse8) (and .cse2 .cse4 .cse5 .cse12 .cse6 .cse7 .cse8) (and .cse13 .cse2 .cse4 .cse12 .cse14 .cse6 .cse7 .cse15) (and .cse1 .cse16 .cse4 .cse14 .cse12 .cse6 .cse7 .cse15) (and .cse13 .cse2 .cse3 .cse4 .cse14 .cse6 .cse7 .cse15) (and .cse0 .cse1 .cse17 .cse16 .cse9 .cse18 .cse4 .cse19 .cse20 .cse12 .cse6 .cse7) (and .cse16 .cse1 .cse3 .cse4 .cse14 .cse6 .cse7 .cse15) (and .cse1 .cse16 (= (_ bv1 32) ~switchedOnBeforeTS~0) .cse9 .cse4 .cse12 .cse6 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32)) (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32)) .cse0 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32)) .cse18 .cse7) (and .cse0 .cse1 .cse17 .cse16 .cse5 .cse18 .cse4 .cse19 .cse20 .cse12 .cse6 .cse7)))) [2019-12-07 13:12:34,460 INFO L246 CegarLoopResult]: For program point L184-2(lines 184 201) no Hoare annotation was computed. [2019-12-07 13:12:34,460 INFO L242 CegarLoopResult]: At program point L184-3(lines 1 962) the Hoare annotation is: false [2019-12-07 13:12:34,460 INFO L246 CegarLoopResult]: For program point L184-4(lines 184 201) no Hoare annotation was computed. [2019-12-07 13:12:34,460 INFO L242 CegarLoopResult]: At program point L184-5(lines 1 962) the Hoare annotation is: false [2019-12-07 13:12:34,460 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-12-07 13:12:34,460 INFO L246 CegarLoopResult]: For program point L945(lines 945 949) no Hoare annotation was computed. [2019-12-07 13:12:34,461 INFO L242 CegarLoopResult]: At program point L945-2(lines 945 949) the Hoare annotation is: (let ((.cse18 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse20 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse11 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse19 (= ~waterLevel~0 (_ bv1 32))) (.cse6 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse13 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1))) (.cse16 (or .cse18 .cse20)) (.cse17 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) ~pumpRunning~0)) (.cse21 (= ~waterLevel~0 (_ bv2 32))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse1 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1)) (.cse14 (= (_ bv1 32) ~pumpRunning~0)) (.cse22 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse15 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse12 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse23 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse10 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse3 .cse4 .cse5 .cse11 .cse7 .cse8 .cse10) (and .cse3 .cse5 .cse11 .cse12 .cse7 .cse8 .cse10) (and .cse0 .cse1 .cse13 .cse14 .cse2 .cse4 .cse15 .cse5 .cse16 .cse17 .cse7 .cse8) (and .cse13 .cse14 .cse4 .cse5 .cse18 .cse19 .cse7 .cse20 .cse8) (and .cse3 .cse4 .cse5 .cse21 .cse7 .cse8) (and .cse13 .cse14 .cse5 .cse18 .cse12 .cse19 .cse7 .cse20 .cse8) (and .cse0 .cse1 .cse14 .cse22 .cse2 .cse4 .cse15 .cse5 .cse7 .cse23 .cse8 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse12 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse14 .cse5 .cse21 .cse12 .cse7 .cse20 .cse8) (and .cse0 .cse1 .cse13 .cse14 .cse2 .cse15 .cse5 .cse16 .cse17 .cse12 .cse7 .cse8) (and .cse14 .cse4 .cse5 .cse21 .cse7 .cse20 .cse8) (and .cse3 .cse5 .cse21 .cse12 .cse7 .cse8) (and .cse0 .cse1 .cse14 .cse22 .cse2 .cse15 .cse5 .cse12 .cse7 .cse23 .cse8 .cse10)))) [2019-12-07 13:12:34,461 INFO L246 CegarLoopResult]: For program point L582(lines 582 586) no Hoare annotation was computed. [2019-12-07 13:12:34,461 INFO L246 CegarLoopResult]: For program point L582-3(lines 582 586) no Hoare annotation was computed. [2019-12-07 13:12:34,461 INFO L246 CegarLoopResult]: For program point L582-6(lines 582 586) no Hoare annotation was computed. [2019-12-07 13:12:34,461 INFO L246 CegarLoopResult]: For program point L715(lines 715 732) no Hoare annotation was computed. [2019-12-07 13:12:34,461 INFO L246 CegarLoopResult]: For program point L715-1(lines 715 732) no Hoare annotation was computed. [2019-12-07 13:12:34,461 INFO L246 CegarLoopResult]: For program point L715-2(lines 715 732) no Hoare annotation was computed. [2019-12-07 13:12:34,461 INFO L246 CegarLoopResult]: For program point L715-3(lines 715 732) no Hoare annotation was computed. [2019-12-07 13:12:34,461 INFO L246 CegarLoopResult]: For program point L715-4(lines 715 732) no Hoare annotation was computed. [2019-12-07 13:12:34,461 INFO L246 CegarLoopResult]: For program point L715-5(lines 715 732) no Hoare annotation was computed. [2019-12-07 13:12:34,461 INFO L242 CegarLoopResult]: At program point L683(lines 679 701) the Hoare annotation is: (let ((.cse10 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1))) (.cse14 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse16 