./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e803bbedaeee18bc8aba1072b7c7abad6be5dde7 ...................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e803bbedaeee18bc8aba1072b7c7abad6be5dde7 ....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 12:14:14,858 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 12:14:14,859 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 12:14:14,868 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 12:14:14,868 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 12:14:14,869 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 12:14:14,870 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 12:14:14,871 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 12:14:14,873 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 12:14:14,874 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 12:14:14,875 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 12:14:14,876 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 12:14:14,876 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 12:14:14,877 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 12:14:14,878 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 12:14:14,879 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 12:14:14,879 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 12:14:14,880 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 12:14:14,882 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 12:14:14,884 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 12:14:14,885 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 12:14:14,886 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 12:14:14,887 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 12:14:14,887 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 12:14:14,889 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 12:14:14,889 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 12:14:14,890 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 12:14:14,890 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 12:14:14,891 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 12:14:14,891 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 12:14:14,892 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 12:14:14,892 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 12:14:14,893 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 12:14:14,893 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 12:14:14,894 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 12:14:14,894 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 12:14:14,895 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 12:14:14,895 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 12:14:14,895 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 12:14:14,896 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 12:14:14,896 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 12:14:14,897 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2019-12-07 12:14:14,909 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 12:14:14,909 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 12:14:14,910 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 12:14:14,910 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 12:14:14,910 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 12:14:14,911 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 12:14:14,911 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2019-12-07 12:14:14,911 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 12:14:14,911 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 12:14:14,911 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2019-12-07 12:14:14,911 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2019-12-07 12:14:14,911 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 12:14:14,912 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2019-12-07 12:14:14,912 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2019-12-07 12:14:14,912 INFO L138 SettingsManager]: * Simplification Technique=SIMPLIFY_QUICK [2019-12-07 12:14:14,912 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 12:14:14,913 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 12:14:14,913 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 12:14:14,913 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 12:14:14,913 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 12:14:14,913 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 12:14:14,913 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 12:14:14,913 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 12:14:14,913 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 12:14:14,914 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 12:14:14,914 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 12:14:14,914 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 12:14:14,914 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 12:14:14,914 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 12:14:14,914 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 12:14:14,914 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 12:14:14,914 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 12:14:14,914 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 12:14:14,915 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 12:14:14,915 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 12:14:14,915 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2019-12-07 12:14:14,915 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-12-07 12:14:14,915 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 12:14:14,915 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 12:14:14,915 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 12:14:14,915 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e803bbedaeee18bc8aba1072b7c7abad6be5dde7 [2019-12-07 12:14:15,017 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 12:14:15,025 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 12:14:15,027 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 12:14:15,028 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 12:14:15,028 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 12:14:15,028 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c [2019-12-07 12:14:15,064 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/data/71303c807/9c16905b80ad428db651deae52657068/FLAG41f8ca601 [2019-12-07 12:14:15,418 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 12:14:15,419 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c [2019-12-07 12:14:15,427 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/data/71303c807/9c16905b80ad428db651deae52657068/FLAG41f8ca601 [2019-12-07 12:14:15,436 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/data/71303c807/9c16905b80ad428db651deae52657068 [2019-12-07 12:14:15,437 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 12:14:15,438 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 12:14:15,439 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 12:14:15,439 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 12:14:15,442 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 12:14:15,442 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:14:15" (1/1) ... [2019-12-07 12:14:15,444 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7c28c768 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:15, skipping insertion in model container [2019-12-07 12:14:15,444 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:14:15" (1/1) ... [2019-12-07 12:14:15,449 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 12:14:15,482 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 12:14:15,726 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 12:14:15,736 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2019-12-07 12:14:15,737 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@7adbcaf4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:15, skipping insertion in model container [2019-12-07 12:14:15,737 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 12:14:15,737 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2019-12-07 12:14:15,739 INFO L168 Benchmark]: Toolchain (without parser) took 300.14 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 138.9 MB). Free memory was 945.1 MB in the beginning and 1.1 GB in the end (delta: -183.1 MB). Peak memory consumption was 23.2 MB. Max. memory is 11.5 GB. [2019-12-07 12:14:15,740 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 961.3 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 12:14:15,741 INFO L168 Benchmark]: CACSL2BoogieTranslator took 298.23 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 138.9 MB). Free memory was 939.8 MB in the beginning and 1.1 GB in the end (delta: -188.5 MB). Peak memory consumption was 17.8 MB. Max. memory is 11.5 GB. [2019-12-07 12:14:15,742 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 961.3 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 298.23 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 138.9 MB). Free memory was 939.8 MB in the beginning and 1.1 GB in the end (delta: -188.5 MB). Peak memory consumption was 17.8 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 541]: Unsupported Syntax Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.25-f470102 [2019-12-07 12:14:16,916 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 12:14:16,918 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 12:14:16,925 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 12:14:16,926 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 12:14:16,926 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 12:14:16,927 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 12:14:16,929 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 12:14:16,930 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 12:14:16,931 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 12:14:16,931 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 12:14:16,932 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 12:14:16,932 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 12:14:16,933 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 12:14:16,933 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 12:14:16,934 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 12:14:16,935 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 12:14:16,935 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 12:14:16,937 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 12:14:16,938 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 12:14:16,940 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 12:14:16,940 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 12:14:16,941 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 12:14:16,942 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 12:14:16,943 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 12:14:16,944 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 12:14:16,944 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 12:14:16,944 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 12:14:16,944 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 12:14:16,945 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 12:14:16,945 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 12:14:16,946 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 12:14:16,946 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 12:14:16,947 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 12:14:16,947 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 12:14:16,947 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 12:14:16,948 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 12:14:16,948 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 12:14:16,948 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 12:14:16,949 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 12:14:16,949 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 12:14:16,950 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf [2019-12-07 12:14:16,959 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 12:14:16,959 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 12:14:16,960 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 12:14:16,960 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 12:14:16,960 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 12:14:16,960 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 12:14:16,961 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 12:14:16,961 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 12:14:16,961 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 12:14:16,961 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 12:14:16,961 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 12:14:16,961 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 12:14:16,962 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 12:14:16,962 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 12:14:16,962 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 12:14:16,962 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 12:14:16,962 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 12:14:16,962 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2019-12-07 12:14:16,962 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2019-12-07 12:14:16,962 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 12:14:16,963 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 12:14:16,963 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 12:14:16,963 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 12:14:16,963 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 12:14:16,963 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 12:14:16,963 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 12:14:16,963 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 12:14:16,964 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 12:14:16,964 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 12:14:16,964 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 12:14:16,964 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 12:14:16,964 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2019-12-07 12:14:16,964 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --rewrite-divk --print-success --lang smt [2019-12-07 12:14:16,964 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 12:14:16,964 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 12:14:16,965 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 12:14:16,965 INFO L138 SettingsManager]: * Logic for external solver=AUFBV Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e803bbedaeee18bc8aba1072b7c7abad6be5dde7 [2019-12-07 12:14:17,124 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 12:14:17,133 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 12:14:17,135 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 12:14:17,136 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 12:14:17,136 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 12:14:17,137 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c [2019-12-07 12:14:17,177 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/data/a1c434010/4c17e32daec24684b460dc146ae06fda/FLAGa37b386f2 [2019-12-07 12:14:17,601 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 12:14:17,602 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c [2019-12-07 12:14:17,611 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/data/a1c434010/4c17e32daec24684b460dc146ae06fda/FLAGa37b386f2 [2019-12-07 12:14:17,940 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/data/a1c434010/4c17e32daec24684b460dc146ae06fda [2019-12-07 12:14:17,942 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 12:14:17,943 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 12:14:17,943 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 12:14:17,943 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 12:14:17,946 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 12:14:17,946 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:14:17" (1/1) ... [2019-12-07 12:14:17,948 