./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 420052417c34af57247f22c0bc8935a6e484860c ...................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 420052417c34af57247f22c0bc8935a6e484860c ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 12:08:04,534 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 12:08:04,535 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 12:08:04,542 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 12:08:04,543 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 12:08:04,543 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 12:08:04,544 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 12:08:04,546 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 12:08:04,547 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 12:08:04,547 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 12:08:04,548 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 12:08:04,549 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 12:08:04,549 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 12:08:04,550 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 12:08:04,550 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 12:08:04,551 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 12:08:04,552 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 12:08:04,552 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 12:08:04,553 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 12:08:04,555 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 12:08:04,556 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 12:08:04,557 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 12:08:04,557 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 12:08:04,558 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 12:08:04,559 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 12:08:04,560 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 12:08:04,560 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 12:08:04,560 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 12:08:04,560 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 12:08:04,561 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 12:08:04,561 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 12:08:04,561 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 12:08:04,562 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 12:08:04,562 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 12:08:04,563 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 12:08:04,563 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 12:08:04,563 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 12:08:04,563 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 12:08:04,564 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 12:08:04,564 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 12:08:04,565 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 12:08:04,565 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2019-12-07 12:08:04,575 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 12:08:04,575 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 12:08:04,576 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 12:08:04,576 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 12:08:04,576 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 12:08:04,576 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 12:08:04,576 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2019-12-07 12:08:04,576 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 12:08:04,576 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 12:08:04,576 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2019-12-07 12:08:04,577 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2019-12-07 12:08:04,577 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 12:08:04,577 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2019-12-07 12:08:04,577 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2019-12-07 12:08:04,577 INFO L138 SettingsManager]: * Simplification Technique=SIMPLIFY_QUICK [2019-12-07 12:08:04,578 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 12:08:04,578 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 12:08:04,578 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 12:08:04,578 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 12:08:04,578 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 12:08:04,578 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 12:08:04,578 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 12:08:04,578 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 12:08:04,579 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 12:08:04,579 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 12:08:04,579 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 12:08:04,579 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 12:08:04,579 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 12:08:04,579 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 12:08:04,579 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 12:08:04,579 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 12:08:04,579 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 12:08:04,580 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 12:08:04,580 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 12:08:04,580 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 12:08:04,580 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2019-12-07 12:08:04,580 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-12-07 12:08:04,580 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 12:08:04,580 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 12:08:04,580 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 12:08:04,581 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 420052417c34af57247f22c0bc8935a6e484860c [2019-12-07 12:08:04,679 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 12:08:04,686 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 12:08:04,689 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 12:08:04,691 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 12:08:04,691 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 12:08:04,691 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c [2019-12-07 12:08:04,736 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/data/accbe23f2/fb22d72b19f949689e8320dce9af536e/FLAG16dab3fa3 [2019-12-07 12:08:05,086 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 12:08:05,087 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c [2019-12-07 12:08:05,096 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/data/accbe23f2/fb22d72b19f949689e8320dce9af536e/FLAG16dab3fa3 [2019-12-07 12:08:05,104 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/data/accbe23f2/fb22d72b19f949689e8320dce9af536e [2019-12-07 12:08:05,106 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 12:08:05,107 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 12:08:05,108 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 12:08:05,108 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 12:08:05,110 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 12:08:05,110 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:08:05" (1/1) ... [2019-12-07 12:08:05,112 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7c28c768 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:05, skipping insertion in model container [2019-12-07 12:08:05,112 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:08:05" (1/1) ... [2019-12-07 12:08:05,117 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 12:08:05,143 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 12:08:05,352 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 12:08:05,361 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2019-12-07 12:08:05,361 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@409a2f4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:05, skipping insertion in model container [2019-12-07 12:08:05,361 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 12:08:05,362 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2019-12-07 12:08:05,363 INFO L168 Benchmark]: Toolchain (without parser) took 255.53 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 104.3 MB). Free memory was 947.8 MB in the beginning and 1.1 GB in the end (delta: -144.8 MB). Peak memory consumption was 23.2 MB. Max. memory is 11.5 GB. [2019-12-07 12:08:05,364 INFO L168 Benchmark]: CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 963.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 12:08:05,364 INFO L168 Benchmark]: CACSL2BoogieTranslator took 253.88 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 104.3 MB). Free memory was 942.5 MB in the beginning and 1.1 GB in the end (delta: -150.2 MB). Peak memory consumption was 17.9 MB. Max. memory is 11.5 GB. [2019-12-07 12:08:05,365 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 963.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 253.88 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 104.3 MB). Free memory was 942.5 MB in the beginning and 1.1 GB in the end (delta: -150.2 MB). Peak memory consumption was 17.9 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 357]: Unsupported Syntax Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.25-f470102 [2019-12-07 12:08:06,488 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 12:08:06,490 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 12:08:06,497 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 12:08:06,498 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 12:08:06,498 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 12:08:06,499 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 12:08:06,501 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 12:08:06,502 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 12:08:06,503 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 12:08:06,503 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 12:08:06,504 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 12:08:06,504 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 12:08:06,505 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 12:08:06,506 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 12:08:06,507 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 12:08:06,507 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 12:08:06,508 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 12:08:06,509 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 12:08:06,511 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 12:08:06,512 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 12:08:06,513 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 12:08:06,514 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 12:08:06,514 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 12:08:06,516 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 12:08:06,516 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 12:08:06,517 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 12:08:06,517 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 12:08:06,517 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 12:08:06,518 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 12:08:06,518 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 12:08:06,519 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 12:08:06,519 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 12:08:06,520 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 12:08:06,521 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 12:08:06,521 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 12:08:06,521 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 