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse1 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1)) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse6 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse11 (= (_ bv1 32) ~pumpRunning~0)) (.cse12 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse13 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse17 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse15 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse3 (= (_ bv0 32) ~pumpRunning~0)) (.cse4 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse18 (= ~waterLevel~0 (_ bv2 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse11 .cse12 .cse2 .cse13 .cse5 .cse14 .cse15 .cse7 .cse16 .cse8) (and .cse11 .cse12 .cse13 .cse5 .cse17 .cse4 .cse7 .cse8) (and .cse3 .cse4 .cse5 .cse17 .cse7 .cse8) (and .cse10 .cse11 .cse12 .cse2 .cse4 .cse13 .cse5 .cse14 .cse7 .cse16 .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse15 .cse6 .cse7 .cse8 .cse9) (and .cse3 .cse5 .cse18 .cse15 .cse7 .cse8) (and .cse11 .cse12 .cse13 .cse5 .cse17 .cse15 .cse7 .cse8) (and .cse3 .cse5 .cse17 .cse15 .cse7 .cse8) (and .cse3 .cse4 .cse5 .cse18 .cse7 .cse8))) [2019-12-07 13:12:34,461 INFO L242 CegarLoopResult]: At program point L683-1(lines 679 701) the Hoare annotation is: false [2019-12-07 13:12:34,461 INFO L242 CegarLoopResult]: At program point L683-2(lines 679 701) the Hoare annotation is: false [2019-12-07 13:12:34,461 INFO L246 CegarLoopResult]: For program point L188(lines 188 198) no Hoare annotation was computed. [2019-12-07 13:12:34,462 INFO L246 CegarLoopResult]: For program point L188-2(lines 188 198) no Hoare annotation was computed. [2019-12-07 13:12:34,462 INFO L246 CegarLoopResult]: For program point L188-4(lines 188 198) no Hoare annotation was computed. [2019-12-07 13:12:34,462 INFO L242 CegarLoopResult]: At program point L849(lines 834 852) the Hoare annotation is: false [2019-12-07 13:12:34,462 INFO L242 CegarLoopResult]: At program point L849-1(lines 834 852) the Hoare annotation is: (let ((.cse10 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1)) (.cse11 (= ~waterLevel~0 (_ bv0 32))) (.cse13 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse14 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse15 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse3 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse4 (= |ULTIMATE.start_isHighWaterLevel_#res| (_ bv0 32))) (.cse5 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 (_ bv0 32))) (.cse8 (not (= ULTIMATE.start_isHighWaterLevel_~tmp~7 (_ bv0 32)))) (.cse9 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse12 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse1 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse16 (= ~waterLevel~0 (_ bv2 32))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse11 .cse0 .cse2 .cse5 .cse12 .cse13 .cse6 .cse14 .cse8 .cse9 .cse15 .cse4 .cse7) (and .cse10 .cse11 .cse0 .cse2 .cse5 .cse13 .cse6 .cse14 .cse8 .cse9 .cse15 .cse1 .cse4 .cse7) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse12 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse2 .cse16 .cse12 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse16 .cse6 .cse7))) [2019-12-07 13:12:34,462 INFO L242 CegarLoopResult]: At program point L849-2(lines 834 852) the Hoare annotation is: false [2019-12-07 13:12:34,462 INFO L242 CegarLoopResult]: At program point L849-3(lines 834 852) the Hoare annotation is: false [2019-12-07 13:12:34,462 INFO L242 CegarLoopResult]: At program point L849-4(lines 834 852) the Hoare annotation is: false [2019-12-07 13:12:34,462 INFO L242 CegarLoopResult]: At program point L849-5(lines 834 852) the Hoare annotation is: false [2019-12-07 13:12:34,462 INFO L242 CegarLoopResult]: At program point L651(lines 646 654) the Hoare annotation is: (let ((.cse14 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (let ((.cse19 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse20 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse3 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse18 (= ~waterLevel~0 (_ bv0 32))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse5 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse16 (not .cse14)) (.cse17 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse2 (= (_ bv1 32) ~pumpRunning~0)) (.cse7 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse15 (= (_ bv0 32) ~pumpRunning~0)) (.cse12 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse13 (= ~waterLevel~0 (_ bv2 32))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse2 .cse12 .cse4 .cse13 .cse8 .cse10 .cse14) (and .cse0 .cse15 .cse4 .cse5 .cse12 .cse16 .cse8 .cse10 .cse17) (and .cse0 .cse18 .cse15 .cse12 .cse4 .cse19 .cse8 .cse10 .cse20) (and .cse0 .cse18 .cse15 .cse4 .cse7 .cse19 .cse8 .cse10 .cse20 .cse17) (and .cse15 .cse4 .cse13 .cse7 .cse8 .cse10 .cse14) (and .cse0 .cse1 .cse2 .cse3 .cse18 .cse4 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse15 .cse4 .cse5 .cse16 .cse7 .cse8 .cse10 .cse17) (and .cse2 .cse4 .cse7 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))) .cse8 .cse10 .cse14) (and .cse15 .cse12 .cse4 .cse13 .cse8 .cse10 .cse14)))) [2019-12-07 13:12:34,462 INFO L242 CegarLoopResult]: At program point L651-1(lines 646 654) the Hoare annotation is: false [2019-12-07 13:12:34,462 INFO L242 CegarLoopResult]: At program point L651-2(lines 646 654) the Hoare annotation is: false [2019-12-07 13:12:34,462 INFO L246 CegarLoopResult]: For program point L189(lines 189 195) no Hoare annotation was computed. [2019-12-07 13:12:34,462 INFO L246 CegarLoopResult]: For program point L189-2(lines 189 195) no Hoare annotation was computed. [2019-12-07 13:12:34,463 INFO L246 CegarLoopResult]: For program point L189-4(lines 189 195) no Hoare annotation was computed. [2019-12-07 13:12:34,463 INFO L242 CegarLoopResult]: At program point L619(lines 614 622) the Hoare annotation is: (let ((.cse5 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse10 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse11 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse12 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1))) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse1 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse13 (= ~waterLevel~0 (_ bv0 32))) (.cse2 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse3 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse14 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse6 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse8 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse9 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse0 .cse1 .cse2 .cse3 .cse5 .cse11 .cse7 .cse8 .cse9) (and .cse10 .cse12 .cse0 .cse1 .cse13 .cse2 .cse3 .cse14 .cse11 .cse7 .cse8 .cse9) (and .cse12 .cse0 .cse1 .cse13 .cse2 .cse3 .cse4 .cse14 .cse6 .cse7 .cse8 .cse9))) [2019-12-07 13:12:34,463 INFO L242 CegarLoopResult]: At program point L619-1(lines 614 622) the Hoare annotation is: false [2019-12-07 13:12:34,463 INFO L242 CegarLoopResult]: At program point L619-2(lines 614 622) the Hoare annotation is: false [2019-12-07 13:12:34,463 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-12-07 13:12:34,463 INFO L246 CegarLoopResult]: For program point L917(lines 917 923) no Hoare annotation was computed. [2019-12-07 13:12:34,463 INFO L242 CegarLoopResult]: At program point L884(lines 1 962) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 13:12:34,463 INFO L242 CegarLoopResult]: At program point L917-1(lines 917 923) the Hoare annotation is: (let ((.cse19 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (let ((.cse11 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse10 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse6 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse17 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse13 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1))) (.cse14 (not .cse19)) (.cse15 (= ~waterLevel~0 (_ bv1 32))) (.cse12 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse1 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1)) (.cse16 (= (_ bv1 32) ~pumpRunning~0)) (.cse3 (= (_ bv0 32) ~pumpRunning~0)) (.cse4 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse18 (= ~waterLevel~0 (_ bv2 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse3 .cse4 .cse5 .cse11 .cse7 .cse8 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse12 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse3 .cse5 .cse11 .cse12 .cse7 .cse8 .cse10) (and .cse13 .cse3 .cse4 .cse5 .cse14 .cse6 .cse15 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse16 .cse2 .cse17 .cse5 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32))) .cse12 .cse7 .cse8) (and .cse16 .cse5 .cse18 .cse12 .cse7 .cse8) (and .cse1 .cse16 (= (_ bv1 32) ~switchedOnBeforeTS~0) .cse2 .cse5 .cse12 .cse7 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32)) (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32)) .cse0 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32)) .cse17 .cse8) (and .cse3 .cse5 .cse18 .cse12 .cse7 .cse8) (and .cse13 .cse16 .cse5 .cse14 .cse15 .cse12 .cse7 .cse8) (and .cse1 .cse16 .cse4 .cse5 .cse18 .cse7 .cse8 .cse19) (and .cse3 .cse4 .cse5 .cse18 .cse7 .cse8)))) [2019-12-07 13:12:34,463 INFO L242 CegarLoopResult]: At program point L785(lines 778 