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@9aca9b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:17, skipping insertion in model container [2019-12-07 12:14:17,948 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:14:17" (1/1) ... [2019-12-07 12:14:17,953 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 12:14:17,988 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 12:14:18,171 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 12:14:18,221 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2019-12-07 12:14:18,226 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 12:14:18,269 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 12:14:18,274 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 12:14:18,315 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 12:14:18,338 INFO L208 MainTranslator]: Completed translation [2019-12-07 12:14:18,338 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18 WrapperNode [2019-12-07 12:14:18,339 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 12:14:18,339 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 12:14:18,339 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 12:14:18,339 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 12:14:18,345 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18" (1/1) ... [2019-12-07 12:14:18,359 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18" (1/1) ... [2019-12-07 12:14:18,386 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 12:14:18,386 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 12:14:18,386 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 12:14:18,386 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 12:14:18,393 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18" (1/1) ... [2019-12-07 12:14:18,393 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18" (1/1) ... [2019-12-07 12:14:18,397 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18" (1/1) ... [2019-12-07 12:14:18,398 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18" (1/1) ... [2019-12-07 12:14:18,407 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18" (1/1) ... [2019-12-07 12:14:18,414 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18" (1/1) ... [2019-12-07 12:14:18,416 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18" (1/1) ... [2019-12-07 12:14:18,419 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 12:14:18,420 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 12:14:18,420 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 12:14:18,420 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 12:14:18,421 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 12:14:18,469 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 12:14:18,469 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2019-12-07 12:14:18,470 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 12:14:18,470 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 12:14:18,985 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 12:14:18,985 INFO L287 CfgBuilder]: Removed 174 assume(true) statements. [2019-12-07 12:14:18,986 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 12:14:18 BoogieIcfgContainer [2019-12-07 12:14:18,986 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 12:14:18,987 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-12-07 12:14:18,987 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-12-07 12:14:18,989 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-12-07 12:14:18,989 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 12:14:17" (1/3) ... [2019-12-07 12:14:18,990 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@50551c3c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 12:14:18, skipping insertion in model container [2019-12-07 12:14:18,990 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:14:18" (2/3) ... [2019-12-07 12:14:18,990 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@50551c3c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 12:14:18, skipping insertion in model container [2019-12-07 12:14:18,990 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 12:14:18" (3/3) ... [2019-12-07 12:14:18,991 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product39.cil.c [2019-12-07 12:14:18,999 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-12-07 12:14:19,004 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2019-12-07 12:14:19,012 INFO L249 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2019-12-07 12:14:19,029 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-12-07 12:14:19,029 INFO L374 AbstractCegarLoop]: Hoare is true [2019-12-07 12:14:19,029 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-12-07 12:14:19,029 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 12:14:19,029 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 12:14:19,030 INFO L378 AbstractCegarLoop]: Difference is false [2019-12-07 12:14:19,030 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 12:14:19,030 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-12-07 12:14:19,042 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states. [2019-12-07 12:14:19,046 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2019-12-07 12:14:19,046 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:19,047 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:19,047 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:19,051 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:19,051 INFO L82 PathProgramCache]: Analyzing trace with hash 570937186, now seen corresponding path program 1 times [2019-12-07 12:14:19,059 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:19,060 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [994874534] [2019-12-07 12:14:19,060 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 2 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:19,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:19,192 INFO L264 TraceCheckSpWp]: Trace formula consists of 181 conjuncts, 1 conjunts are in the unsatisfiable core [2019-12-07 12:14:19,196 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:19,206 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:19,207 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:19,210 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:19,211 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [994874534] [2019-12-07 12:14:19,211 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:14:19,212 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 2 [2019-12-07 12:14:19,212 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1019613516] [2019-12-07 12:14:19,215 INFO L442 AbstractCegarLoop]: Interpolant automaton has 2 states [2019-12-07 12:14:19,216 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:19,224 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2019-12-07 12:14:19,225 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 12:14:19,226 INFO L87 Difference]: Start difference. First operand 122 states. Second operand 2 states. [2019-12-07 12:14:19,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:19,249 INFO L93 Difference]: Finished difference Result 237 states and 358 transitions. [2019-12-07 12:14:19,249 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 12:14:19,250 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2019-12-07 12:14:19,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:19,258 INFO L225 Difference]: With dead ends: 237 [2019-12-07 12:14:19,259 INFO L226 Difference]: Without dead ends: 118 [2019-12-07 12:14:19,261 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 12:14:19,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118 states. [2019-12-07 12:14:19,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118 to 118. [2019-12-07 12:14:19,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 118 states. [2019-12-07 12:14:19,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 171 transitions. [2019-12-07 12:14:19,293 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 171 transitions. Word has length 19 [2019-12-07 12:14:19,293 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:19,293 INFO L462 AbstractCegarLoop]: Abstraction has 118 states and 171 transitions. [2019-12-07 12:14:19,293 INFO L463 AbstractCegarLoop]: Interpolant automaton has 2 states. [2019-12-07 12:14:19,294 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 171 transitions. [2019-12-07 12:14:19,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2019-12-07 12:14:19,294 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:19,295 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:19,495 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 mathsat -unsat_core_generation=3 [2019-12-07 12:14:19,495 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:19,496 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:19,496 INFO L82 PathProgramCache]: Analyzing trace with hash -1918010557, now seen corresponding path program 1 times [2019-12-07 12:14:19,496 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:19,496 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [102666118] [2019-12-07 12:14:19,497 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 3 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:19,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:19,604 INFO L264 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 12:14:19,606 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:19,619 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:19,619 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:19,628 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:19,628 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [102666118] [2019-12-07 12:14:19,628 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:14:19,628 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 12:14:19,629 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1159024039] [2019-12-07 12:14:19,630 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 12:14:19,630 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:19,630 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 12:14:19,631 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:14:19,631 INFO L87 Difference]: Start difference. First operand 118 states and 171 transitions. Second operand 4 states. [2019-12-07 12:14:19,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:19,643 INFO L93 Difference]: Finished difference Result 118 states and 171 transitions. [2019-12-07 12:14:19,644 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 12:14:19,644 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 20 [2019-12-07 12:14:19,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:19,644 INFO L225 Difference]: With dead ends: 118 [2019-12-07 12:14:19,645 INFO L226 Difference]: Without dead ends: 51 [2019-12-07 12:14:19,645 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:14:19,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2019-12-07 12:14:19,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2019-12-07 12:14:19,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 51 states. [2019-12-07 12:14:19,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 73 transitions. [2019-12-07 12:14:19,650 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 73 transitions. Word has length 20 [2019-12-07 12:14:19,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:19,651 INFO L462 AbstractCegarLoop]: Abstraction has 51 states and 73 transitions. [2019-12-07 12:14:19,651 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 12:14:19,651 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 73 transitions. [2019-12-07 12:14:19,651 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2019-12-07 12:14:19,651 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:19,652 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:19,852 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 mathsat -unsat_core_generation=3 [2019-12-07 12:14:19,852 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:19,853 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:19,853 INFO L82 PathProgramCache]: Analyzing trace with hash 333982465, now seen corresponding path program 1 times [2019-12-07 12:14:19,854 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:19,854 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [39600270] [2019-12-07 12:14:19,854 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 4 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:19,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:19,987 INFO L264 TraceCheckSpWp]: Trace formula consists of 188 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 12:14:19,989 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:19,998 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:19,998 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:20,005 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:20,005 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [39600270] [2019-12-07 12:14:20,005 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:14:20,006 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 3 [2019-12-07 12:14:20,006 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1288607845] [2019-12-07 12:14:20,006 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 12:14:20,006 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:20,006 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 12:14:20,007 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:14:20,007 INFO L87 Difference]: Start difference. First operand 51 states and 73 transitions. Second operand 4 states. [2019-12-07 12:14:20,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:20,026 INFO L93 Difference]: Finished difference Result 165 states and 243 transitions. [2019-12-07 12:14:20,026 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 12:14:20,026 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 26 [2019-12-07 12:14:20,027 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:20,028 INFO L225 Difference]: With dead ends: 165 [2019-12-07 12:14:20,028 INFO L226 Difference]: Without dead ends: 121 [2019-12-07 12:14:20,028 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:14:20,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2019-12-07 12:14:20,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 73. [2019-12-07 12:14:20,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 73 states. [2019-12-07 12:14:20,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 106 transitions. [2019-12-07 12:14:20,038 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 106 transitions. Word has length 26 [2019-12-07 12:14:20,038 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:20,038 INFO L462 AbstractCegarLoop]: Abstraction has 73 states and 106 transitions. [2019-12-07 12:14:20,038 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 12:14:20,038 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 106 transitions. [2019-12-07 12:14:20,039 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2019-12-07 12:14:20,039 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:20,039 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:20,240 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 mathsat -unsat_core_generation=3 [2019-12-07 12:14:20,240 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:20,241 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:20,241 INFO L82 PathProgramCache]: Analyzing trace with hash 139090872, now seen corresponding path program 1 times [2019-12-07 12:14:20,242 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:20,242 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [164563442] [2019-12-07 12:14:20,243 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 5 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:20,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:20,422 INFO L264 TraceCheckSpWp]: Trace formula consists of 190 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 12:14:20,424 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:20,430 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:20,430 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:20,432 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:20,433 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [164563442] [2019-12-07 