12:08:06,521 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 12:08:06,522 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 12:08:06,522 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 12:08:06,523 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 12:08:06,523 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf [2019-12-07 12:08:06,533 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 12:08:06,533 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 12:08:06,534 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 12:08:06,534 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 12:08:06,534 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 12:08:06,534 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 12:08:06,535 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 12:08:06,535 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 12:08:06,535 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 12:08:06,535 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 12:08:06,535 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 12:08:06,536 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 12:08:06,536 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 12:08:06,536 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 12:08:06,536 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 12:08:06,536 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 12:08:06,536 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 12:08:06,536 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2019-12-07 12:08:06,537 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2019-12-07 12:08:06,537 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 12:08:06,537 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 12:08:06,537 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 12:08:06,537 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 12:08:06,537 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 12:08:06,537 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 12:08:06,538 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 12:08:06,538 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 12:08:06,538 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 12:08:06,538 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 12:08:06,538 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 12:08:06,538 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 12:08:06,538 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2019-12-07 12:08:06,539 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --rewrite-divk --print-success --lang smt [2019-12-07 12:08:06,539 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 12:08:06,539 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 12:08:06,539 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 12:08:06,539 INFO L138 SettingsManager]: * Logic for external solver=AUFBV Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 420052417c34af57247f22c0bc8935a6e484860c [2019-12-07 12:08:06,700 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 12:08:06,708 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 12:08:06,711 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 12:08:06,711 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 12:08:06,712 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 12:08:06,712 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c [2019-12-07 12:08:06,750 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/data/6835efa15/60c239b2400a462b8f1c2c3217097bac/FLAGc878474c7 [2019-12-07 12:08:07,138 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 12:08:07,138 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/sv-benchmarks/c/product-lines/minepump_spec5_product40.cil.c [2019-12-07 12:08:07,147 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/data/6835efa15/60c239b2400a462b8f1c2c3217097bac/FLAGc878474c7 [2019-12-07 12:08:07,155 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/data/6835efa15/60c239b2400a462b8f1c2c3217097bac [2019-12-07 12:08:07,157 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 12:08:07,158 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 12:08:07,158 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 12:08:07,158 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 12:08:07,160 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 12:08:07,161 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:08:07" (1/1) ... [2019-12-07 12:08:07,162 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5b70e7d3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07, skipping insertion in model container [2019-12-07 12:08:07,163 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 12:08:07" (1/1) ... [2019-12-07 12:08:07,167 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 12:08:07,200 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 12:08:07,447 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 12:08:07,457 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2019-12-07 12:08:07,462 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 12:08:07,513 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 12:08:07,519 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 12:08:07,559 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 12:08:07,581 INFO L208 MainTranslator]: Completed translation [2019-12-07 12:08:07,582 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07 WrapperNode [2019-12-07 12:08:07,582 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 12:08:07,582 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 12:08:07,583 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 12:08:07,583 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 12:08:07,588 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07" (1/1) ... [2019-12-07 12:08:07,603 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07" (1/1) ... [2019-12-07 12:08:07,630 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 12:08:07,631 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 12:08:07,631 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 12:08:07,631 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 12:08:07,637 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07" (1/1) ... [2019-12-07 12:08:07,638 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07" (1/1) ... [2019-12-07 12:08:07,642 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07" (1/1) ... [2019-12-07 12:08:07,642 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07" (1/1) ... [2019-12-07 12:08:07,652 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07" (1/1) ... [2019-12-07 12:08:07,658 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07" (1/1) ... [2019-12-07 12:08:07,660 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07" (1/1) ... [2019-12-07 12:08:07,664 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 12:08:07,664 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 12:08:07,664 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 12:08:07,664 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 12:08:07,665 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 12:08:07,707 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 12:08:07,707 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2019-12-07 12:08:07,707 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 12:08:07,708 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 12:08:08,254 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 12:08:08,254 INFO L287 CfgBuilder]: Removed 176 assume(true) statements. [2019-12-07 12:08:08,255 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 12:08:08 BoogieIcfgContainer [2019-12-07 12:08:08,255 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 12:08:08,256 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-12-07 12:08:08,256 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-12-07 12:08:08,258 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-12-07 12:08:08,258 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 12:08:07" (1/3) ... [2019-12-07 12:08:08,259 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@68c2a561 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 12:08:08, skipping insertion in model container [2019-12-07 12:08:08,259 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 12:08:07" (2/3) ... [2019-12-07 12:08:08,259 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@68c2a561 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 12:08:08, skipping insertion in model container [2019-12-07 12:08:08,259 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 12:08:08" (3/3) ... [2019-12-07 12:08:08,260 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product40.cil.c [2019-12-07 12:08:08,267 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-12-07 12:08:08,272 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2019-12-07 12:08:08,280 INFO L249 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2019-12-07 12:08:08,296 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-12-07 12:08:08,296 INFO L374 AbstractCegarLoop]: Hoare is true [2019-12-07 12:08:08,296 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-12-07 12:08:08,296 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 12:08:08,296 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 12:08:08,296 INFO L378 AbstractCegarLoop]: Difference is false [2019-12-07 12:08:08,296 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 12:08:08,297 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-12-07 12:08:08,308 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states. [2019-12-07 12:08:08,313 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2019-12-07 12:08:08,313 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:08,313 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:08,314 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:08,317 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:08,318 INFO L82 PathProgramCache]: Analyzing trace with hash -570084669, now seen corresponding path program 1 times [2019-12-07 12:08:08,326 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:08,326 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1163212253] [2019-12-07 12:08:08,327 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 2 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:08,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:08,459 INFO L264 TraceCheckSpWp]: Trace formula consists of 181 conjuncts, 1 conjunts are in the unsatisfiable core [2019-12-07 12:08:08,463 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:08,474 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:08,474 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:08,478 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:08,478 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1163212253] [2019-12-07 12:08:08,479 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:08:08,479 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 2 [2019-12-07 12:08:08,480 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [548248328] [2019-12-07 12:08:08,483 INFO L442 AbstractCegarLoop]: Interpolant automaton has 2 states [2019-12-07 12:08:08,483 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:08,492 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2019-12-07 12:08:08,492 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 12:08:08,494 INFO L87 Difference]: Start difference. First operand 122 states. Second operand 2 states. [2019-12-07 12:08:08,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:08,516 INFO L93 Difference]: Finished difference Result 237 states and 358 transitions. [2019-12-07 12:08:08,516 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 