788) the Hoare annotation is: (let ((.cse8 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse4 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse7 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse9 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1))) (.cse11 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse1 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse10 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse3 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse16 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse13 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse14 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse12 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse15 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse8 .cse0 .cse1 .cse10 .cse3 .cse13 .cse4 .cse5 .cse6 .cse12 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse14 .cse5 .cse6 .cse15 .cse9 .cse10 .cse16 .cse11 .cse12) (and .cse0 .cse1 .cse10 .cse3 .cse16 .cse13 .cse14 .cse5 .cse6 .cse12 .cse15))) [2019-12-07 13:12:34,463 INFO L242 CegarLoopResult]: At program point L785-1(lines 778 788) the Hoare annotation is: false [2019-12-07 13:12:34,463 INFO L246 CegarLoopResult]: For program point L719(lines 719 727) no Hoare annotation was computed. [2019-12-07 13:12:34,464 INFO L242 CegarLoopResult]: At program point L785-2(lines 778 788) the Hoare annotation is: false [2019-12-07 13:12:34,464 INFO L246 CegarLoopResult]: For program point L719-1(lines 719 727) no Hoare annotation was computed. [2019-12-07 13:12:34,464 INFO L246 CegarLoopResult]: For program point L719-2(lines 719 727) no Hoare annotation was computed. [2019-12-07 13:12:34,464 INFO L246 CegarLoopResult]: For program point L719-3(lines 719 727) no Hoare annotation was computed. [2019-12-07 13:12:34,464 INFO L246 CegarLoopResult]: For program point L719-4(lines 719 727) no Hoare annotation was computed. [2019-12-07 13:12:34,464 INFO L246 CegarLoopResult]: For program point L719-5(lines 719 727) no Hoare annotation was computed. [2019-12-07 13:12:34,464 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-12-07 13:12:34,464 INFO L242 CegarLoopResult]: At program point L61-2(lines 61 75) the Hoare annotation is: false [2019-12-07 13:12:34,464 INFO L246 CegarLoopResult]: For program point L62(line 62) no Hoare annotation was computed. [2019-12-07 13:12:34,464 INFO L242 CegarLoopResult]: At program point L690(lines 690 696) the Hoare annotation is: (let ((.cse12 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse8 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse4 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse11 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse0 (= ~waterLevel~0 (_ bv0 32))) (.cse14 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse15 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse16 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse9 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse19 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1))) (.cse13 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse20 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse3 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse10 (= (_ bv1 32) ~pumpRunning~0)) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse17 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse18 (= ~waterLevel~0 (_ bv2 32))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|) (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse2 .cse3 .cse5 .cse14 .cse6 .cse15 .cse16) (and .cse1 .cse17 .cse2 .cse12 .cse5 .cse6 .cse8) (and .cse1 .cse2 .cse12 .cse3 .cse5 .cse6 .cse8) (and .cse10 .cse2 .cse18 .cse3 .cse5 .cse6) (and .cse19 .cse0 .cse1 .cse17 .cse2 .cse20 .cse4 .cse5 .cse6 .cse7) (and .cse10 .cse11 .cse0 .cse2 .cse3 .cse5 .cse14 .cse15 .cse16 .cse9 .cse19 .cse13 .cse20 .cse6) (and .cse1 .cse2 .cse18 .cse3 .cse5 .cse6) (and .cse10 .cse2 .cse17 .cse18 .cse5 .cse6) (and .cse1 .cse17 .cse2 .cse18 .cse5 .cse6))) [2019-12-07 13:12:34,464 INFO L242 CegarLoopResult]: At program point L690-1(lines 690 696) the Hoare annotation is: false [2019-12-07 13:12:34,464 INFO L242 CegarLoopResult]: At program point L690-2(lines 690 696) the Hoare annotation is: false [2019-12-07 13:12:34,464 INFO L242 CegarLoopResult]: At program point L955(lines 906 956) the Hoare annotation is: false [2019-12-07 13:12:34,464 INFO L242 CegarLoopResult]: At program point L163(lines 158 165) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 13:12:34,464 INFO L246 CegarLoopResult]: For program point L659(lines 659 665) no Hoare annotation was computed. [2019-12-07 13:12:34,464 INFO L246 CegarLoopResult]: For program