12:14:20,433 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:14:20,433 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 12:14:20,433 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1796076520] [2019-12-07 12:14:20,434 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 12:14:20,434 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:20,434 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 12:14:20,434 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 12:14:20,434 INFO L87 Difference]: Start difference. First operand 73 states and 106 transitions. Second operand 3 states. [2019-12-07 12:14:20,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:20,493 INFO L93 Difference]: Finished difference Result 163 states and 239 transitions. [2019-12-07 12:14:20,494 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 12:14:20,494 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2019-12-07 12:14:20,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:20,495 INFO L225 Difference]: With dead ends: 163 [2019-12-07 12:14:20,495 INFO L226 Difference]: Without dead ends: 97 [2019-12-07 12:14:20,495 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 12:14:20,496 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2019-12-07 12:14:20,505 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 95. [2019-12-07 12:14:20,505 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 95 states. [2019-12-07 12:14:20,506 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 134 transitions. [2019-12-07 12:14:20,506 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 134 transitions. Word has length 28 [2019-12-07 12:14:20,507 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:20,507 INFO L462 AbstractCegarLoop]: Abstraction has 95 states and 134 transitions. [2019-12-07 12:14:20,507 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 12:14:20,507 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 134 transitions. [2019-12-07 12:14:20,508 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2019-12-07 12:14:20,508 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:20,508 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:20,711 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 mathsat -unsat_core_generation=3 [2019-12-07 12:14:20,712 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:20,713 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:20,713 INFO L82 PathProgramCache]: Analyzing trace with hash 65503050, now seen corresponding path program 1 times [2019-12-07 12:14:20,714 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:20,715 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1266373] [2019-12-07 12:14:20,715 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 6 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:20,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:20,881 INFO L264 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:14:20,882 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:20,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:20,895 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:20,900 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:20,900 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1266373] [2019-12-07 12:14:20,900 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:14:20,900 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 12:14:20,900 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1554505405] [2019-12-07 12:14:20,901 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 12:14:20,901 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:20,901 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 12:14:20,901 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 12:14:20,901 INFO L87 Difference]: Start difference. First operand 95 states and 134 transitions. Second operand 5 states. [2019-12-07 12:14:21,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:21,031 INFO L93 Difference]: Finished difference Result 308 states and 436 transitions. [2019-12-07 12:14:21,031 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 12:14:21,031 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 29 [2019-12-07 12:14:21,031 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:21,033 INFO L225 Difference]: With dead ends: 308 [2019-12-07 12:14:21,033 INFO L226 Difference]: Without dead ends: 220 [2019-12-07 12:14:21,034 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-12-07 12:14:21,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2019-12-07 12:14:21,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 93. [2019-12-07 12:14:21,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 93 states. [2019-12-07 12:14:21,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 128 transitions. [2019-12-07 12:14:21,049 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 128 transitions. Word has length 29 [2019-12-07 12:14:21,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:21,050 INFO L462 AbstractCegarLoop]: Abstraction has 93 states and 128 transitions. [2019-12-07 12:14:21,050 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 12:14:21,050 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 128 transitions. [2019-12-07 12:14:21,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 12:14:21,051 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:21,051 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:21,251 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 mathsat -unsat_core_generation=3 [2019-12-07 12:14:21,252 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:21,253 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:21,253 INFO L82 PathProgramCache]: Analyzing trace with hash -755991289, now seen corresponding path program 1 times [2019-12-07 12:14:21,254 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:21,254 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [688384268] [2019-12-07 12:14:21,254 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 7 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:21,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:21,403 INFO L264 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:14:21,405 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:21,427 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:21,427 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:21,432 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:21,433 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [688384268] [2019-12-07 12:14:21,433 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:14:21,433 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 12:14:21,433 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1615637345] [2019-12-07 12:14:21,433 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 12:14:21,433 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:21,434 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 12:14:21,434 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 12:14:21,434 INFO L87 Difference]: Start difference. First operand 93 states and 128 transitions. Second operand 5 states. [2019-12-07 12:14:21,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:21,480 INFO L93 Difference]: Finished difference Result 272 states and 374 transitions. [2019-12-07 12:14:21,481 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-12-07 12:14:21,481 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2019-12-07 12:14:21,481 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:21,482 INFO L225 Difference]: With dead ends: 272 [2019-12-07 12:14:21,482 INFO L226 Difference]: Without dead ends: 186 [2019-12-07 12:14:21,482 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 12:14:21,483 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 186 states. [2019-12-07 12:14:21,490 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 186 to 99. [2019-12-07 12:14:21,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 99 states. [2019-12-07 12:14:21,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 134 transitions. [2019-12-07 12:14:21,490 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 134 transitions. Word has length 34 [2019-12-07 12:14:21,490 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:21,491 INFO L462 AbstractCegarLoop]: Abstraction has 99 states and 134 transitions. [2019-12-07 12:14:21,491 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 12:14:21,491 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 134 transitions. [2019-12-07 12:14:21,491 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 12:14:21,491 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:21,491 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:21,692 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 mathsat -unsat_core_generation=3 [2019-12-07 12:14:21,692 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:21,693 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:21,693 INFO L82 PathProgramCache]: Analyzing trace with hash -54926711, now seen corresponding path program 1 times [2019-12-07 12:14:21,694 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:21,694 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1633995480] [2019-12-07 12:14:21,694 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 8 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:21,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:21,821 INFO L264 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 12:14:21,822 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:21,829 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:21,830 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:21,839 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:21,839 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1633995480] [2019-12-07 12:14:21,839 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:14:21,840 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2019-12-07 12:14:21,840 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [166537723] [2019-12-07 12:14:21,840 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 12:14:21,840 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:21,840 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 12:14:21,840 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2019-12-07 12:14:21,840 INFO L87 Difference]: Start difference. First operand 99 states and 134 transitions. Second operand 6 states. [2019-12-07 12:14:21,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:21,890 INFO L93 Difference]: Finished difference Result 289 states and 391 transitions. [2019-12-07 12:14:21,890 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 12:14:21,890 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 34 [2019-12-07 12:14:21,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:21,892 INFO L225 Difference]: With dead ends: 289 [2019-12-07 12:14:21,892 INFO L226 Difference]: Without dead ends: 197 [2019-12-07 12:14:21,893 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 12:14:21,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2019-12-07 12:14:21,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 103. [2019-12-07 12:14:21,902 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 103 states. [2019-12-07 12:14:21,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 138 transitions. [2019-12-07 12:14:21,903 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 138 transitions. Word has length 34 [2019-12-07 12:14:21,903 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:21,903 INFO L462 AbstractCegarLoop]: Abstraction has 103 states and 138 transitions. [2019-12-07 12:14:21,903 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 12:14:21,903 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 138 transitions. [2019-12-07 12:14:21,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 12:14:21,904 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:21,904 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:22,104 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 mathsat -unsat_core_generation=3 [2019-12-07 12:14:22,105 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:22,105 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:22,105 INFO L82 PathProgramCache]: Analyzing trace with hash -641732725, now seen corresponding path program 1 times [2019-12-07 12:14:22,106 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:22,106 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1205165554] [2019-12-07 12:14:22,106 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 9 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:22,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:22,251 INFO L264 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 12:14:22,252 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:22,257 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:22,257 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:22,264 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:22,264 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1205165554] [2019-12-07 12:14:22,264 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:14:22,264 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 3 [2019-12-07 12:14:22,264 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1976874393] [2019-12-07 12:14:22,265 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 12:14:22,265 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:22,265 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 12:14:22,265 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:14:22,265 INFO L87 Difference]: Start difference. First operand 103 states and 138 transitions. Second operand 4 states. [2019-12-07 12:14:22,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:22,311 INFO L93 Difference]: Finished difference Result 331 states and 448 transitions. [2019-12-07 12:14:22,311 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 12:14:22,312 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2019-12-07 12:14:22,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:22,313 INFO L225 Difference]: With dead ends: 331 [2019-12-07 12:14:22,313 INFO L226 Difference]: Without dead ends: 235 [2019-12-07 12:14:22,313 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:14:22,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2019-12-07 12:14:22,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 183. [2019-12-07 12:14:22,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 183 states. [2019-12-07 12:14:22,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 183 states to 183 states and 245 transitions. [2019-12-07 12:14:22,325 INFO L78 Accepts]: Start accepts. Automaton has 183 states and 245 transitions. Word has length 34 [2019-12-07 12:14:22,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:22,325 INFO L462 AbstractCegarLoop]: Abstraction has 183 states and 245 transitions. [2019-12-07 12:14:22,325 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 12:14:22,326 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 245 transitions. [2019-12-07 12:14:22,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2019-12-07 12:14:22,326 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:22,326 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:22,527 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 mathsat -unsat_core_generation=3 [2019-12-07 12:14:22,528 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:22,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:22,528 INFO L82 PathProgramCache]: Analyzing trace with hash -2037678901, now seen corresponding path program 1 times [2019-12-07 12:14:22,529 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:22,529 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [703558119] [2019-12-07 12:14:22,529 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 10 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:22,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:22,676 INFO L264 TraceCheckSpWp]: Trace formula consists of 203 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 12:14:22,677 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:22,694 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:22,694 