12:08:08,517 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2019-12-07 12:08:08,518 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:08,526 INFO L225 Difference]: With dead ends: 237 [2019-12-07 12:08:08,526 INFO L226 Difference]: Without dead ends: 118 [2019-12-07 12:08:08,528 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 12:08:08,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118 states. [2019-12-07 12:08:08,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118 to 118. [2019-12-07 12:08:08,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 118 states. [2019-12-07 12:08:08,559 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 171 transitions. [2019-12-07 12:08:08,560 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 171 transitions. Word has length 19 [2019-12-07 12:08:08,560 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:08,560 INFO L462 AbstractCegarLoop]: Abstraction has 118 states and 171 transitions. [2019-12-07 12:08:08,560 INFO L463 AbstractCegarLoop]: Interpolant automaton has 2 states. [2019-12-07 12:08:08,560 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 171 transitions. [2019-12-07 12:08:08,561 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2019-12-07 12:08:08,561 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:08,561 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:08,762 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 mathsat -unsat_core_generation=3 [2019-12-07 12:08:08,762 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:08,762 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:08,763 INFO L82 PathProgramCache]: Analyzing trace with hash 1235934884, now seen corresponding path program 1 times [2019-12-07 12:08:08,763 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:08,763 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2077107285] [2019-12-07 12:08:08,764 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 3 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:08,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:08,884 INFO L264 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 12:08:08,885 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:08,898 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:08,898 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:08,907 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:08,907 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2077107285] [2019-12-07 12:08:08,907 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:08:08,908 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 12:08:08,908 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1517290865] [2019-12-07 12:08:08,909 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 12:08:08,909 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:08,909 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 12:08:08,909 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:08:08,910 INFO L87 Difference]: Start difference. First operand 118 states and 171 transitions. Second operand 4 states. [2019-12-07 12:08:08,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:08,922 INFO L93 Difference]: Finished difference Result 118 states and 171 transitions. [2019-12-07 12:08:08,922 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 12:08:08,923 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 20 [2019-12-07 12:08:08,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:08,923 INFO L225 Difference]: With dead ends: 118 [2019-12-07 12:08:08,923 INFO L226 Difference]: Without dead ends: 51 [2019-12-07 12:08:08,924 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:08:08,925 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2019-12-07 12:08:08,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2019-12-07 12:08:08,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 51 states. [2019-12-07 12:08:08,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 73 transitions. [2019-12-07 12:08:08,929 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 73 transitions. Word has length 20 [2019-12-07 12:08:08,929 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:08,929 INFO L462 AbstractCegarLoop]: Abstraction has 51 states and 73 transitions. [2019-12-07 12:08:08,929 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 12:08:08,929 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 73 transitions. [2019-12-07 12:08:08,930 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2019-12-07 12:08:08,930 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:08,930 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:09,131 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 mathsat -unsat_core_generation=3 [2019-12-07 12:08:09,131 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:09,132 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:09,132 INFO L82 PathProgramCache]: Analyzing trace with hash -807039390, now seen corresponding path program 1 times [2019-12-07 12:08:09,132 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:09,133 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1851044961] [2019-12-07 12:08:09,133 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 4 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:09,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:09,312 INFO L264 TraceCheckSpWp]: Trace formula consists of 189 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 12:08:09,314 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:09,321 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:09,321 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:09,328 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:09,328 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1851044961] [2019-12-07 12:08:09,328 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:08:09,328 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 12:08:09,329 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1768514186] [2019-12-07 12:08:09,329 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 12:08:09,329 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:09,329 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 12:08:09,329 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:08:09,330 INFO L87 Difference]: Start difference. First operand 51 states and 73 transitions. Second operand 4 states. [2019-12-07 12:08:09,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:09,387 INFO L93 Difference]: Finished difference Result 165 states and 243 transitions. [2019-12-07 12:08:09,388 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 12:08:09,388 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 26 [2019-12-07 12:08:09,388 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:09,389 INFO L225 Difference]: With dead ends: 165 [2019-12-07 12:08:09,390 INFO L226 Difference]: Without dead ends: 121 [2019-12-07 12:08:09,390 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:08:09,391 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2019-12-07 12:08:09,401 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 73. [2019-12-07 12:08:09,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 73 states. [2019-12-07 12:08:09,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 106 transitions. [2019-12-07 12:08:09,402 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 106 transitions. Word has length 26 [2019-12-07 12:08:09,402 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:09,403 INFO L462 AbstractCegarLoop]: Abstraction has 73 states and 106 transitions. [2019-12-07 12:08:09,403 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 12:08:09,403 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 106 transitions. [2019-12-07 12:08:09,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2019-12-07 12:08:09,404 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:09,404 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:09,604 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 mathsat -unsat_core_generation=3 [2019-12-07 12:08:09,605 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:09,605 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:09,605 INFO L82 PathProgramCache]: Analyzing trace with hash -1166251271, now seen corresponding path program 1 times [2019-12-07 12:08:09,605 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:09,606 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1130945661] [2019-12-07 12:08:09,606 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 5 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:09,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:09,711 INFO L264 TraceCheckSpWp]: Trace formula consists of 191 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 12:08:09,713 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:09,719 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:09,719 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:09,721 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:09,721 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1130945661] [2019-12-07 12:08:09,722 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:08:09,722 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 12:08:09,722 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [116695189] [2019-12-07 12:08:09,722 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 12:08:09,722 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:09,723 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 12:08:09,723 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 12:08:09,723 INFO L87 Difference]: Start difference. First operand 73 states and 106 transitions. Second operand 3 states. [2019-12-07 12:08:09,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:09,781 INFO L93 Difference]: Finished difference Result 163 states and 239 transitions. [2019-12-07 12:08:09,782 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 12:08:09,782 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2019-12-07 12:08:09,782 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:09,783 INFO L225 Difference]: With dead ends: 163 [2019-12-07 12:08:09,783 INFO L226 Difference]: Without dead ends: 97 [2019-12-07 12:08:09,784 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 12:08:09,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2019-12-07 12:08:09,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 95. [2019-12-07 12:08:09,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 95 states. [2019-12-07 12:08:09,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 134 transitions. [2019-12-07 12:08:09,795 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 134 transitions. Word has length 28 [2019-12-07 12:08:09,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:09,795 INFO L462 AbstractCegarLoop]: Abstraction has 95 states and 134 transitions. [2019-12-07 12:08:09,795 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 12:08:09,795 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 134 transitions. [2019-12-07 12:08:09,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2019-12-07 12:08:09,797 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:09,797 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:09,997 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 mathsat -unsat_core_generation=3 [2019-12-07 12:08:09,998 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:09,998 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:09,999 INFO L82 PathProgramCache]: Analyzing trace with hash -237845909, now seen corresponding path program 1 times [2019-12-07 12:08:09,999 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:10,000 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [542089937] [2019-12-07 12:08:10,000 