point L659-1(lines 659 665) no Hoare annotation was computed. [2019-12-07 13:12:34,465 INFO L246 CegarLoopResult]: For program point L659-2(lines 659 665) no Hoare annotation was computed. [2019-12-07 13:12:34,465 INFO L246 CegarLoopResult]: For program point L659-3(lines 659 665) no Hoare annotation was computed. [2019-12-07 13:12:34,465 INFO L246 CegarLoopResult]: For program point L659-4(lines 659 665) no Hoare annotation was computed. [2019-12-07 13:12:34,465 INFO L246 CegarLoopResult]: For program point L659-5(lines 659 665) no Hoare annotation was computed. [2019-12-07 13:12:34,465 INFO L246 CegarLoopResult]: For program point L65(lines 65 69) no Hoare annotation was computed. [2019-12-07 13:12:34,465 INFO L246 CegarLoopResult]: For program point L65-1(lines 65 69) no Hoare annotation was computed. [2019-12-07 13:12:34,465 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-12-07 13:12:34,465 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2019-12-07 13:12:34,465 INFO L246 CegarLoopResult]: For program point L594(lines 594 598) no Hoare annotation was computed. [2019-12-07 13:12:34,465 INFO L242 CegarLoopResult]: At program point L892(lines 887 895) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 13:12:34,465 INFO L242 CegarLoopResult]: At program point L794(lines 789 797) the Hoare annotation is: (let ((.cse20 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse11 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1))) (.cse13 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse14 (= ~waterLevel~0 (_ bv1 32))) (.cse15 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse1 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse2 (= (_ bv1 32) ~pumpRunning~0)) (.cse6 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse17 (= ~waterLevel~0 (_ bv2 32))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse3 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1)) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse12 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse21 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse22 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse16 (= (_ bv0 32) ~pumpRunning~0)) (.cse19 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse7 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse18 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse8 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse2 .cse11 .cse6 .cse5 .cse12 .cse13 .cse14 .cse8 .cse15 .cse10) (and .cse16 .cse5 .cse17 .cse18 .cse7 .cse8 .cse10) (and .cse16 .cse12 .cse19 .cse5 .cse18 .cse8 .cse10) (and .cse0 .cse2 .cse3 .cse4 .cse6 .cse5 .cse20 .cse7 .cse8 .cse10) (and .cse2 .cse6 .cse5 .cse12 .cse17 .cse8 .cse15 .cse10) (and .cse2 .cse5 .cse6 .cse17 .cse7 .cse8 .cse10) (and .cse0 .cse3 .cse4 .cse16 .cse5 .cse7 .cse21 .cse18 .cse8 .cse10 .cse22) (and .cse0 .cse3 .cse2 .cse4 .cse12 .cse6 .cse5 .cse20 .cse8 .cse10) (and .cse11 .cse2 .cse6 .cse5 .cse13 .cse14 .cse7 .cse8 .cse15 .cse10) (and .cse0 .cse3 .cse1 .cse2 .cse4 .cse5 .cse6 .cse12 .cse8 .cse9 .cse10) (and .cse16 .cse12 .cse5 .cse17 .cse18 .cse8 .cse10) (and .cse0 .cse3 .cse4 .cse16 .cse12 .cse5 .cse21 .cse18 .cse8 .cse10 .cse22) (and .cse16 .cse19 .cse5 .cse7 .cse18 .cse8 .cse10))) [2019-12-07 13:12:34,465 INFO L242 CegarLoopResult]: At program point L794-1(lines 789 797) the Hoare annotation is: (let ((.cse12 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1))) (.cse14 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse11 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse3 (= (_ bv0 32) ~pumpRunning~0)) (.cse15 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse7 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse5 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse10 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse1 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~1)) (.cse16 (= (_ bv1 32) ~pumpRunning~0)) (.cse17 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse4 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse13 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse6 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse18 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse19 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse20 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse21 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse9 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse12 .cse3 .cse13 .cse4 .cse14 .cse5 .cse6 .cse8 .cse9 .cse11) (and .cse0 .cse1 .cse12 .cse3 .cse13 .cse4 .cse15 .cse14 .cse5 .cse8 .cse9 .cse11) (and .cse0 .cse1 .cse2 .cse3 .cse15 .cse4 .cse7 .cse5 .cse8 .cse9 .cse10) (and .cse1 .cse16 .cse17 .cse2 .cse4 .cse6 .cse8 .cse18 .cse19 .cse0 .cse20 .cse21 .cse9) (and .cse1 .cse16 .cse17 .cse4 .cse13 .cse6 .cse8 .cse18 .cse19 .cse0 .cse20 .cse21 .cse9))) [2019-12-07 13:12:34,466 INFO L242 CegarLoopResult]: At program point L794-2(lines 789 797) the Hoare annotation is: false [2019-12-07 13:12:34,466 INFO L242 CegarLoopResult]: At program point L794-3(lines 789 797) the Hoare annotation is: false [2019-12-07 13:12:34,466 INFO L242 CegarLoopResult]: At program point L794-4(lines 789 797) the Hoare annotation is: false [2019-12-07 13:12:34,466 INFO L242 CegarLoopResult]: At program point L794-5(lines 789 797) the Hoare annotation is: false [2019-12-07 13:12:34,518 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 01:12:34 BoogieIcfgContainer [2019-12-07 13:12:34,518 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-12-07 13:12:34,519 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 13:12:34,519 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 13:12:34,519 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 13:12:34,519 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 01:11:57" (3/4) ... [2019-12-07 13:12:34,521 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-12-07 13:12:34,533 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2019-12-07 13:12:34,533 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2019-12-07 13:12:34,534 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2019-12-07 13:12:34,535 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2019-12-07 13:12:34,536 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-12-07 13:12:34,536 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 13:12:34,537 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 13:12:34,556 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result [2019-12-07 13:12:34,556 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result [2019-12-07 13:12:34,556 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result [2019-12-07 13:12:34,556 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((waterLevel == \result && waterLevel == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && waterLevel == tmp) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 13:12:34,556 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((((waterLevel == \result && waterLevel == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || (((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 13:12:34,557 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 13:12:34,557 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 13:12:34,557 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((waterLevel == \result && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) || (((((((((1bv32 == pumpRunning && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && 1bv32 == pumpRunning) && waterLevel == tmp) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || (((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 13:12:34,557 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((waterLevel == \result && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) || ((((((((1bv32 == switchedOnBeforeTS && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((!(2bv32 == tmp) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(2bv32 == tmp) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) [2019-12-07 13:12:34,557 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || ((((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 13:12:34,558 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && tmp == 0bv32) && \result == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(2bv32 == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || (((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && tmp == 0bv32) && \result == 0bv32) && \result == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 13:12:34,558 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result) [2019-12-07 13:12:34,559 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || (((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((((((\result == 0bv32 && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) [2019-12-07 13:12:34,559 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32) && \result == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32) || ((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) [2019-12-07 13:12:34,559 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((((1bv32 == \result && waterLevel == \result) && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((1bv32 == \result && waterLevel == \result) && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 13:12:34,559 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 