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:22,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:22,698 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [703558119] [2019-12-07 12:14:22,698 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:14:22,698 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 12:14:22,699 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2009324096] [2019-12-07 12:14:22,699 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 12:14:22,699 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:22,699 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 12:14:22,699 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 12:14:22,699 INFO L87 Difference]: Start difference. First operand 183 states and 245 transitions. Second operand 6 states. [2019-12-07 12:14:23,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:23,049 INFO L93 Difference]: Finished difference Result 930 states and 1260 transitions. [2019-12-07 12:14:23,049 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 12:14:23,049 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2019-12-07 12:14:23,050 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:23,052 INFO L225 Difference]: With dead ends: 930 [2019-12-07 12:14:23,052 INFO L226 Difference]: Without dead ends: 754 [2019-12-07 12:14:23,053 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2019-12-07 12:14:23,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 754 states. [2019-12-07 12:14:23,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 754 to 335. [2019-12-07 12:14:23,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 335 states. [2019-12-07 12:14:23,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 335 states to 335 states and 443 transitions. [2019-12-07 12:14:23,079 INFO L78 Accepts]: Start accepts. Automaton has 335 states and 443 transitions. Word has length 35 [2019-12-07 12:14:23,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:23,079 INFO L462 AbstractCegarLoop]: Abstraction has 335 states and 443 transitions. [2019-12-07 12:14:23,079 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 12:14:23,079 INFO L276 IsEmpty]: Start isEmpty. Operand 335 states and 443 transitions. [2019-12-07 12:14:23,079 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2019-12-07 12:14:23,079 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:23,080 INFO L410 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:23,280 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 mathsat -unsat_core_generation=3 [2019-12-07 12:14:23,280 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:23,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:23,280 INFO L82 PathProgramCache]: Analyzing trace with hash 463651681, now seen corresponding path program 1 times [2019-12-07 12:14:23,281 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:23,281 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1119337584] [2019-12-07 12:14:23,281 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 11 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:23,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:23,400 INFO L264 TraceCheckSpWp]: Trace formula consists of 230 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:14:23,401 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:23,419 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:23,419 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:23,439 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:23,439 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1119337584] [2019-12-07 12:14:23,439 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1502804787] [2019-12-07 12:14:23,439 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/cvc4 Starting monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:14:23,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:23,529 INFO L264 TraceCheckSpWp]: Trace formula consists of 230 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 12:14:23,530 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:23,533 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:23,534 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:23,538 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:23,538 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1473808659] [2019-12-07 12:14:23,538 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/z3 Starting monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 12:14:23,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:23,634 INFO L264 TraceCheckSpWp]: Trace formula consists of 230 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:14:23,636 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:23,639 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:23,639 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:23,645 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:14:23,645 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 12:14:23,645 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 8 [2019-12-07 12:14:23,646 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065231272] [2019-12-07 12:14:23,646 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 12:14:23,647 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:23,647 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 12:14:23,647 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2019-12-07 12:14:23,647 INFO L87 Difference]: Start difference. First operand 335 states and 443 transitions. Second operand 8 states. [2019-12-07 12:14:23,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:23,978 INFO L93 Difference]: Finished difference Result 836 states and 1121 transitions. [2019-12-07 12:14:23,978 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2019-12-07 12:14:23,978 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 56 [2019-12-07 12:14:23,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:23,981 INFO L225 Difference]: With dead ends: 836 [2019-12-07 12:14:23,981 INFO L226 Difference]: Without dead ends: 508 [2019-12-07 12:14:23,982 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 339 GetRequests, 328 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=101, Unknown=0, NotChecked=0, Total=156 [2019-12-07 12:14:23,982 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 508 states. [2019-12-07 12:14:24,008 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 508 to 320. [2019-12-07 12:14:24,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 320 states. [2019-12-07 12:14:24,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 411 transitions. [2019-12-07 12:14:24,010 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 411 transitions. Word has length 56 [2019-12-07 12:14:24,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:24,010 INFO L462 AbstractCegarLoop]: Abstraction has 320 states and 411 transitions. [2019-12-07 12:14:24,010 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 12:14:24,010 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 411 transitions. [2019-12-07 12:14:24,011 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2019-12-07 12:14:24,011 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:24,011 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:24,612 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 cvc4 --incremental --print-success --lang smt --rewrite-divk,13 z3 -smt2 -in SMTLIB2_COMPLIANT=true,11 mathsat -unsat_core_generation=3 [2019-12-07 12:14:24,613 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:24,613 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:24,613 INFO L82 PathProgramCache]: Analyzing trace with hash -923244266, now seen corresponding path program 1 times [2019-12-07 12:14:24,613 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:24,614 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1465667356] [2019-12-07 12:14:24,614 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 14 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:24,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:24,734 INFO L264 TraceCheckSpWp]: Trace formula consists of 287 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:14:24,736 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:24,761 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 75 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 12:14:24,761 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:24,796 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 75 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 12:14:24,796 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1465667356] [2019-12-07 12:14:24,796 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [706631876] [2019-12-07 12:14:24,796 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/cvc4 Starting monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:14:24,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:24,895 INFO L264 TraceCheckSpWp]: Trace formula consists of 287 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:14:24,896 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:24,938 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 58 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:14:24,939 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:24,950 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 58 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:14:24,951 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [386155289] [2019-12-07 12:14:24,951 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/z3 Starting monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 12:14:25,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:25,029 INFO L264 TraceCheckSpWp]: Trace formula consists of 287 conjuncts, 9 conjunts are in the unsatisfiable core [2019-12-07 12:14:25,031 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:25,064 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 89 proven. 2 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 12:14:25,064 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:25,105 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 91 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 12:14:25,105 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 5 imperfect interpolant sequences. [2019-12-07 12:14:25,106 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [5, 5, 5, 5, 8] total 18 [2019-12-07 12:14:25,106 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [127570529] [2019-12-07 12:14:25,106 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 12:14:25,106 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:25,107 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 12:14:25,107 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=256, Unknown=0, NotChecked=0, Total=306 [2019-12-07 12:14:25,107 INFO L87 Difference]: Start difference. First operand 320 states and 411 transitions. Second operand 8 states. [2019-12-07 12:14:25,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:25,513 INFO L93 Difference]: Finished difference Result 1329 states and 1718 transitions. [2019-12-07 12:14:25,514 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2019-12-07 12:14:25,514 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 99 [2019-12-07 12:14:25,514 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:25,518 INFO L225 Difference]: With dead ends: 1329 [2019-12-07 12:14:25,518 INFO L226 Difference]: Without dead ends: 1016 [2019-12-07 12:14:25,519 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 609 GetRequests, 581 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 92 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=161, Invalid=709, Unknown=0, NotChecked=0, Total=870 [2019-12-07 12:14:25,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1016 states. [2019-12-07 12:14:25,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1016 to 573. [2019-12-07 12:14:25,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 573 states. [2019-12-07 12:14:25,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 573 states to 573 states and 746 transitions. [2019-12-07 12:14:25,560 INFO L78 Accepts]: Start accepts. Automaton has 573 states and 746 transitions. Word has length 99 [2019-12-07 12:14:25,561 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:25,561 INFO L462 AbstractCegarLoop]: Abstraction has 573 states and 746 transitions. [2019-12-07 12:14:25,561 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 12:14:25,561 INFO L276 IsEmpty]: Start isEmpty. Operand 573 states and 746 transitions. [2019-12-07 12:14:25,562 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2019-12-07 12:14:25,562 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:25,562 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:26,163 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 z3 -smt2 -in SMTLIB2_COMPLIANT=true,14 mathsat -unsat_core_generation=3,15 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:14:26,164 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:26,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:26,165 INFO L82 PathProgramCache]: Analyzing trace with hash -1823543621, now seen corresponding path program 1 times [2019-12-07 12:14:26,166 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:26,166 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1941598584] [2019-12-07 12:14:26,166 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 17 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:26,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:26,288 INFO L264 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:14:26,290 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:26,305 INFO L134 CoverageAnalysis]: Checked inductivity of 109 backedges. 90 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 12:14:26,305 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:26,332 INFO L134 CoverageAnalysis]: Checked inductivity of 109 backedges. 