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 6 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:10,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:10,144 INFO L264 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:08:10,145 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:10,157 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:10,157 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:10,163 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:10,163 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [542089937] [2019-12-07 12:08:10,163 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:08:10,164 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 12:08:10,164 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2104908363] [2019-12-07 12:08:10,164 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 12:08:10,164 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:10,164 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 12:08:10,164 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 12:08:10,165 INFO L87 Difference]: Start difference. First operand 95 states and 134 transitions. Second operand 5 states. [2019-12-07 12:08:10,291 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:10,291 INFO L93 Difference]: Finished difference Result 308 states and 436 transitions. [2019-12-07 12:08:10,291 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 12:08:10,291 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 29 [2019-12-07 12:08:10,292 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:10,293 INFO L225 Difference]: With dead ends: 308 [2019-12-07 12:08:10,293 INFO L226 Difference]: Without dead ends: 220 [2019-12-07 12:08:10,294 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-12-07 12:08:10,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2019-12-07 12:08:10,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 93. [2019-12-07 12:08:10,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 93 states. [2019-12-07 12:08:10,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 128 transitions. [2019-12-07 12:08:10,304 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 128 transitions. Word has length 29 [2019-12-07 12:08:10,304 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:10,304 INFO L462 AbstractCegarLoop]: Abstraction has 93 states and 128 transitions. [2019-12-07 12:08:10,304 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 12:08:10,304 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 128 transitions. [2019-12-07 12:08:10,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 12:08:10,305 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:10,305 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:10,506 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 mathsat -unsat_core_generation=3 [2019-12-07 12:08:10,507 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:10,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:10,507 INFO L82 PathProgramCache]: Analyzing trace with hash -2058108952, now seen corresponding path program 1 times [2019-12-07 12:08:10,508 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:10,508 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1718790134] [2019-12-07 12:08:10,509 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 7 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:10,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:10,637 INFO L264 TraceCheckSpWp]: Trace formula consists of 202 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:08:10,639 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:10,652 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:10,652 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:10,666 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:10,666 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1718790134] [2019-12-07 12:08:10,666 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:08:10,666 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 12:08:10,667 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [440619856] [2019-12-07 12:08:10,667 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 12:08:10,667 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:10,667 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 12:08:10,668 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 12:08:10,668 INFO L87 Difference]: Start difference. First operand 93 states and 128 transitions. Second operand 5 states. [2019-12-07 12:08:10,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:10,728 INFO L93 Difference]: Finished difference Result 272 states and 374 transitions. [2019-12-07 12:08:10,728 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-12-07 12:08:10,728 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2019-12-07 12:08:10,728 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:10,729 INFO L225 Difference]: With dead ends: 272 [2019-12-07 12:08:10,730 INFO L226 Difference]: Without dead ends: 186 [2019-12-07 12:08:10,730 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 12:08:10,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 186 states. [2019-12-07 12:08:10,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 186 to 99. [2019-12-07 12:08:10,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 99 states. [2019-12-07 12:08:10,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 134 transitions. [2019-12-07 12:08:10,742 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 134 transitions. Word has length 34 [2019-12-07 12:08:10,742 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:10,743 INFO L462 AbstractCegarLoop]: Abstraction has 99 states and 134 transitions. [2019-12-07 12:08:10,743 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 12:08:10,743 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 134 transitions. [2019-12-07 12:08:10,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 12:08:10,744 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:10,744 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:10,944 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 mathsat -unsat_core_generation=3 [2019-12-07 12:08:10,945 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:10,945 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:10,946 INFO L82 PathProgramCache]: Analyzing trace with hash -1357044374, now seen corresponding path program 1 times [2019-12-07 12:08:10,946 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:10,947 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1194811529] [2019-12-07 12:08:10,947 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 8 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:11,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:11,092 INFO L264 TraceCheckSpWp]: Trace formula consists of 202 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 12:08:11,094 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:11,103 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:11,103 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:11,113 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:11,113 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1194811529] [2019-12-07 12:08:11,113 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:08:11,113 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2019-12-07 12:08:11,113 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1219744309] [2019-12-07 12:08:11,114 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 12:08:11,114 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:11,114 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 12:08:11,114 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2019-12-07 12:08:11,114 INFO L87 Difference]: Start difference. First operand 99 states and 134 transitions. Second operand 6 states. [2019-12-07 12:08:11,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:11,165 INFO L93 Difference]: Finished difference Result 289 states and 391 transitions. [2019-12-07 12:08:11,165 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 12:08:11,165 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 34 [2019-12-07 12:08:11,165 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:11,166 INFO L225 Difference]: With dead ends: 289 [2019-12-07 12:08:11,166 INFO L226 Difference]: Without dead ends: 197 [2019-12-07 12:08:11,167 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 12:08:11,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2019-12-07 12:08:11,174 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 103. [2019-12-07 12:08:11,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 103 states. [2019-12-07 12:08:11,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 138 transitions. [2019-12-07 12:08:11,175 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 138 transitions. Word has length 34 [2019-12-07 12:08:11,175 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:11,175 INFO L462 AbstractCegarLoop]: Abstraction has 103 states and 138 transitions. [2019-12-07 12:08:11,175 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 12:08:11,175 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 138 transitions. [2019-12-07 12:08:11,176 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 12:08:11,176 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:11,176 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:11,376 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 mathsat -unsat_core_generation=3 [2019-12-07 12:08:11,377 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:11,377 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:11,377 INFO L82 PathProgramCache]: Analyzing trace with hash -1943850388, now seen corresponding path program 1 times [2019-12-07 12:08:11,377 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:11,377 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [401179039] [2019-12-07 12:08:11,377 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 9 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:11,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:11,469 INFO L264 TraceCheckSpWp]: Trace formula consists of 202 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 12:08:11,471 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:11,476 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:11,476 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:11,485 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:11,485 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [401179039] [2019-12-07 12:08:11,485 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:08:11,485 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 3 [2019-12-07 12:08:11,485 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1251283495] [2019-12-07 12:08:11,486 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 12:08:11,486 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:11,486 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 12:08:11,486 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:08:11,486 INFO L87 Difference]: Start difference. First operand 103 states and 138 transitions. Second operand 4 states. [2019-12-07 12:08:11,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:11,535 INFO L93 Difference]: Finished difference Result 331 states and 448 transitions. [2019-12-07 12:08:11,536 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 12:08:11,536 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2019-12-07 12:08:11,536 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:11,537 INFO L225 Difference]: With dead ends: 331 [2019-12-07 12:08:11,537 INFO L226 Difference]: Without dead ends: 235 [2019-12-07 12:08:11,538 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 12:08:11,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2019-12-07 