13:12:34,560 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((((((((waterLevel == tmp && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) && waterLevel == \result) && \result == 0bv32) && splverifierCounter == 0bv32)) || (((((((((((((waterLevel == tmp && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) && waterLevel == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && \result == 0bv32) && splverifierCounter == 0bv32)) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 13:12:34,599 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/run_dir_a5d77072-17f2-4670-b301-c3918466a0ce/bin/utaipan/witness.graphml [2019-12-07 13:12:34,599 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 13:12:34,600 INFO L168 Benchmark]: Toolchain (without parser) took 37704.00 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 468.2 MB). Free memory was 952.4 MB in the beginning and 1.4 GB in the end (delta: -447.1 MB). Peak memory consumption was 21.1 MB. Max. memory is 11.5 GB. [2019-12-07 13:12:34,600 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 13:12:34,600 INFO L168 Benchmark]: CACSL2BoogieTranslator took 386.17 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 134.7 MB). Free memory was 947.0 MB in the beginning and 1.1 GB in the end (delta: -155.9 MB). Peak memory consumption was 21.5 MB. Max. memory is 11.5 GB. [2019-12-07 13:12:34,600 INFO L168 Benchmark]: Boogie Procedure Inliner took 44.40 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2019-12-07 13:12:34,600 INFO L168 Benchmark]: Boogie Preprocessor took 33.18 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 13:12:34,601 INFO L168 Benchmark]: RCFGBuilder took 592.68 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 86.0 MB). Peak memory consumption was 86.0 MB. Max. memory is 11.5 GB. [2019-12-07 13:12:34,601 INFO L168 Benchmark]: TraceAbstraction took 36564.12 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 333.4 MB). Free memory was 1.0 GB in the beginning and 1.4 GB in the end (delta: -415.8 MB). Peak memory consumption was 567.2 MB. Max. memory is 11.5 GB. [2019-12-07 13:12:34,601 INFO L168 Benchmark]: Witness Printer took 80.34 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 13.2 MB). Peak memory consumption was 13.2 MB. Max. memory is 11.5 GB. [2019-12-07 13:12:34,602 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 386.17 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 134.7 MB). Free memory was 947.0 MB in the beginning and 1.1 GB in the end (delta: -155.9 MB). Peak memory consumption was 21.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 44.40 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 33.18 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 592.68 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 86.0 MB). Peak memory consumption was 86.0 MB. Max. memory is 11.5 GB. * TraceAbstraction took 36564.12 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 333.4 MB). Free memory was 1.0 GB in the beginning and 1.4 GB in the end (delta: -415.8 MB). Peak memory consumption was 567.2 MB. Max. memory is 11.5 GB. * Witness Printer took 80.34 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 13.2 MB). Peak memory consumption was 13.2 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: (((((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || ((((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 646]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 887]: Loop Invariant Derived loop invariant: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: (((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 646]: Loop Invariant Derived loop invariant: (((((((((((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 646]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 614]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 131]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((((((((waterLevel == tmp && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) && waterLevel == \result) && \result == 0bv32) && splverifierCounter == 0bv32)) || (((((((((((((waterLevel == tmp && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) && waterLevel == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && \result == 0bv32) && splverifierCounter == 0bv32)) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((waterLevel == \result && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) || (((((((((1bv32 == pumpRunning && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && 1bv32 == pumpRunning) && waterLevel == tmp) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || (((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 