90 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 12:14:26,332 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1941598584] [2019-12-07 12:14:26,332 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:14:26,332 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2019-12-07 12:14:26,333 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [911166234] [2019-12-07 12:14:26,333 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 12:14:26,333 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:26,333 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 12:14:26,333 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2019-12-07 12:14:26,333 INFO L87 Difference]: Start difference. First operand 573 states and 746 transitions. Second operand 8 states. [2019-12-07 12:14:26,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:26,650 INFO L93 Difference]: Finished difference Result 1370 states and 1768 transitions. [2019-12-07 12:14:26,651 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 12:14:26,651 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 101 [2019-12-07 12:14:26,651 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:26,654 INFO L225 Difference]: With dead ends: 1370 [2019-12-07 12:14:26,654 INFO L226 Difference]: Without dead ends: 804 [2019-12-07 12:14:26,655 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 206 GetRequests, 196 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2019-12-07 12:14:26,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 804 states. [2019-12-07 12:14:26,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 804 to 573. [2019-12-07 12:14:26,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 573 states. [2019-12-07 12:14:26,693 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 573 states to 573 states and 737 transitions. [2019-12-07 12:14:26,693 INFO L78 Accepts]: Start accepts. Automaton has 573 states and 737 transitions. Word has length 101 [2019-12-07 12:14:26,693 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:26,694 INFO L462 AbstractCegarLoop]: Abstraction has 573 states and 737 transitions. [2019-12-07 12:14:26,694 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 12:14:26,694 INFO L276 IsEmpty]: Start isEmpty. Operand 573 states and 737 transitions. [2019-12-07 12:14:26,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2019-12-07 12:14:26,694 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:26,695 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:26,895 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 mathsat -unsat_core_generation=3 [2019-12-07 12:14:26,895 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:26,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:26,895 INFO L82 PathProgramCache]: Analyzing trace with hash 381990553, now seen corresponding path program 1 times [2019-12-07 12:14:26,896 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:26,896 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [243270648] [2019-12-07 12:14:26,896 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 18 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:26,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:27,008 INFO L264 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:14:27,010 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:27,032 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:14:27,032 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:27,042 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:14:27,042 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [243270648] [2019-12-07 12:14:27,042 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [571433466] [2019-12-07 12:14:27,042 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/cvc4 Starting monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:14:27,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:27,139 INFO L264 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:14:27,140 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:27,149 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:14:27,149 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:27,159 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:14:27,159 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [816762674] [2019-12-07 12:14:27,159 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/z3 Starting monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 12:14:27,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:27,247 INFO L264 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:14:27,248 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:27,257 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:14:27,257 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:27,266 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:14:27,266 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 12:14:27,267 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 5 [2019-12-07 12:14:27,267 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1938859799] [2019-12-07 12:14:27,267 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 12:14:27,267 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:27,267 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 12:14:27,268 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 12:14:27,268 INFO L87 Difference]: Start difference. First operand 573 states and 737 transitions. Second operand 6 states. [2019-12-07 12:14:27,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:27,492 INFO L93 Difference]: Finished difference Result 3345 states and 4349 transitions. [2019-12-07 12:14:27,492 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 12:14:27,493 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 102 [2019-12-07 12:14:27,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:27,502 INFO L225 Difference]: With dead ends: 3345 [2019-12-07 12:14:27,502 INFO L226 Difference]: Without dead ends: 2779 [2019-12-07 12:14:27,503 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 612 GetRequests, 602 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2019-12-07 12:14:27,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2779 states. [2019-12-07 12:14:27,614 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2779 to 1125. [2019-12-07 12:14:27,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1125 states. [2019-12-07 12:14:27,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1125 states to 1125 states and 1422 transitions. [2019-12-07 12:14:27,617 INFO L78 Accepts]: Start accepts. Automaton has 1125 states and 1422 transitions. Word has length 102 [2019-12-07 12:14:27,617 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:27,617 INFO L462 AbstractCegarLoop]: Abstraction has 1125 states and 1422 transitions. [2019-12-07 12:14:27,617 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 12:14:27,617 INFO L276 IsEmpty]: Start isEmpty. Operand 1125 states and 1422 transitions. [2019-12-07 12:14:27,618 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2019-12-07 12:14:27,618 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:27,618 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:28,219 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 mathsat -unsat_core_generation=3,20 z3 -smt2 -in SMTLIB2_COMPLIANT=true,19 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:14:28,219 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:28,220 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:28,220 INFO L82 PathProgramCache]: Analyzing trace with hash -69176943, now seen corresponding path program 1 times [2019-12-07 12:14:28,220 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:28,220 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1243550695] [2019-12-07 12:14:28,220 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 21 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:28,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:14:28,331 INFO L264 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:14:28,332 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:28,357 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2019-12-07 12:14:28,357 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:28,389 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2019-12-07 12:14:28,389 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1243550695] [2019-12-07 12:14:28,389 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:14:28,389 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 10 [2019-12-07 12:14:28,390 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [480097975] [2019-12-07 12:14:28,390 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-12-07 12:14:28,390 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:28,390 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-12-07 12:14:28,390 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2019-12-07 12:14:28,390 INFO L87 Difference]: Start difference. First operand 1125 states and 1422 transitions. Second operand 10 states. [2019-12-07 12:14:28,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:28,766 INFO L93 Difference]: Finished difference Result 3413 states and 4339 transitions. [2019-12-07 12:14:28,767 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2019-12-07 12:14:28,767 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 103 [2019-12-07 12:14:28,767 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:28,774 INFO L225 Difference]: With dead ends: 3413 [2019-12-07 12:14:28,774 INFO L226 Difference]: Without dead ends: 2295 [2019-12-07 12:14:28,776 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 213 GetRequests, 200 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=66, Invalid=144, Unknown=0, NotChecked=0, Total=210 [2019-12-07 12:14:28,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2295 states. [2019-12-07 12:14:28,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2295 to 1041. [2019-12-07 12:14:28,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1041 states. [2019-12-07 12:14:28,875 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1041 states to 1041 states and 1297 transitions. [2019-12-07 12:14:28,875 INFO L78 Accepts]: Start accepts. Automaton has 1041 states and 1297 transitions. Word has length 103 [2019-12-07 12:14:28,875 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:28,875 INFO L462 AbstractCegarLoop]: Abstraction has 1041 states and 1297 transitions. [2019-12-07 12:14:28,875 INFO L463 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-12-07 12:14:28,875 INFO L276 IsEmpty]: Start isEmpty. Operand 1041 states and 1297 transitions. [2019-12-07 12:14:28,876 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2019-12-07 12:14:28,876 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:14:28,876 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:14:29,077 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 mathsat -unsat_core_generation=3 [2019-12-07 12:14:29,077 INFO L410 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:14:29,078 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:14:29,078 INFO L82 PathProgramCache]: Analyzing trace with hash 865003501, now seen corresponding path program 2 times [2019-12-07 12:14:29,079 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:14:29,079 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1893242310] [2019-12-07 12:14:29,079 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/mathsat Starting monitored process 22 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with mathsat -unsat_core_generation=3 [2019-12-07 12:14:30,060 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 12:14:30,060 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 12:14:30,088 INFO L264 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:14:30,090 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:30,119 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 17 proven. 80 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 12:14:30,119 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:30,181 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 17 proven. 80 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 12:14:30,181 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1893242310] [2019-12-07 12:14:30,181 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1555546601] [2019-12-07 12:14:30,181 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/cvc4 Starting monitored process 23 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:14:31,632 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 12:14:31,632 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 12:14:31,661 INFO L264 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 12:14:31,663 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:31,713 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 12:14:31,713 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:31,762 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 12:14:31,762 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1690128298] [2019-12-07 12:14:31,762 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/z3 Starting monitored process 24 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 12:14:31,884 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 12:14:31,884 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 12:14:31,889 INFO L264 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 12:14:31,891 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:14:31,900 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 12:14:31,900 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:14:31,908 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 12:14:31,908 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 12:14:31,909 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 7, 7, 7, 7] total 14 [2019-12-07 12:14:31,909 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1971011433] [2019-12-07 12:14:31,909 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2019-12-07 12:14:31,909 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:14:31,910 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2019-12-07 12:14:31,910 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=145, Unknown=0, NotChecked=0, Total=182 [2019-12-07 12:14:31,910 INFO L87 Difference]: Start difference. First operand 1041 states and 1297 transitions. Second operand 14 states. [2019-12-07 12:14:32,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:14:32,427 INFO L93 Difference]: Finished difference Result 2159 states and 2694 transitions. [2019-12-07 12:14:32,427 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2019-12-07 12:14:32,427 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 103 [2019-12-07 12:14:32,427 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:14:32,427 INFO L225 Difference]: With dead ends: 2159 [2019-12-07 12:14:32,427 INFO L226 Difference]: Without dead ends: 0 [2019-12-07 12:14:32,429 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 625 GetRequests, 601 SyntacticMatches, 3 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 68 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=122, Invalid=384, Unknown=0, NotChecked=0, Total=506 [2019-12-07 12:14:32,429 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-12-07 12:14:32,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-12-07 12:14:32,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-12-07 12:14:32,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 12:14:32,430 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 103 [2019-12-07 12:14:32,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:14:32,430 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 12:14:32,430 INFO L463 AbstractCegarLoop]: Interpolant automaton has 14 states. [2019-12-07 12:14:32,430 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-12-07 12:14:32,430 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-12-07 12:14:33,031 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 mathsat -unsat_core_generation=3,24 z3 -smt2 -in SMTLIB2_COMPLIANT=true,23 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:14:33,034 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-12-07 12:14:34,105 WARN L192 SmtUtils]: Spent 1.06 s on a formula simplification. DAG size of input: 546 DAG size of output: 515 [2019-12-07 12:14:34,719 WARN L192 SmtUtils]: Spent 610.00 ms on a formula simplification. DAG size of input: 456 DAG size of output: 430 [2019-12-07 12:14:35,403 WARN L192 SmtUtils]: Spent 681.00 ms on a formula simplification. DAG size of input: 508 DAG size of output: 478 [2019-12-07 12:14:35,677 WARN L192 SmtUtils]: Spent 271.00 ms on a formula simplification. DAG size of input: 343 DAG size of output: 338 [2019-12-07 12:14:35,842 WARN L192 SmtUtils]: Spent 162.00 ms on a formula simplification. DAG size of input: 261 DAG size of output: 256 [2019-12-07 12:14:36,615 WARN L192 SmtUtils]: Spent 770.00 ms on a formula simplification. DAG size of input: 526 DAG size of output: 506 [2019-12-07 12:14:36,739 WARN L192 SmtUtils]: Spent 122.00 ms on a formula simplification. DAG size of input: 216 DAG size of output: 210 [2019-12-07 12:14:37,041 WARN L192 SmtUtils]: Spent 270.00 ms on a formula simplification. DAG size of input: 271 DAG size of output: 249 [2019-12-07 12:14:37,708 WARN L192 SmtUtils]: Spent 664.00 ms on a formula simplification. DAG size of input: 500 DAG size of output: 474 [2019-12-07 12:14:38,122 WARN L192 SmtUtils]: Spent 411.00 ms on a formula simplification. DAG size of input: 407 DAG size of output: 381 [2019-12-07 12:14:38,902 WARN L192 SmtUtils]: Spent 777.00 ms on a formula simplification. DAG size of input: 518 DAG size of output: 496 [2019-12-07 12:14:39,726 WARN L192 SmtUtils]: Spent 725.00 ms on a formula simplification. DAG size of input: 497 DAG size of output: 471 [2019-12-07 12:14:46,475 WARN L192 SmtUtils]: Spent 6.74 s on a formula simplification. DAG size of input: 514 DAG size of output: 88 [2019-12-07 12:14:51,624 WARN L192 SmtUtils]: Spent 5.14 s on a formula simplification. DAG size of input: 425 DAG size of output: 78 [2019-12-07 12:14:59,009 WARN L192 SmtUtils]: Spent 7.38 s on a formula simplification. DAG size of input: 473 DAG size of output: 75 [2019-12-07 12:15:02,715 WARN L192 SmtUtils]: Spent 3.70 s on a formula simplification. DAG size of input: 336 DAG size of output: 77 [2019-12-07 12:15:04,565 WARN L192 SmtUtils]: Spent 1.85 s on a formula simplification. DAG size of input: 237 DAG size of output: 47 [2019-12-07 12:15:11,677 WARN L192 SmtUtils]: Spent 7.11 s