12:08:11,550 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 183. [2019-12-07 12:08:11,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 183 states. [2019-12-07 12:08:11,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 183 states to 183 states and 245 transitions. [2019-12-07 12:08:11,551 INFO L78 Accepts]: Start accepts. Automaton has 183 states and 245 transitions. Word has length 34 [2019-12-07 12:08:11,551 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:11,551 INFO L462 AbstractCegarLoop]: Abstraction has 183 states and 245 transitions. [2019-12-07 12:08:11,551 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 12:08:11,551 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 245 transitions. [2019-12-07 12:08:11,552 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2019-12-07 12:08:11,552 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:11,552 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:11,752 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 mathsat -unsat_core_generation=3 [2019-12-07 12:08:11,753 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:11,753 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:11,753 INFO L82 PathProgramCache]: Analyzing trace with hash 955170732, now seen corresponding path program 1 times [2019-12-07 12:08:11,754 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:11,754 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [682147876] [2019-12-07 12:08:11,755 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 10 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:11,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:11,880 INFO L264 TraceCheckSpWp]: Trace formula consists of 204 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 12:08:11,881 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:11,898 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:11,898 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:11,903 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:11,903 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [682147876] [2019-12-07 12:08:11,903 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:08:11,903 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 12:08:11,904 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1377782704] [2019-12-07 12:08:11,904 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 12:08:11,904 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:11,904 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 12:08:11,904 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 12:08:11,905 INFO L87 Difference]: Start difference. First operand 183 states and 245 transitions. Second operand 6 states. [2019-12-07 12:08:12,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:12,227 INFO L93 Difference]: Finished difference Result 930 states and 1260 transitions. [2019-12-07 12:08:12,227 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 12:08:12,227 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2019-12-07 12:08:12,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:12,232 INFO L225 Difference]: With dead ends: 930 [2019-12-07 12:08:12,232 INFO L226 Difference]: Without dead ends: 754 [2019-12-07 12:08:12,232 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2019-12-07 12:08:12,234 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 754 states. [2019-12-07 12:08:12,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 754 to 335. [2019-12-07 12:08:12,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 335 states. [2019-12-07 12:08:12,270 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 335 states to 335 states and 443 transitions. [2019-12-07 12:08:12,271 INFO L78 Accepts]: Start accepts. Automaton has 335 states and 443 transitions. Word has length 35 [2019-12-07 12:08:12,271 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:12,271 INFO L462 AbstractCegarLoop]: Abstraction has 335 states and 443 transitions. [2019-12-07 12:08:12,271 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 12:08:12,271 INFO L276 IsEmpty]: Start isEmpty. Operand 335 states and 443 transitions. [2019-12-07 12:08:12,272 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2019-12-07 12:08:12,272 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:12,272 INFO L410 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:12,473 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 mathsat -unsat_core_generation=3 [2019-12-07 12:08:12,473 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:12,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:12,473 INFO L82 PathProgramCache]: Analyzing trace with hash 1510184545, now seen corresponding path program 1 times [2019-12-07 12:08:12,474 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:12,474 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [507651013] [2019-12-07 12:08:12,474 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 11 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:12,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:12,569 INFO L264 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:08:12,570 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:12,584 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:12,585 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:12,603 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:12,603 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [507651013] [2019-12-07 12:08:12,603 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [557114155] [2019-12-07 12:08:12,603 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/cvc4 Starting monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:08:12,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:12,695 INFO L264 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 12:08:12,697 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:12,708 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:12,708 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:12,713 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:12,713 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1585585963] [2019-12-07 12:08:12,713 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/z3 Starting monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 12:08:12,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:12,828 INFO L264 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:08:12,829 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:12,832 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:12,833 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:12,836 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 12:08:12,837 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 12:08:12,837 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 6, 5, 5, 5] total 9 [2019-12-07 12:08:12,837 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2106916087] [2019-12-07 12:08:12,837 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2019-12-07 12:08:12,837 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:12,838 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2019-12-07 12:08:12,838 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2019-12-07 12:08:12,838 INFO L87 Difference]: Start difference. First operand 335 states and 443 transitions. Second operand 9 states. [2019-12-07 12:08:13,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:13,156 INFO L93 Difference]: Finished difference Result 836 states and 1121 transitions. [2019-12-07 12:08:13,156 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-12-07 12:08:13,156 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 56 [2019-12-07 12:08:13,156 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:13,158 INFO L225 Difference]: With dead ends: 836 [2019-12-07 12:08:13,158 INFO L226 Difference]: Without dead ends: 508 [2019-12-07 12:08:13,159 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 345 GetRequests, 329 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=96, Invalid=210, Unknown=0, NotChecked=0, Total=306 [2019-12-07 12:08:13,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 508 states. [2019-12-07 12:08:13,186 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 508 to 320. [2019-12-07 12:08:13,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 320 states. [2019-12-07 12:08:13,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 320 states to 320 states and 411 transitions. [2019-12-07 12:08:13,188 INFO L78 Accepts]: Start accepts. Automaton has 320 states and 411 transitions. Word has length 56 [2019-12-07 12:08:13,188 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:13,188 INFO L462 AbstractCegarLoop]: Abstraction has 320 states and 411 transitions. [2019-12-07 12:08:13,188 INFO L463 AbstractCegarLoop]: Interpolant automaton has 9 states. [2019-12-07 12:08:13,188 INFO L276 IsEmpty]: Start isEmpty. Operand 320 states and 411 transitions. [2019-12-07 12:08:13,189 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2019-12-07 12:08:13,189 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:13,189 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:13,790 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 cvc4 --incremental --print-success --lang smt --rewrite-divk,13 z3 -smt2 -in SMTLIB2_COMPLIANT=true,11 mathsat -unsat_core_generation=3 [2019-12-07 12:08:13,792 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:13,792 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:13,792 INFO L82 PathProgramCache]: Analyzing trace with hash -616064905, now seen corresponding path program 1 times [2019-12-07 12:08:13,793 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:13,793 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2133542679] [2019-12-07 12:08:13,793 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 14 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:13,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:13,963 INFO L264 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:08:13,965 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:13,992 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 75 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 12:08:13,993 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:14,027 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 75 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 12:08:14,027 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2133542679] [2019-12-07 12:08:14,027 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1570914208] [2019-12-07 12:08:14,027 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/cvc4 Starting monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:08:14,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:14,124 INFO L264 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:08:14,125 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:14,167 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 58 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:08:14,168 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:14,178 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 58 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:08:14,178 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1772783231] [2019-12-07 12:08:14,178 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/z3 Starting monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 12:08:14,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:14,257 INFO L264 TraceCheckSpWp]: Trace formula consists of 291 conjuncts, 9 conjunts are in the unsatisfiable core [2019-12-07 12:08:14,259 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:14,295 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 89 proven. 