614]: Loop Invariant Derived loop invariant: (((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || (((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((((((\result == 0bv32 && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) - InvariantResult [Line: 614]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 655]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 655]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 683]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 683]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((((((waterLevel == \result && waterLevel == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && waterLevel == tmp) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 683]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((waterLevel == \result && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) || ((((((((1bv32 == switchedOnBeforeTS && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((!(2bv32 == tmp) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(2bv32 == tmp) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 945]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && !(2bv32 == tmp)) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 108]: Loop Invariant Derived loop invariant: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result - InvariantResult [Line: 655]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 61]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 655]: Loop Invariant Derived loop invariant: (((((((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((((1bv32 == \result && waterLevel == \result) && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((1bv32 == \result && waterLevel == \result) && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 655]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 655]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: ((((((((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((((waterLevel == \result && waterLevel == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || (((((((((waterLevel == \result && waterLevel == tmp) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(2bv32 == tmp) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 679]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: ((((((((((((((((((waterLevel == \result && waterLevel == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && tmp == 0bv32) && \result == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(2bv32 == tmp) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || (((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && tmp == 0bv32) && \result == 0bv32) && \result == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 778]: Loop Invariant Derived loop invariant: ((((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32) && \result == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32) || ((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) - InvariantResult [Line: 158]: Loop Invariant Derived loop invariant: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result - InvariantResult [Line: 778]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 778]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 120 locations, 3 error locations. Result: SAFE, OverallTime: 14.1s, OverallIterations: 15, TraceHistogramMax: 4, AutomataDifference: 2.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 22.3s, HoareTripleCheckerStatistics: 1639 SDtfs, 3257 SDslu, 4054 SDs, 0 SdLazy, 626 SolverSat, 139 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.2s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 3133 GetRequests, 3003 SyntacticMatches, 3 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 222 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=714occurred in iteration=13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 15 MinimizatonAttempts, 1722 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 50 PreInvPairs, 455 NumberOfFragments, 4782 HoareAnnotationTreeSize, 50 FomulaSimplifications, 6788014 FormulaSimplificationTreeSizeReduction, 1.9s HoareSimplificationTime, 50 FomulaSimplificationsInter, 1503554 FormulaSimplificationTreeSizeReductionInter, 20.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.5s SsaConstructionTime, 4.0s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 1548 NumberOfCodeBlocks, 1548 NumberOfCodeBlocksAsserted, 26 NumberOfCheckSat, 3050 ConstructedInterpolants, 0 QuantifiedInterpolants, 576677 SizeOfPredicates, 87 NumberOfNonLiveVariables, 5698 ConjunctsInSsa, 124 ConjunctsInUnsatCore, 46 InterpolantComputations, 23 PerfectInterpolantSequences, 2266/2496 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...