on a formula simplification. DAG size of input: 505 DAG size of output: 82 [2019-12-07 12:15:13,370 WARN L192 SmtUtils]: Spent 1.69 s on a formula simplification. DAG size of input: 210 DAG size of output: 48 [2019-12-07 12:15:13,740 WARN L192 SmtUtils]: Spent 364.00 ms on a formula simplification. DAG size of input: 95 DAG size of output: 45 [2019-12-07 12:15:15,903 WARN L192 SmtUtils]: Spent 2.15 s on a formula simplification. DAG size of input: 249 DAG size of output: 40 [2019-12-07 12:15:22,728 WARN L192 SmtUtils]: Spent 6.81 s on a formula simplification. DAG size of input: 470 DAG size of output: 75 [2019-12-07 12:15:26,710 WARN L192 SmtUtils]: Spent 3.98 s on a formula simplification. DAG size of input: 379 DAG size of output: 81 [2019-12-07 12:15:33,920 WARN L192 SmtUtils]: Spent 7.21 s on a formula simplification. DAG size of input: 494 DAG size of output: 82 [2019-12-07 12:15:35,356 WARN L192 SmtUtils]: Spent 1.39 s on a formula simplification. DAG size of input: 155 DAG size of output: 42 [2019-12-07 12:15:35,740 WARN L192 SmtUtils]: Spent 369.00 ms on a formula simplification. DAG size of input: 99 DAG size of output: 49 [2019-12-07 12:15:44,822 WARN L192 SmtUtils]: Spent 9.08 s on a formula simplification. DAG size of input: 467 DAG size of output: 86 [2019-12-07 12:15:44,826 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2019-12-07 12:15:44,826 INFO L246 CegarLoopResult]: For program point L962(lines 962 968) no Hoare annotation was computed. [2019-12-07 12:15:44,826 INFO L246 CegarLoopResult]: For program point L962-1(lines 962 968) no Hoare annotation was computed. [2019-12-07 12:15:44,826 INFO L246 CegarLoopResult]: For program point L962-2(lines 962 968) no Hoare annotation was computed. [2019-12-07 12:15:44,826 INFO L246 CegarLoopResult]: For program point L962-3(lines 962 968) no Hoare annotation was computed. [2019-12-07 12:15:44,826 INFO L246 CegarLoopResult]: For program point L962-4(lines 962 968) no Hoare annotation was computed. [2019-12-07 12:15:44,826 INFO L246 CegarLoopResult]: For program point L962-5(lines 962 968) no Hoare annotation was computed. [2019-12-07 12:15:44,826 INFO L246 CegarLoopResult]: For program point L269(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,826 INFO L246 CegarLoopResult]: For program point L269-2(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,826 INFO L246 CegarLoopResult]: For program point L269-3(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L269-5(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L269-6(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L269-8(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L269-9(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L269-11(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L897(lines 897 901) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L269-12(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L269-14(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L269-15(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L269-17(lines 269 273) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L171(lines 171 179) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L171-1(lines 171 179) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L171-2(lines 171 179) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L246 CegarLoopResult]: For program point L436(lines 436 449) no Hoare annotation was computed. [2019-12-07 12:15:44,827 INFO L242 CegarLoopResult]: At program point L470(lines 465 472) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 12:15:44,827 INFO L242 CegarLoopResult]: At program point L74(lines 1 971) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 12:15:44,828 INFO L242 CegarLoopResult]: At program point L306-2(lines 306 320) the Hoare annotation is: false [2019-12-07 12:15:44,828 INFO L246 CegarLoopResult]: For program point L141(lines 141 158) no Hoare annotation was computed. [2019-12-07 12:15:44,828 INFO L246 CegarLoopResult]: For program point L141-1(lines 141 158) no Hoare annotation was computed. [2019-12-07 12:15:44,828 INFO L246 CegarLoopResult]: For program point L141-2(lines 141 158) no Hoare annotation was computed. [2019-12-07 12:15:44,828 INFO L246 CegarLoopResult]: For program point L141-3(lines 141 158) no Hoare annotation was computed. [2019-12-07 12:15:44,828 INFO L246 CegarLoopResult]: For program point L141-4(lines 141 158) no Hoare annotation was computed. [2019-12-07 12:15:44,828 INFO L246 CegarLoopResult]: For program point L141-5(lines 141 158) no Hoare annotation was computed. [2019-12-07 12:15:44,828 INFO L242 CegarLoopResult]: At program point L967(lines 958 971) the Hoare annotation is: false [2019-12-07 12:15:44,828 INFO L242 CegarLoopResult]: At program point L967-1(lines 958 971) the Hoare annotation is: (let ((.cse6 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse9 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse0 (= (_ bv1 32) |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse2 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse3 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse8 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse1 (not (= ~systemActive~0 (_ bv0 32)))) (.cse5 (= (_ bv0 32) ~pumpRunning~0)) (.cse11 (= ~waterLevel~0 (_ bv2 32))) (.cse10 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse5 .cse9 .cse10 .cse7 .cse8) (and .cse1 .cse5 .cse6 .cse11 .cse7) (and .cse0 .cse1 .cse5 .cse6 .cse9 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse10 .cse7 .cse8) (and .cse1 .cse5 .cse11 .cse10 .cse7))) [2019-12-07 12:15:44,828 INFO L242 CegarLoopResult]: At program point L967-2(lines 958 971) the Hoare annotation is: false [2019-12-07 12:15:44,828 INFO L242 CegarLoopResult]: At program point L967-3(lines 958 971) the Hoare annotation is: false [2019-12-07 12:15:44,828 INFO L242 CegarLoopResult]: At program point L967-4(lines 958 971) the Hoare annotation is: false [2019-12-07 12:15:44,828 INFO L242 CegarLoopResult]: At program point L967-5(lines 958 971) the Hoare annotation is: false [2019-12-07 12:15:44,828 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2019-12-07 12:15:44,828 INFO L246 CegarLoopResult]: For program point L307(line 307) no Hoare annotation was computed. [2019-12-07 12:15:44,829 INFO L242 CegarLoopResult]: At program point L109(lines 105 127) the Hoare annotation is: (let ((.cse7 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse8 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse6 (= ~waterLevel~0 (_ bv2 32))) (.cse13 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse5 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse15 (= (_ bv1 32) ~pumpRunning~0)) (.cse16 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse9 (= ~waterLevel~0 (_ bv0 32))) (.cse17 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse10 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5))) (.cse11 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse14 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse2 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse12 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse4) (and .cse7 .cse8 .cse9 .cse1 .cse10 .cse11 .cse12 .cse13 .cse4 .cse14) (and .cse0 .cse1 .cse6 .cse13 .cse4) (and .cse0 .cse7 .cse8 .cse9 .cse1 .cse2 .cse4) (and .cse7 .cse8 .cse9 .cse1 .cse2 .cse10 .cse11 .cse12 .cse4 .cse14) (and .cse1 .cse6 .cse12 .cse13 .cse4) (and .cse0 .cse15 .cse16 .cse9 .cse17 .cse10 .cse11 .cse13 .cse14 .cse4) (and .cse0 .cse7 .cse8 .cse9 .cse1 .cse13 .cse4 .cse5) (and .cse0 .cse15 .cse16 .cse2 .cse17 .cse3 .cse14 .cse4) (and .cse1 .cse3 .cse13 .cse12 .cse4) (and .cse0 .cse15 .cse16 .cse17 .cse3 .cse13 .cse4) (and .cse1 .cse2 .cse6 .cse12 .cse4) (and .cse0 .cse1 .cse3 .cse13 .cse4 .cse5) (and .cse0 .cse15 .cse16 .cse9 .cse2 .cse17 .cse10 .cse11 .cse14 .cse4) (and .cse1 .cse2 .cse3 .cse12 .cse4))) [2019-12-07 12:15:44,829 INFO L242 CegarLoopResult]: At program point L109-1(lines 105 127) the Hoare annotation is: false [2019-12-07 12:15:44,829 INFO L242 CegarLoopResult]: At program point L109-2(lines 105 127) the Hoare annotation is: false [2019-12-07 12:15:44,829 INFO L246 CegarLoopResult]: For program point L407(lines 406 453) no Hoare annotation was computed. [2019-12-07 12:15:44,829 INFO L242 CegarLoopResult]: At program point L275(lines 260 278) the Hoare annotation is: false [2019-12-07 12:15:44,829 INFO L242 CegarLoopResult]: At program point L275-1(lines 260 278) the Hoare annotation is: (let ((.cse11 (= ~waterLevel~0 (_ bv2 32))) (.cse12 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse6 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse2 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse3 (not (= ULTIMATE.start_isHighWaterLevel_~tmp~2 (_ bv0 32)))) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse5 (= (_ bv0 32) ~pumpRunning~0)) (.cse7 (= |ULTIMATE.start_isHighWaterLevel_#res| (_ bv0 32))) (.cse13 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse8 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~0 (_ bv0 32))) (.cse9 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse10 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse5 .cse6 .cse11 .cse9) (and .cse0 .cse3 .cse5 .cse12 .cse7 .cse13 .cse8 .cse9 .cse10) (and .cse0 .cse5 .cse11 .cse13 .cse9) (and .cse0 .cse3 .cse5 .cse12 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse7 .cse13 .cse8 .cse9 .cse10))) [2019-12-07 12:15:44,829 INFO L242 CegarLoopResult]: At program point L275-2(lines 260 278) the Hoare annotation is: false [2019-12-07 12:15:44,829 INFO L242 CegarLoopResult]: At program point L275-3(lines 260 278) the Hoare annotation is: false [2019-12-07 12:15:44,829 INFO L242 CegarLoopResult]: At program point L275-4(lines 260 278) the Hoare annotation is: false [2019-12-07 12:15:44,829 INFO L242 CegarLoopResult]: At program point L275-5(lines 260 278) the Hoare annotation is: false [2019-12-07 12:15:44,829 INFO L246 CegarLoopResult]: For program point L44(line 44) no Hoare annotation was computed. [2019-12-07 12:15:44,829 INFO L246 CegarLoopResult]: For program point L44-1(line 44) no Hoare annotation was computed. [2019-12-07 12:15:44,829 INFO L246 CegarLoopResult]: For program point L44-2(line 44) no Hoare annotation was computed. [2019-12-07 12:15:44,829 INFO L246 CegarLoopResult]: For program point L408(lines 408 412) no Hoare annotation was computed. [2019-12-07 12:15:44,829 INFO L246 CegarLoopResult]: For program point L442(lines 442 448) no Hoare annotation was computed. [2019-12-07 12:15:44,830 INFO L242 CegarLoopResult]: At program point L442-1(lines 442 448) the Hoare annotation is: (let ((.cse11 (= (_ bv0 32) ~pumpRunning~0)) (.cse9 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse19 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse23 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse12 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse15 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse7 (or .cse12 .cse15)) (.cse10 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32)))) (.cse14 (= ~waterLevel~0 (_ bv1 32))) (.cse6 (not .cse23)) (.cse20 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse21 (or (and .cse11 .cse23 .cse9) (and .cse11 .cse9 .cse19))) (.cse13 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse16 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse1 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse2 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse17 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse18 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse3 (= (_ bv1 32) ~pumpRunning~0)) (.cse22 (= ~waterLevel~0 (_ bv2 32))) (.cse8 (= ~methaneLevelCritical~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse1 .cse2 .cse4 .cse11 .cse6 .cse12 .cse8 .cse9 .cse13) (and .cse0 .cse3 .cse6 .cse12 .cse8 .cse14 .cse15 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse16 .cse5 .cse6 .cse7 .cse9 .cse10) (and .cse0 .cse3 .cse16 .cse6 .cse12 .cse14 .cse15 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse17 .cse4 .cse16 .cse5 .cse18 .cse9 .cse19) (and .cse16 .cse20 .cse21 .cse15 .cse13) (and .cse1 .cse2 .cse4 .cse11 .cse16 .cse6 .cse12 .cse9 .cse13) (and .cse11 .cse22 .cse8 .cse9) (and .cse20 .cse21 .cse8 .cse15 .cse13) (and .cse11 .cse16 .cse22 .cse9) (and .cse0 .cse3 .cse16 .cse22 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse17 .cse4 .cse5 .cse8 .cse18 .cse9 .cse19) (and .cse0 .cse3 .cse22 .cse8 .cse15 .cse9)))) [2019-12-07 12:15:44,830 INFO L246 CegarLoopResult]: For program point L310(lines 310 314) no Hoare annotation was computed. [2019-12-07 12:15:44,830 INFO L246 CegarLoopResult]: For program point L310-1(lines 310 314) no Hoare annotation was computed. [2019-12-07 12:15:44,830 INFO L242 CegarLoopResult]: At program point L211(lines 204 214) the Hoare annotation is: (let ((.cse9 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse5 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse13 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse15 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse2 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse10 (= ~waterLevel~0 (_ bv0 32))) (.cse4 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse11 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5))) (.cse12 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse6 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse14 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse8 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse1 .cse2 .cse10 .cse3 .cse11 .cse12 .cse13 .cse14 .cse7 .cse15) (and .cse0 .cse9 .cse1 .cse2 .cse3 .cse5 .cse13 .cse7 .cse15) (and .cse0 .cse1 .cse2 .cse10 .cse4 .cse3 .cse11 .cse12 .cse6 .cse14 .cse7 .cse8))) [2019-12-07 12:15:44,830 INFO L242 CegarLoopResult]: At program point L211-1(lines 204 214) the Hoare annotation is: false [2019-12-07 12:15:44,830 INFO L246 CegarLoopResult]: For program point L145(lines 145 153) no Hoare annotation was computed. [2019-12-07 12:15:44,830 INFO L242 CegarLoopResult]: At program point L211-2(lines 204 214) the Hoare annotation is: false [2019-12-07 12:15:44,830 INFO L246 CegarLoopResult]: For program point L145-1(lines 145 153) no Hoare annotation was computed. [2019-12-07 12:15:44,830 INFO L246 CegarLoopResult]: For program point L145-2(lines 145 153) no Hoare annotation was computed. [2019-12-07 12:15:44,830 INFO L246 CegarLoopResult]: For program point L145-3(lines 145 153) no Hoare annotation was computed. [2019-12-07 12:15:44,830 INFO L246 CegarLoopResult]: For program point L145-4(lines 145 153) no Hoare annotation was computed. [2019-12-07 12:15:44,830 INFO L246 CegarLoopResult]: For program point L145-5(lines 145 153) no Hoare annotation was computed. [2019-12-07 12:15:44,830 INFO L242 CegarLoopResult]: At program point L82(lines 77 85) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 12:15:44,831 INFO L242 CegarLoopResult]: At program point L116(lines 116 122) the Hoare annotation is: (let ((.cse6 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse7 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse5 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse14 (= ~waterLevel~0 (_ bv2 32))) (.cse15 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse17 (= (_ bv1 32) ~pumpRunning~0)) (.cse18 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse8 (= ~waterLevel~0 (_ bv0 32))) (.cse12 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse20 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse13 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse21 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse16 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse19 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse9 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5))) (.cse10 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse3 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse11 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse1 .cse9 .cse10 .cse11 .cse12 .cse4 .cse13) (and .cse6 .cse7 .cse8 .cse1 .cse3 .cse9 .cse10 .cse11 .cse4 .cse13) (and .cse0 .cse1 .cse3 .cse14 .cse15 .cse4) (and .cse0 .cse1 .cse14 .cse12 .cse15 .cse4) (and .cse0 .cse8 .cse1 .cse3 .cse9 .cse10 .cse4) (and .cse1 .cse14 .cse11 .cse12 .cse4) (and .cse0 .cse16 .cse17 .cse18 .cse19 .cse2 .cse12 .cse20 .cse4 .cse13 .cse21) (and .cse0 .cse6 .cse7 .cse8 .cse1 .cse12 .cse4 .cse5) (and .cse0 .cse17 .cse3 .cse14 .cse15 .cse4) (and .cse1 .cse2 .cse12 .cse11 .cse4) (and .cse1 .cse3 .cse14 .cse11 .cse4) (and .cse0 .cse1 .cse2 .cse12 .cse4 .cse5) (and .cse0 .cse17 .cse14 .cse12 .cse15 .cse4) (and .cse17 .cse18 .cse8 .cse12 .cse20 .cse13 .cse21 .cse0 .cse16 .cse19 .cse9 .cse10 .cse4) (and .cse1 .cse3 .cse2 .cse11 .cse4))) [2019-12-07 12:15:44,831 INFO L242 CegarLoopResult]: At program point L116-1(lines 116 122) the Hoare annotation is: false [2019-12-07 12:15:44,831 INFO L242 CegarLoopResult]: At program point L116-2(lines 116 122) the Hoare annotation is: false [2019-12-07 12:15:44,831 INFO L246 CegarLoopResult]: For program point L909(lines 909 913) no Hoare annotation was computed. [2019-12-07 12:15:44,831 INFO L242 CegarLoopResult]: At program point L480(lines 109 115) the Hoare annotation is: (let ((.cse17 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse16 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse9 (or .cse17 .cse16)) (.cse11 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32)))) (.cse8 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5))) (.cse18 (= ~waterLevel~0 (_ bv1 32))) (.cse13 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse15 (= ~waterLevel~0 (_ bv2 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse2 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse4 (= (_ bv1 32) ~pumpRunning~0)) (.cse3 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse5 (= ~waterLevel~0 (_ bv0 32))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse20 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse21 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse12 (= (_ bv0 32) ~pumpRunning~0)) (.cse7 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse19 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse14 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse1 .cse2 .cse5 .cse12 .cse13 .cse14 .cse10) (and .cse0 .cse4 .cse3 .cse6 .cse15 .cse13 .cse16 .cse10) (and .cse0 .cse4 .cse3 .cse6 .cse8 .cse17 .cse13 .cse18 .cse16 .cse10) (and .cse0 .cse4 .cse3 .cse6 .cse7 .cse15 .cse16 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8 .cse9 .cse13 .cse10 .cse11) (and .cse12 .cse15 .cse14 .cse13 .cse10) (and .cse0 .cse4 .cse3 .cse6 .cse7 .cse8 .cse17 .cse18 .cse16 .cse10) (and .cse12 .cse19 .cse13 .cse14 .cse10) (and .cse1 .cse2 .cse5 .cse12 .cse7 .cse14 .cse10) (and .cse0 .cse1 .cse2 .cse4 .cse3 .cse5 .cse6 .cse13 .cse20 .cse10 .cse21) (and .cse12 .cse7 .cse15 .cse14 .cse10) (and .cse0 .cse1 .cse2 .cse4 .cse3 .cse5 .cse6 .cse7 .cse20 .cse10 .cse21) (and .cse12 .cse7 .cse19 .cse14 .cse10)))) [2019-12-07 12:15:44,831 INFO L242 CegarLoopResult]: At program point L480-1(lines 109 115) the Hoare annotation is: false [2019-12-07 12:15:44,831 INFO L242 CegarLoopResult]: At program point L480-2(lines 109 115) the Hoare annotation is: false [2019-12-07 12:15:44,831 INFO L246 CegarLoopResult]: For program point L382(lines 382 389) no Hoare annotation was computed. [2019-12-07 12:15:44,831 INFO L249 CegarLoopResult]: At program point L382-1(lines 382 389) the Hoare annotation is: true [2019-12-07 12:15:44,831 INFO L246 CegarLoopResult]: For program point L283(lines 283 289) no Hoare annotation was computed. [2019-12-07 12:15:44,831 INFO L242 CegarLoopResult]: At program point L283-1(lines 283 289) the Hoare annotation is: (let ((.cse1 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse2 (= ~waterLevel~0 (_ bv2 32))) (.cse5 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse6 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse7 (= ~waterLevel~0 (_ bv0 32))) (.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse8 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5))) (.cse9 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse11 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse3 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse10 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse4 .cse3) (and .cse5 .cse6 .cse7 .cse0 .cse1 .cse8 .cse9 .cse3 .cse10) (and .cse0 .cse4 .cse11 .cse3) (and .cse0 .cse2 .cse11 .cse3) (and .cse5 .cse6 .cse7 .cse0 .cse8 .cse9 .cse11 .cse3 .cse10))) [2019-12-07 12:15:44,832 INFO L246 CegarLoopResult]: For program point L416(lines 416 422) no Hoare annotation was computed. [2019-12-07 12:15:44,832 INFO L242 CegarLoopResult]: At program point L416-1(lines 416 422) the Hoare annotation is: (let ((.cse16 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|)) (.cse15 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5))) (let ((.cse2 (not .cse15)) (.cse3 (not .cse16)) (.cse5 (= ~waterLevel~0 (_ bv1 32))) (.cse11 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse12 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse13 (= ~waterLevel~0 (_ bv0 32))) (.cse14 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse10 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse8 (= (_ bv0 32) ~pumpRunning~0)) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse9 (= ~waterLevel~0 (_ bv2 32))) (.cse4 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse6 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse9 .cse4 .cse10 .cse6 .cse7) (and .cse0 .cse11 .cse12 .cse13 .cse8 .cse14 .cse7) (and .cse0 .cse11 .cse12 .cse1 .cse13 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|) .cse4 .cse7 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32)))) (and .cse0 .cse8 .cse14 .cse9 .cse6 .cse7) (and .cse8 .cse2 .cse3 .cse5 .cse4 .cse10 .cse6 .cse7) (and .cse0 .cse8 .cse9 .cse4 .cse6 .cse7) (and .cse0 .cse8 .cse14 .cse2 .cse3 .cse5 .cse6 .cse7) (and .cse0 .cse11 .cse12 .cse13 .cse8 .cse4 .cse7) (and .cse0 .cse1 .cse14 .cse15 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))) .cse6 .cse7 .cse16) (and .cse11 .cse12 .cse13 .cse8 .cse10 .cse4 .cse7) (and .cse8 .cse14 .cse2 .cse3 .cse5 .cse10 .cse6 .cse7) (and .cse11 .cse12 .cse13 .cse8 .cse14 .cse10 .cse7) (and .cse8 .cse14 .cse9 .cse10 .cse7) (and .cse0 .cse8 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) .cse4 .cse7) (and .cse0 .cse1 .cse9 .cse4 .cse6 .cse7)))) [2019-12-07 12:15:44,832 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-12-07 12:15:44,832 INFO L242 CegarLoopResult]: At program point L220(lines 215 223) the Hoare annotation is: (let ((.cse16 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse18 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse17 (= ~waterLevel~0 (_ bv1 32))) (.cse7 (or .cse16 .cse18)) (.cse10 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32)))) (.cse6 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5))) (.cse15 (= ~waterLevel~0 (_ bv2 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse2 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse3 (= (_ bv1 32) ~pumpRunning~0)) (.cse20 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse13 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse21 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse19 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse11 (= (_ bv0 32) ~pumpRunning~0)) (.cse12 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse14 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse8 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse9 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse12 .cse13 .cse14 .cse9) (and .cse0 .cse3 .cse5 .cse15 .cse8 .cse9) (and .cse0 .cse3 .cse5 .cse13 .cse6 .cse16 .cse17 .cse18 .cse9) (and .cse0 .cse3 .cse5 .cse6 .cse16 .cse17 .cse8 .cse18 .cse9) (and .cse0 .cse3 .cse5 .cse13 .cse15 .cse9) (and .cse1 .cse2 .cse4 .cse11 .cse13 .cse6 .cse16 .cse14 .cse9 .cse19) (and .cse11 .cse15 .cse14 .cse8 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse13 .cse6 .cse7 .cse9 .cse10) (and .cse1 .cse2 .cse4 .cse11 .cse6 .cse16 .cse14 .cse8 .cse9 .cse19) (and .cse0 .cse1 .cse2 .cse3 .cse20 .cse4 .cse5 .cse8 .cse21 .cse9 .cse19) (and .cse11 .cse13 .cse15 .cse14 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse20 .cse4 .cse5 .cse13 .cse21 .cse9 .cse19) (and .cse11 .cse12 .cse14 .cse8 .cse9)))) [2019-12-07 12:15:44,832 INFO L242 CegarLoopResult]: At program point L220-1(lines 215 223) the Hoare annotation is: (let ((.cse8 (not (= ~systemActive~0 (_ bv0 32)))) (.cse9 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse10 (= (_ bv1 32) ~pumpRunning~0)) (.cse11 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse12 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse4 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse13 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse14 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse7 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse3 (= (_ bv0 32) ~pumpRunning~0)) (.cse15 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse5 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse6 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse7 .cse5 .cse4 .cse6) (and .cse8 .cse0 .cse1 .cse9 .cse10 .cse11 .cse2 .cse12 .cse4 .cse13 .cse6 .cse14) (and .cse8 .cse0 .cse1 .cse9 .cse10 .cse11 .cse7 .cse12 .cse4 .cse13 .cse6 .cse14) (and .cse0 .cse1 .cse3 .cse15 .cse7 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse15 .cse5 .cse6))) [2019-12-07 12:15:44,832 INFO L242 CegarLoopResult]: At program point L220-2(lines 215 223) the Hoare annotation is: false [2019-12-07 12:15:44,832 INFO L242 CegarLoopResult]: At program point L220-3(lines 215 223) the Hoare annotation is: false [2019-12-07 12:15:44,832 INFO L242 CegarLoopResult]: At program point L220-4(lines 215 223) the Hoare annotation is: false [2019-12-07 12:15:44,832 INFO L242 CegarLoopResult]: At program point L220-5(lines 215 223) the Hoare annotation is: false [2019-12-07 12:15:44,832 INFO L242 CegarLoopResult]: At program point L454(lines 405 455) the Hoare annotation is: false [2019-12-07 12:15:44,832 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-12-07 12:15:44,833 INFO L242 CegarLoopResult]: At program point L356(lines 352 358) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 12:15:44,833 INFO L246 CegarLoopResult]: For program point L885(lines 885 889) no Hoare annotation was computed. [2019-12-07 12:15:44,833 INFO L246 CegarLoopResult]: For program point L885-3(lines 885 889) no Hoare annotation was computed. [2019-12-07 12:15:44,833 INFO L246 CegarLoopResult]: For program point L885-6(lines 885 889) no Hoare annotation was computed. [2019-12-07 12:15:44,833 INFO L249 CegarLoopResult]: At program point L391(lines 372 394) the Hoare annotation is: true [2019-12-07 12:15:44,833 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-12-07 12:15:44,833 INFO L246 CegarLoopResult]: For program point L491(lines 491 508) no Hoare annotation was computed. [2019-12-07 12:15:44,833 INFO L242 CegarLoopResult]: At program point L491-1(lines 1 971) the Hoare annotation is: (let ((.cse13 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|)) (.cse10 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5))) (let ((.cse5 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse8 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32)))) (.cse3 (= (_ bv1 32) ~pumpRunning~0)) (.cse11 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse19 (= ~waterLevel~0 (_ bv0 32))) (.cse16 (not .cse10)) (.cse17 (not .cse13)) (.cse18 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse6 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse1 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse2 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse9 (= (_ bv0 32) ~pumpRunning~0)) (.cse14 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse15 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse12 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse10 .cse11 .cse6 .cse12 .cse7 .cse13) (and .cse0 .cse3 .cse14 (= ~waterLevel~0 (_ bv2 32)) .cse10 .cse7 .cse13) (and .cse9 .cse14 .cse10 .cse15 .cse11 .cse12 .cse7 .cse13) (and .cse0 .cse1 .cse2 .cse9 .cse4 .cse14 .cse16 .cse17 .cse7 .cse18) (and .cse0 .cse1 .cse2 .cse19 .cse9 .cse14 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse19 .cse5 .cse6 .cse7 .cse8) (and .cse1 .cse2 .cse19 .cse9 .cse15 .cse6 .cse7) (and .cse1 .cse2 .cse9 .cse4 .cse15 .cse6 .cse7) (and .cse9 .cse10 .cse15 .cse6 .cse11 .cse12 .cse7 .cse13) (and .cse0 .cse3 .cse10 .cse11 .cse6 .cse7 .cse13) (and .cse0 .cse9 .cse14 .cse10 .cse11 .cse12 .cse7 .cse13) (and .cse1 .cse2 .cse19 .cse9 .cse14 .cse15 .cse7) (and .cse0 .cse1 .cse2 .cse19 .cse9 .cse16 .cse17 .cse6 .cse7 .cse18) (and .cse0 .cse9 .cse4 .cse6 .cse7) (and .cse1 .cse2 .cse9 .cse14 .cse4 .cse15 .cse12 .cse7)))) [2019-12-07 12:15:44,833 INFO L246 CegarLoopResult]: For program point L491-2(lines 491 508) no Hoare annotation was computed. [2019-12-07 12:15:44,833 INFO L242 CegarLoopResult]: At program point L491-3(lines 1 971) the Hoare annotation is: false [2019-12-07 12:15:44,833 INFO L246 CegarLoopResult]: For program point L491-4(lines 491 508) no Hoare annotation was computed. [2019-12-07 12:15:44,833 INFO L242 CegarLoopResult]: At program point L491-5(lines 1 971) the Hoare annotation is: false [2019-12-07 12:15:44,833 INFO L242 CegarLoopResult]: At program point L954(lines 949 957) the Hoare annotation is: (let ((.cse5 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (let ((.cse9 (not .cse5)) (.cse10 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse13 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse15 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse16 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse11 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse17 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse18 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse14 (= (_ bv1 32) ~pumpRunning~0)) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse6 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse7 (= ~waterLevel~0 (_ bv0 32))) (.cse3 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse8 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse12 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse7 .cse1 .cse8 .cse9 .cse4 .cse10) (and .cse0 .cse6 .cse7 .cse1 .cse9 .cse3 .cse4 .cse10) (and .cse0 .cse6 .cse1 .cse11 .cse3 .cse4 .cse10) (and .cse6 .cse1 .cse11 .cse8 .cse12 .cse4 .cse10) (and .cse0 .cse6 .cse13 .cse14 .cse15 .cse7 .cse16 .cse3 .cse17 .cse4 .cse18) (and .cse0 .cse6 .cse1 .cse11 .cse8 .cse9 .cse4 .cse10) (and .cse6 .cse1 .cse11 .cse12 .cse3 .cse4 .cse10) (and .cse6 .cse7 .cse1 .cse8 .cse12 .cse4) (and .cse0 .cse14 .cse8 .cse2 .cse4 .cse5) (and .cse0 .cse6 .cse13 .cse14 .cse15 .cse16 .cse11 .cse3 .cse17 .cse4 .cse18) (and .cse0 .cse14 .cse3 .cse2 .cse4 .cse5) (and .cse0 .cse1 .cse8 (= ~waterLevel~0 (_ bv2 32)) .