2 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 12:08:14,296 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:14,343 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 91 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 12:08:14,343 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 5 imperfect interpolant sequences. [2019-12-07 12:08:14,344 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [5, 5, 5, 5, 8] total 18 [2019-12-07 12:08:14,344 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [606041778] [2019-12-07 12:08:14,344 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 12:08:14,344 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:14,344 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 12:08:14,344 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=256, Unknown=0, NotChecked=0, Total=306 [2019-12-07 12:08:14,345 INFO L87 Difference]: Start difference. First operand 320 states and 411 transitions. Second operand 8 states. [2019-12-07 12:08:14,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:14,720 INFO L93 Difference]: Finished difference Result 1333 states and 1722 transitions. [2019-12-07 12:08:14,721 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2019-12-07 12:08:14,721 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 99 [2019-12-07 12:08:14,721 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:14,725 INFO L225 Difference]: With dead ends: 1333 [2019-12-07 12:08:14,725 INFO L226 Difference]: Without dead ends: 1020 [2019-12-07 12:08:14,726 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 609 GetRequests, 581 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 92 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=161, Invalid=709, Unknown=0, NotChecked=0, Total=870 [2019-12-07 12:08:14,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1020 states. [2019-12-07 12:08:14,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1020 to 573. [2019-12-07 12:08:14,767 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 573 states. [2019-12-07 12:08:14,768 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 573 states to 573 states and 746 transitions. [2019-12-07 12:08:14,768 INFO L78 Accepts]: Start accepts. Automaton has 573 states and 746 transitions. Word has length 99 [2019-12-07 12:08:14,768 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:14,768 INFO L462 AbstractCegarLoop]: Abstraction has 573 states and 746 transitions. [2019-12-07 12:08:14,768 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 12:08:14,768 INFO L276 IsEmpty]: Start isEmpty. Operand 573 states and 746 transitions. [2019-12-07 12:08:14,769 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2019-12-07 12:08:14,769 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:14,770 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:15,371 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 z3 -smt2 -in SMTLIB2_COMPLIANT=true,14 mathsat -unsat_core_generation=3,15 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:08:15,372 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:15,372 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:15,373 INFO L82 PathProgramCache]: Analyzing trace with hash -905180676, now seen corresponding path program 1 times [2019-12-07 12:08:15,373 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:15,374 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1606313652] [2019-12-07 12:08:15,374 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 17 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:15,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:15,519 INFO L264 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:08:15,521 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:15,536 INFO L134 CoverageAnalysis]: Checked inductivity of 109 backedges. 90 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 12:08:15,537 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:15,561 INFO L134 CoverageAnalysis]: Checked inductivity of 109 backedges. 90 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 12:08:15,561 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1606313652] [2019-12-07 12:08:15,561 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:08:15,561 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2019-12-07 12:08:15,561 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [657826350] [2019-12-07 12:08:15,562 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 12:08:15,562 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:15,562 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 12:08:15,562 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2019-12-07 12:08:15,562 INFO L87 Difference]: Start difference. First operand 573 states and 746 transitions. Second operand 8 states. [2019-12-07 12:08:15,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:15,819 INFO L93 Difference]: Finished difference Result 1370 states and 1768 transitions. [2019-12-07 12:08:15,819 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 12:08:15,819 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 101 [2019-12-07 12:08:15,819 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:15,822 INFO L225 Difference]: With dead ends: 1370 [2019-12-07 12:08:15,822 INFO L226 Difference]: Without dead ends: 804 [2019-12-07 12:08:15,823 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 206 GetRequests, 196 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2019-12-07 12:08:15,824 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 804 states. [2019-12-07 12:08:15,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 804 to 573. [2019-12-07 12:08:15,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 573 states. [2019-12-07 12:08:15,864 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 573 states to 573 states and 737 transitions. [2019-12-07 12:08:15,864 INFO L78 Accepts]: Start accepts. Automaton has 573 states and 737 transitions. Word has length 101 [2019-12-07 12:08:15,864 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:15,864 INFO L462 AbstractCegarLoop]: Abstraction has 573 states and 737 transitions. [2019-12-07 12:08:15,864 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 12:08:15,864 INFO L276 IsEmpty]: Start isEmpty. Operand 573 states and 737 transitions. [2019-12-07 12:08:15,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2019-12-07 12:08:15,865 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:15,865 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:16,066 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 mathsat -unsat_core_generation=3 [2019-12-07 12:08:16,066 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:16,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:16,067 INFO L82 PathProgramCache]: Analyzing trace with hash -1551440519, now seen corresponding path program 1 times [2019-12-07 12:08:16,067 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:16,068 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1875529133] [2019-12-07 12:08:16,068 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 18 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:16,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:16,206 INFO L264 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:08:16,208 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:16,229 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:08:16,229 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:16,238 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:08:16,239 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1875529133] [2019-12-07 12:08:16,239 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1579621670] [2019-12-07 12:08:16,239 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/cvc4 Starting monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:08:16,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:16,338 INFO L264 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:08:16,339 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:16,348 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:08:16,348 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:16,358 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:08:16,359 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1613517553] [2019-12-07 12:08:16,359 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/z3 Starting monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 12:08:16,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:16,445 INFO L264 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:08:16,446 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:16,455 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:08:16,455 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:16,464 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 12:08:16,464 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 12:08:16,465 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 5 [2019-12-07 12:08:16,465 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1212942036] [2019-12-07 12:08:16,465 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 12:08:16,465 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:16,465 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 12:08:16,466 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 12:08:16,466 INFO L87 Difference]: Start difference. First operand 573 states and 737 transitions. Second operand 6 states. [2019-12-07 12:08:16,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:16,726 INFO L93 Difference]: Finished difference Result 3441 states and 4445 transitions. [2019-12-07 12:08:16,726 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 12:08:16,726 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 102 [2019-12-07 12:08:16,727 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:16,736 INFO L225 Difference]: With dead ends: 3441 [2019-12-07 12:08:16,736 INFO L226 Difference]: Without dead ends: 2875 [2019-12-07 12:08:16,737 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 612 GetRequests, 602 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2019-12-07 12:08:16,740 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2875 states. [2019-12-07 12:08:16,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2875 to 1125. [2019-12-07 12:08:16,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1125 states. [2019-12-07 12:08:16,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1125 states to 1125 states and 1422 transitions. [2019-12-07 12:08:16,832 INFO L78 Accepts]: Start accepts. Automaton has 1125 states and 1422 transitions. Word has length 102 [2019-12-07 12:08:16,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:16,833 INFO L462 AbstractCegarLoop]: Abstraction has 1125 states and 1422 transitions. [2019-12-07 12:08:16,833 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 12:08:16,833 INFO L276 IsEmpty]: Start isEmpty. Operand 1125 states and 1422 transitions. [2019-12-07 12:08:16,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2019-12-07 12:08:16,834 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:16,834 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:17,435 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 mathsat -unsat_core_generation=3,20 z3 -smt2 -in SMTLIB2_COMPLIANT=true,19 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:08:17,436 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:17,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:17,437 INFO L82 PathProgramCache]: Analyzing trace with hash -2002608015, now seen corresponding path program 1 times [2019-12-07 12:08:17,438 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:17,438 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1983756689] [2019-12-07 12:08:17,438 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 21 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:17,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 12:08:17,581 INFO L264 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 12:08:17,582 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:17,609 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2019-12-07 12:08:17,609 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:17,642 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2019-12-07 12:08:17,642 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1983756689] [2019-12-07 12:08:17,642 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 12:08:17,642 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 10 [2019-12-07 12:08:17,642 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [740672637] [2019-12-07 12:08:17,643 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-12-07 12:08:17,643 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:17,643 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-12-07 12:08:17,643 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2019-12-07 12:08:17,643 INFO L87 Difference]: Start difference. First operand 1125 states and 1422 transitions. Second operand 10 states. [2019-12-07 12:08:18,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:18,019 INFO L93 Difference]: Finished difference Result 3413 states and 4339 transitions. [2019-12-07 12:08:18,020 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2019-12-07 12:08:18,020 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 103 [2019-12-07 12:08:18,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:18,027 INFO L225 Difference]: With dead ends: 3413 [2019-12-07 12:08:18,027 INFO L226 Difference]: Without dead ends: 2295 [2019-12-07 12:08:18,029 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 213 GetRequests, 200 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=66, Invalid=144, Unknown=0, NotChecked=0, Total=210 [2019-12-07 12:08:18,031 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2295 states. [2019-12-07 12:08:18,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2295 to 1041. [2019-12-07 12:08:18,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 1041 states. [2019-12-07 12:08:18,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1041 states to 1041 states and 1297 transitions. [2019-12-07 12:08:18,134 INFO L78 Accepts]: Start accepts. Automaton has 1041 states and 1297 transitions. Word has length 103 [2019-12-07 12:08:18,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:18,134 INFO L462 AbstractCegarLoop]: Abstraction has 1041 states and 1297 transitions. [2019-12-07 12:08:18,134 INFO L463 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-12-07 12:08:18,134 INFO L276 IsEmpty]: Start isEmpty. Operand 1041 states and 1297 transitions. [2019-12-07 12:08:18,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2019-12-07 12:08:18,136 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 12:08:18,136 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 12:08:18,336 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 mathsat -unsat_core_generation=3 [2019-12-07 12:08:18,337 INFO L410 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 12:08:18,337 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 12:08:18,337 INFO L82 PathProgramCache]: Analyzing trace with hash -249309905, now seen corresponding path program 2 times [2019-12-07 12:08:18,337 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 12:08:18,337 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [977058391] [2019-12-07 12:08:18,338 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/mathsat Starting monitored process 22 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with mathsat -unsat_core_generation=3 [2019-12-07 12:08:19,043 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 12:08:19,043 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 12:08:19,071 INFO L264 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 12:08:19,073 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:19,109 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 17 proven. 80 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 12:08:19,109 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:19,161 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 17 proven. 80 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 12:08:19,161 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [977058391] [2019-12-07 12:08:19,161 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [906228019] [2019-12-07 12:08:19,161 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/cvc4 Starting monitored process 23 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:08:20,655 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 12:08:20,655 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 12:08:20,686 INFO L264 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 12:08:20,688 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:20,741 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 12:08:20,741 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:20,786 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 12:08:20,787 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2114514675] [2019-12-07 12:08:20,787 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/z3 Starting monitored process 24 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 12:08:20,899 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 12:08:20,899 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 12:08:20,905 INFO L264 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 12:08:20,906 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 12:08:20,917 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 12:08:20,917 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 12:08:20,926 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 60 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 12:08:20,926 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 12:08:20,926 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 7, 7, 7, 7] total 14 [2019-12-07 12:08:20,926 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1895311624] [2019-12-07 12:08:20,927 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2019-12-07 12:08:20,927 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 12:08:20,927 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2019-12-07 12:08:20,927 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=145, Unknown=0, NotChecked=0, Total=182 [2019-12-07 12:08:20,927 INFO L87 Difference]: Start difference. First operand 1041 states and 1297 transitions. Second operand 14 states. [2019-12-07 12:08:21,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 12:08:21,396 INFO L93 Difference]: Finished difference Result 2167 states and 2702 transitions. [2019-12-07 12:08:21,396 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2019-12-07 12:08:21,397 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 103 [2019-12-07 12:08:21,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 12:08:21,397 INFO L225 Difference]: With dead ends: 2167 [2019-12-07 12:08:21,397 INFO L226 Difference]: Without dead ends: 0 [2019-12-07 12:08:21,399 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 625 GetRequests, 601 SyntacticMatches, 3 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 68 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=122, Invalid=384, Unknown=0, NotChecked=0, Total=506 [2019-12-07 12:08:21,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-12-07 12:08:21,399 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-12-07 12:08:21,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-12-07 12:08:21,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 12:08:21,400 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 103 [2019-12-07 12:08:21,400 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 12:08:21,400 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 12:08:21,400 INFO L463 AbstractCegarLoop]: Interpolant automaton has 14 states. [2019-12-07 12:08:21,400 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-12-07 12:08:21,400 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-12-07 12:08:22,001 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 mathsat -unsat_core_generation=3,24 z3 -smt2 -in SMTLIB2_COMPLIANT=true,23 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 12:08:22,005 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-12-07 12:08:22,991 WARN L192 SmtUtils]: Spent 943.00 ms on a formula simplification. DAG size of input: 528 DAG size of output: 501 [2019-12-07 12:08:23,481 WARN L192 SmtUtils]: Spent 485.00 ms on a formula simplification. DAG size of input: 411 DAG size of output: 380 [2019-12-07 12:08:23,759 WARN L192 SmtUtils]: Spent 275.00 ms on a formula simplification. DAG size of input: 276 DAG size of output: 247 [2019-12-07 12:08:24,030 WARN L192 SmtUtils]: Spent 269.00 ms on a formula simplification. DAG size of input: 347 DAG size of output: 336 [2019-12-07 12:08:24,804 WARN L192 SmtUtils]: Spent 741.00 ms on a formula simplification. DAG size of input: 501 DAG size of output: 471 [2019-12-07 12:08:25,776 WARN L192 SmtUtils]: Spent 967.00 ms on a formula simplification. DAG size of input: 582 DAG size of output: 515 [2019-12-07 12:08:26,638 WARN L192 SmtUtils]: Spent 827.00 ms on a formula simplification. DAG size of input: 536 DAG size of output: 514 [2019-12-07 12:08:27,420 WARN L192 SmtUtils]: Spent 779.00 ms on a formula simplification. DAG size of input: 523 DAG size of output: 489 [2019-12-07 12:08:27,542 WARN L192 SmtUtils]: Spent 119.00 ms on a formula simplification. DAG size of input: 160 DAG size of output: 156 [2019-12-07 12:08:28,121 WARN L192 SmtUtils]: Spent 574.00 ms on a formula simplification. DAG size of input: 461 DAG size of output: 431 [2019-12-07 12:08:28,296 WARN L192 SmtUtils]: Spent 173.00 ms on a formula simplification. DAG size of input: 265 DAG size of output: 257 [2019-12-07 12:08:29,177 WARN L192 SmtUtils]: Spent 878.00 ms on a formula simplification. DAG size of input: 562 DAG size of output: 535 [2019-12-07 12:08:29,315 WARN L192 SmtUtils]: Spent 136.00 ms on a formula simplification. DAG size of input: 217 DAG size of output: 206 [2019-12-07 12:08:36,935 WARN L192 SmtUtils]: Spent 7.60 s on a formula simplification. DAG size of input: 500 DAG size of output: 85 [2019-12-07 12:08:40,964 WARN L192 SmtUtils]: Spent 4.03 s on a formula simplification. DAG size of input: 355 DAG size of output: 83 [2019-12-07 12:08:43,158 WARN L192 SmtUtils]: Spent 2.19 s on a formula simplification. DAG size of input: 245 DAG size of output: 37 [2019-12-07 12:08:46,444 WARN L192 SmtUtils]: Spent 3.28 s on a formula simplification. DAG size of input: 334 DAG size of output: 79 [2019-12-07 12:08:46,968 WARN L192 SmtUtils]: Spent 520.00 ms on a formula simplification. DAG size of input: 111 DAG size of output: 51 [2019-12-07 12:08:54,155 WARN L192 SmtUtils]: Spent 7.18 s on a formula simplification. DAG size of input: 467 DAG size of output: 89 [2019-12-07 12:09:01,312 WARN L192 SmtUtils]: Spent 7.14 s on a formula simplification. DAG size of input: 506 DAG size of output: 82 [2019-12-07 12:09:01,853 WARN L192 SmtUtils]: Spent 538.