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse3 .cse12 .cse4) (and .cse1 .cse3 .cse12 .cse2 .cse4 .cse5) (and .cse1 .cse8 .cse2 .cse12 .cse4 .cse5)))) [2019-12-07 12:15:44,834 INFO L242 CegarLoopResult]: At program point L954-1(lines 949 957) the Hoare annotation is: false [2019-12-07 12:15:44,834 INFO L242 CegarLoopResult]: At program point L954-2(lines 949 957) the Hoare annotation is: false [2019-12-07 12:15:44,834 INFO L246 CegarLoopResult]: For program point L426(lines 426 432) no Hoare annotation was computed. [2019-12-07 12:15:44,834 INFO L242 CegarLoopResult]: At program point L426-1(lines 426 432) the Hoare annotation is: (let ((.cse16 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse17 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32)))) (.cse2 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5))) (.cse3 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse5 (= ~waterLevel~0 (_ bv1 32))) (.cse13 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5)) (.cse14 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse15 (= ~waterLevel~0 (_ bv0 32))) (.cse8 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse11 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse9 (= (_ bv0 32) ~pumpRunning~0)) (.cse12 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse10 (= ~waterLevel~0 (_ bv2 32))) (.cse4 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse6 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse8 .cse2 .cse3 .cse5 .cse6 .cse7) (and .cse9 .cse10 .cse4 .cse11 .cse6 .cse7) (and .cse0 .cse9 .cse8 .cse12 .cse7) (and .cse0 .cse13 .cse14 .cse15 .cse9 .cse8 .cse7) (and .cse0 .cse13 .cse14 .cse1 .cse15 .cse16 .cse4 .cse7 .cse17) (and .cse0 .cse9 .cse8 .cse10 .cse6 .cse7) (and .cse0 .cse9 .cse10 .cse4 .cse6 .cse7) (and .cse9 .cse2 .cse3 .cse5 .cse4 .cse11 .cse6 .cse7) (and .cse0 .cse13 .cse14 .cse15 .cse9 .cse4 .cse7) (and .cse0 .cse13 .cse14 .cse1 .cse15 .cse8 .cse16 .cse7 .cse17) (and .cse13 .cse14 .cse15 .cse9 .cse11 .cse4 .cse7) (and .cse0 .cse1 .cse8 .cse10 .cse7) (and .cse9 .cse8 .cse2 .cse3 .cse5 .cse11 .cse6 .cse7) (and .cse13 .cse14 .cse15 .cse9 .cse8 .cse11 .cse7) (and .cse9 .cse8 .cse10 .cse11 .cse7) (and .cse0 .cse9 .cse12 .cse4 .cse7) (and .cse0 .cse1 .cse10 .cse4 .cse6 .cse7))) [2019-12-07 12:15:44,834 INFO L242 CegarLoopResult]: At program point L922(lines 917 925) the Hoare annotation is: (let ((.cse4 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse8 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse3 (= ~waterLevel~0 (_ bv0 32))) (.cse6 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~5))) (.cse7 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse9 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse12 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse2 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse5 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse11 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse13 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse4 .cse11 .cse5 .cse8 .cse9 .cse10) (and .cse0 .cse12 .cse1 .cse2 .cse3 .cse5 .cse6 .cse7 .cse13 .cse9 .cse10) (and .cse0 .cse12 .cse1 .cse2 .cse5 .cse11 .cse13 .cse10))) [2019-12-07 12:15:44,834 INFO L242 CegarLoopResult]: At program point L922-1(lines 917 925) the Hoare annotation is: false [2019-12-07 12:15:44,834 INFO L242 CegarLoopResult]: At program point L922-2(lines 917 925) the Hoare annotation is: false [2019-12-07 12:15:44,834 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-12-07 12:15:44,834 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2019-12-07 12:15:44,834 INFO L246 CegarLoopResult]: For program point L495(lines 495 505) no Hoare annotation was computed. [2019-12-07 12:15:44,834 INFO L246 CegarLoopResult]: For program point L495-2(lines 495 505) no Hoare annotation was computed. [2019-12-07 12:15:44,834 INFO L246 CegarLoopResult]: For program point L495-4(lines 495 505) no Hoare annotation was computed. [2019-12-07 12:15:44,834 INFO L246 CegarLoopResult]: For program point L496(lines 496 502) no Hoare annotation was computed. [2019-12-07 12:15:44,834 INFO L246 CegarLoopResult]: For program point L496-2(lines 496 502) no Hoare annotation was computed. [2019-12-07 12:15:44,835 INFO L246 CegarLoopResult]: For program point L496-4(lines 496 502) no Hoare annotation was computed. [2019-12-07 12:15:44,835 INFO L246 CegarLoopResult]: For program point L167(lines 167 184) no Hoare annotation was computed. [2019-12-07 12:15:44,835 INFO L246 CegarLoopResult]: For program point L167-1(lines 167 184) no Hoare annotation was computed. [2019-12-07 12:15:44,835 INFO L246 CegarLoopResult]: For program point L167-2(lines 167 184) no Hoare annotation was computed. [2019-12-07 12:15:44,891 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 12:15:44 BoogieIcfgContainer [2019-12-07 12:15:44,891 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-12-07 12:15:44,891 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 12:15:44,891 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 12:15:44,892 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 12:15:44,892 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 12:14:18" (3/4) ... [2019-12-07 12:15:44,894 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-12-07 12:15:44,906 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2019-12-07 12:15:44,907 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2019-12-07 12:15:44,908 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2019-12-07 12:15:44,908 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2019-12-07 12:15:44,909 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-12-07 12:15:44,910 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 12:15:44,910 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 12:15:44,930 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) || (((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 2bv32 == tmp) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 2bv32 == tmp) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 2bv32 == tmp) && 0bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((0bv32 == pumpRunning && 2bv32 == tmp) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 2bv32 == tmp) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 2bv32 == tmp) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) [2019-12-07 12:15:44,930 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || (((((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((0bv32 == pumpRunning && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 2bv32 == tmp) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) [2019-12-07 12:15:44,930 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((0bv32 == pumpRunning && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) [2019-12-07 12:15:44,930 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && (((0bv32 == pumpRunning && 2bv32 == tmp) && splverifierCounter == 0bv32) || ((0bv32 == pumpRunning && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && (((0bv32 == pumpRunning && 2bv32 == tmp) && splverifierCounter == 0bv32) || ((0bv32 == pumpRunning && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) [2019-12-07 12:15:44,930 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 12:15:44,931 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) [2019-12-07 12:15:44,931 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || ((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 12:15:44,931 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 12:15:44,931 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32) && !(systemActive == 0bv32)) && \result == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 12:15:44,932 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((!(systemActive == 0bv32) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((!(systemActive == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((((!(systemActive == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result) [2019-12-07 12:15:44,932 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) [2019-12-07 12:15:44,932 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || (((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) [2019-12-07 12:15:44,933 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1bv32 == \result && !(systemActive == 0bv32)) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((1bv32 == \result && !(systemActive == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((1bv32 == \result && !(systemActive == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((1bv32 == \result && !(systemActive == 0bv32)) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) [2019-12-07 12:15:44,933 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 12:15:44,933 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && !(tmp == 0bv32)) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && methaneLevelCritical == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && !(tmp == 0bv32)) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && \result == 0bv32) && methaneLevelCritical == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 12:15:44,967 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/run_dir_7f2f56ad-45ce-4be8-9c3c-fbf191789a1a/bin/utaipan/witness.graphml [2019-12-07 12:15:44,967 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 12:15:44,968 INFO L168 Benchmark]: Toolchain (without parser) took 87025.72 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 591.9 MB). Free memory was 947.0 MB in the beginning and 783.7 MB in the end (delta: 163.3 MB). Peak memory consumption was 755.2 MB. Max. memory is 11.5 GB. [2019-12-07 12:15:44,968 INFO L168 Benchmark]: CDTParser took 0.18 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 12:15:44,969 INFO L168 Benchmark]: CACSL2BoogieTranslator took 395.43 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 127.9 MB). Free memory was 947.0 MB in the beginning and 1.1 GB in the end (delta: -154.5 MB). Peak memory consumption was 21.2 MB. Max. memory is 11.5 GB. [2019-12-07 12:15:44,969 INFO L168 Benchmark]: Boogie Procedure Inliner took 46.98 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2019-12-07 12:15:44,969 INFO L168 Benchmark]: Boogie Preprocessor took 33.24 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 12:15:44,969 INFO L168 Benchmark]: RCFGBuilder took 566.85 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 79.0 MB). Peak memory consumption was 79.0 MB. Max. memory is 11.5 GB. [2019-12-07 12:15:44,969 INFO L168 Benchmark]: TraceAbstraction took 85904.05 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 464.0 MB). Free memory was 1.0 GB in the beginning and 799.7 MB in the end (delta: 216.0 MB). Peak memory consumption was 882.9 MB. Max. memory is 11.5 GB. [2019-12-07 12:15:44,970 INFO L168 Benchmark]: Witness Printer took 75.94 ms. Allocated memory is still 1.6 GB. Free memory was 799.7 MB in the beginning and 783.7 MB in the end (delta: 16.0 MB). Peak memory consumption was 16.0 MB. Max. memory is 11.5 GB. [2019-12-07 12:15:44,971 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 395.43 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 127.9 MB). Free memory was 947.0 MB in the beginning and 1.1 GB in the end (delta: -154.5 MB). Peak memory consumption was 21.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 46.98 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 33.24 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 566.85 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 79.0 MB). Peak memory consumption was 79.0 MB. Max. memory is 11.5 GB. * TraceAbstraction took 85904.05 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 464.0 MB). Free memory was 1.0 GB in the beginning and 799.7 MB in the end (delta: 216.0 MB). Peak memory consumption was 882.9 MB. Max. memory is 11.5 GB. * Witness Printer took 75.94 ms. Allocated memory is still 1.6 GB. Free memory was 799.7 MB in the beginning and 783.7 MB in the end (delta: 16.0 MB). Peak memory consumption was 16.0 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 949]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && (((0bv32 == pumpRunning && 2bv32 == tmp) && splverifierCounter == 0bv32) || ((0bv32 == pumpRunning && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && (((0bv32 == pumpRunning && 2bv32 == tmp) && splverifierCounter == 0bv32) || ((0bv32 == pumpRunning && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 949]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: (((((((((((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || (((((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((0bv32 == pumpRunning && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 2bv32 == tmp) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 105]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 372]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 105]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 105]: Loop Invariant Derived loop invariant: (((((((((((((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 949]: Loop Invariant Derived loop invariant: (((((((((((((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((!(systemActive == 0bv32) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((!(systemActive == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((((!(systemActive == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result) - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 215]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 215]: Loop Invariant Derived loop invariant: ((((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 215]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: ((((((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && !(tmp == 0bv32)) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && methaneLevelCritical == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && !(tmp == 0bv32)) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && \result == 0bv32) && methaneLevelCritical == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 215]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 215]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 215]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: ((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) - InvariantResult [Line: 352]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 283]: Loop Invariant Derived loop invariant: (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 77]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || ((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) || (((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 2bv32 == tmp) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 2bv32 == tmp) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 2bv32 == tmp) && 0bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((0bv32 == pumpRunning && 2bv32 == tmp) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 2bv32 == tmp) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 2bv32 == tmp) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((0bv32 == pumpRunning && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 0bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 382]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: ((((((((((((1bv32 == \result && !(systemActive == 0bv32)) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((1bv32 == \result && !(systemActive == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((1bv32 == \result && !(systemActive == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((1bv32 == \result && !(systemActive == 0bv32)) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 204]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 204]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 204]: Loop Invariant Derived loop invariant: ((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || (((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: (((((((((((((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && 0bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == tmp)) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == tmp) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32) && !(systemActive == 0bv32)) && \result == 0bv32) && 1bv32 == \result) && !(2bv32 == tmp)) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 122 locations, 3 error locations. Result: SAFE, OverallTime: 14.0s, OverallIterations: 15, TraceHistogramMax: 4, AutomataDifference: 2.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 71.7s, HoareTripleCheckerStatistics: 1772 SDtfs, 3827 SDslu, 4836 SDs, 0 SdLazy, 684 SolverSat, 161 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.3s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 3122 GetRequests, 2993 SyntacticMatches, 3 SemanticMatches, 126 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 220 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1125occurred in iteration=13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 15 MinimizatonAttempts, 4599 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 51 PreInvPairs, 714 NumberOfFragments, 4831 HoareAnnotationTreeSize, 51 FomulaSimplifications, 32579257 FormulaSimplificationTreeSizeReduction, 6.6s HoareSimplificationTime, 51 FomulaSimplificationsInter, 34112441 FormulaSimplificationTreeSizeReductionInter, 65.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 3.7s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 1543 NumberOfCodeBlocks, 1543 NumberOfCodeBlocksAsserted, 26 NumberOfCheckSat, 3040 ConstructedInterpolants, 0 QuantifiedInterpolants, 577627 SizeOfPredicates, 85 NumberOfNonLiveVariables, 5633 ConjunctsInSsa, 122 ConjunctsInUnsatCore, 46 InterpolantComputations, 23 PerfectInterpolantSequences, 2266/2496 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...