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 48 [2019-12-07 12:09:10,953 WARN L192 SmtUtils]: Spent 9.00 s on a formula simplification. DAG size of input: 514 DAG size of output: 92 [2019-12-07 12:09:17,610 WARN L192 SmtUtils]: Spent 6.66 s on a formula simplification. DAG size of input: 464 DAG size of output: 83 [2019-12-07 12:09:18,712 WARN L192 SmtUtils]: Spent 1.10 s on a formula simplification. DAG size of input: 156 DAG size of output: 48 [2019-12-07 12:09:23,933 WARN L192 SmtUtils]: Spent 5.21 s on a formula simplification. DAG size of input: 407 DAG size of output: 84 [2019-12-07 12:09:26,005 WARN L192 SmtUtils]: Spent 2.07 s on a formula simplification. DAG size of input: 237 DAG size of output: 56 [2019-12-07 12:09:34,066 WARN L192 SmtUtils]: Spent 8.06 s on a formula simplification. DAG size of input: 534 DAG size of output: 86 [2019-12-07 12:09:36,147 WARN L192 SmtUtils]: Spent 2.08 s on a formula simplification. DAG size of input: 204 DAG size of output: 52 [2019-12-07 12:09:36,151 INFO L246 CegarLoopResult]: For program point L729(lines 729 735) no Hoare annotation was computed. [2019-12-07 12:09:36,151 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 850) no Hoare annotation was computed. [2019-12-07 12:09:36,151 INFO L246 CegarLoopResult]: For program point L729-2(lines 729 735) no Hoare annotation was computed. [2019-12-07 12:09:36,151 INFO L246 CegarLoopResult]: For program point L729-4(lines 729 735) no Hoare annotation was computed. [2019-12-07 12:09:36,151 INFO L246 CegarLoopResult]: For program point L300(lines 300 315) no Hoare annotation was computed. [2019-12-07 12:09:36,152 INFO L242 CegarLoopResult]: At program point L70(lines 70 76) the Hoare annotation is: (let ((.cse13 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse17 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse6 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse7 (= ~waterLevel~0 (_ bv0 32))) (.cse15 (or .cse13 .cse17)) (.cse8 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse14 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7))) (.cse10 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse21 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse18 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse22 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse19 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse20 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse3 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse11 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse16 (= (_ bv1 32) ~pumpRunning~0)) (.cse12 (= ~waterLevel~0 (_ bv2 32))) (.cse9 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse5 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse7 .cse1 .cse8 .cse9 .cse4 .cse5 .cse10) (and .cse1 .cse3 .cse2 .cse11 .cse4 .cse5) (and .cse0 .cse1 .cse3 .cse12 .cse4 .cse5) (and .cse0 .cse7 .cse1 .cse3 .cse13 .cse4 .cse5 .cse14) (and .cse6 .cse7 .cse1 .cse3 .cse8 .cse15 .cse11 .cse4 .cse5 .cse14) (and .cse0 .cse16 .cse3 .cse12 .cse4 .cse17 .cse5) (and .cse16 .cse18 .cse7 .cse9 .cse4 .cse19 .cse20 .cse0 .cse21 .cse22 .cse13 .cse5 .cse14) (and .cse1 .cse2 .cse9 .cse11 .cse4 .cse5) (and .cse1 .cse12 .cse11 .cse9 .cse4 .cse17 .cse5) (and .cse6 .cse7 .cse1 .cse15 .cse8 .cse9 .cse11 .cse4 .cse5 .cse14) (and .cse0 .cse1 .cse12 .cse9 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse9 .cse4 .cse5 .cse10) (and .cse0 .cse21 .cse18 .cse16 .cse2 .cse22 .cse9 .cse4 .cse19 .cse5 .cse20) (and .cse1 .cse3 .cse12 .cse11 .cse4 .cse17 .cse5) (and .cse0 .cse16 .cse12 .cse9 .cse4 .cse17 .cse5)))) [2019-12-07 12:09:36,152 INFO L242 CegarLoopResult]: At program point L70-1(lines 70 76) the Hoare annotation is: false [2019-12-07 12:09:36,152 INFO L242 CegarLoopResult]: At program point L70-2(lines 70 76) the Hoare annotation is: false [2019-12-07 12:09:36,152 INFO L246 CegarLoopResult]: For program point L896(lines 896 900) no Hoare annotation was computed. [2019-12-07 12:09:36,152 INFO L246 CegarLoopResult]: For program point L896-3(lines 896 900) no Hoare annotation was computed. [2019-12-07 12:09:36,152 INFO L246 CegarLoopResult]: For program point L896-6(lines 896 900) no Hoare annotation was computed. [2019-12-07 12:09:36,152 INFO L246 CegarLoopResult]: For program point L237(lines 237 243) no Hoare annotation was computed. [2019-12-07 12:09:36,153 INFO L242 CegarLoopResult]: At program point L237-1(lines 237 243) the Hoare annotation is: (let ((.cse7 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse1 (= ~waterLevel~0 (_ bv2 32))) (.cse5 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse6 (= ~waterLevel~0 (_ bv0 32))) (.cse8 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse9 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse2 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse3 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse0 .cse7 .cse8 .cse3 .cse4) (and .cse0 .cse9 .cse7 .cse3 .cse4) (and .cse0 .cse7 .cse1 .cse3 .cse4) (and .cse5 .cse6 .cse0 .cse8 .cse2 .cse3 .cse4) (and .cse0 .cse9 .cse2 .cse3 .cse4))) [2019-12-07 12:09:36,153 INFO L246 CegarLoopResult]: For program point L832(lines 832 839) no Hoare annotation was computed. [2019-12-07 12:09:36,153 INFO L249 CegarLoopResult]: At program point L832-1(lines 832 839) the Hoare annotation is: true [2019-12-07 12:09:36,153 INFO L246 CegarLoopResult]: For program point L271(lines 270 319) no Hoare annotation was computed. [2019-12-07 12:09:36,153 INFO L242 CegarLoopResult]: At program point L965(lines 960 968) the Hoare annotation is: (let ((.cse11 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (let ((.cse13 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse15 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse16 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse17 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse18 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse14 (= (_ bv1 32) ~pumpRunning~0)) (.cse10 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse9 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse12 (not (= ~systemActive~0 (_ bv0 32)))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse19 (= ~waterLevel~0 (_ bv0 32))) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse3 (not .cse11)) (.cse5 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse8 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse1 .cse9 .cse10 .cse4 .cse6 .cse7 .cse11) (and .cse12 .cse1 .cse10 .cse5 .cse6 .cse7 .cse11) (and .cse12 .cse0 .cse13 .cse14 .cse15 .cse2 .cse16 .cse5 .cse6 .cse17 .cse7 .cse18) (and .cse12 .cse0 .cse19 .cse1 .cse9 .cse6 .cse7) (and .cse1 .cse5 .cse4 .cse10 .cse6 .cse7 .cse11) (and .cse12 .cse0 .cse1 .cse2 .cse3 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse19 .cse1 .cse5 .cse4 .cse6 .cse7) (and .cse12 .cse0 .cse13 .cse14 .cse15 .cse19 .cse16 .cse5 .cse6 .cse17 .cse7 .cse18) (and .cse12 .cse14 .cse9 .cse10 .cse6 .cse7 .cse11) (and .cse12 .cse1 .cse9 .cse10 .cse6 .cse7 .cse11) (and .cse12 .cse0 .cse1 .cse2 .cse9 .cse6 .cse7) (and .cse0 .cse19 .cse1 .cse9 .cse3 .cse4 .cse6 .cse7 .cse8) (and .cse12 .cse14 .cse5 .cse10 .cse6 .cse7 .cse11) (and .cse0 .cse1 .cse2 .cse9 .cse3 .cse4 .cse6 .cse7 .cse8) (and .cse12 .cse0 .cse19 .cse1 .cse3 .cse5 .cse6 .cse7 .cse8)))) [2019-12-07 12:09:36,153 INFO L242 CegarLoopResult]: At program point L965-1(lines 960 968) the Hoare annotation is: false [2019-12-07 12:09:36,154 INFO L242 CegarLoopResult]: At program point L965-2(lines 960 968) the Hoare annotation is: false [2019-12-07 12:09:36,154 INFO L246 CegarLoopResult]: For program point L272(lines 272 276) no Hoare annotation was computed. [2019-12-07 12:09:36,154 INFO L242 CegarLoopResult]: At program point L933(lines 928 936) the Hoare annotation is: (let ((.cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse6 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse10 (= ~waterLevel~0 (_ bv0 32))) (.cse11 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse8 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse12 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse2 (= (_ bv1 32) ~pumpRunning~0)) (.cse3 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse13 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse5 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse14 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse9 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse2 .cse3 .cse10 .cse4 .cse11 .cse6 .cse7 .cse8 .cse9 .cse12) (and .cse0 .cse2 .cse3 .cse10 .cse4 .cse13 .cse11 .cse14 .cse7 .cse8 .cse9 .cse12) (and .cse0 .cse2 .cse3 .cse13 .cse5 .cse4 .cse14 .cse7 .cse9))) [2019-12-07 12:09:36,154 INFO L242 CegarLoopResult]: At program point L933-1(lines 928 936) the Hoare annotation is: false [2019-12-07 12:09:36,154 INFO L242 CegarLoopResult]: At program point L933-2(lines 928 936) the Hoare annotation is: false [2019-12-07 12:09:36,154 INFO L242 CegarLoopResult]: At program point L174(lines 169 177) the Hoare annotation is: (let ((.cse15 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse21 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse13 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse18 (or .cse15 .cse21)) (.cse19 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32)))) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse3 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse7 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse8 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse11 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse22 (= ~waterLevel~0 (_ bv1 32))) (.cse17 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse20 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7))) (.cse12 (= (_ bv0 32) ~pumpRunning~0)) (.cse14 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse2 (= (_ bv1 32) ~pumpRunning~0)) (.cse5 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse16 (= ~waterLevel~0 (_ bv2 32))) (.cse9 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse12 .cse13 .cse5 .cse14 .cse9 .cse10) (and .cse1 .cse4 .cse12 .cse5 .cse15 .cse7 .cse14 .cse9 .cse10 .cse11) (and .cse12 .cse16 .cse14 .cse17 .cse9 .cse10) (and .cse1 .cse4 .cse12 .cse15 .cse7 .cse14 .cse17 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse4 .cse6 .cse7 .cse18 .cse17 .cse9 .cse10 .cse19 .cse20) (and .cse0 .cse2 .cse6 .cse16 .cse17 .cse9 .cse21 .cse10) (and .cse12 .cse13 .cse17 .cse14 .cse9 .cse10) (and .cse0 .cse2 .cse5 .cse6 .cse15 .cse22 .cse9 .cse21 .cse10 .cse20) (and .cse0 .cse1 .cse2 .cse4 .cse6 .cse5 .cse18 .cse7 .cse9 .cse10 .cse19 .cse20) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse7 .cse17 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse2 .cse6 .cse15 .cse22 .cse17 .cse9 .cse21 .cse10 .cse20) (and .cse12 .cse5 .cse16 .cse14 .cse9 .cse10) (and .cse0 .cse2 .cse5 .cse6 .cse16 .cse9 .cse21 .cse10)))) [2019-12-07 12:09:36,155 INFO L242 CegarLoopResult]: At program point L174-1(lines 169 177) the Hoare annotation is: (let ((.cse11 (= (_ bv1 32) ~pumpRunning~0)) (.cse12 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse19 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse5 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse13 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse14 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse15 (not (= ~systemActive~0 (_ bv0 32)))) (.cse16 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse17 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse1 (= ~waterLevel~0 (_ bv0 32))) (.cse2 (= (_ bv0 32) ~pumpRunning~0)) (.cse18 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse4 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse3 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse6 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse7 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse9 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7))) (.cse10 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse12 .cse1 .cse5 .cse7 .cse13 .cse14 .cse15 .cse0 .cse16 .cse17 .cse3 .cse8) (and .cse0 .cse2 .cse18 .cse19 .cse4 .cse3 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse2 .cse19 .cse3 .cse5 .cse6 .cse7 .cse8) (and .cse11 .cse12 .cse19 .cse5 .cse7 .cse13 .cse14 .cse15 .cse0 .cse16 .cse17 .cse3 .cse8) (and .cse0 .cse1 .cse2 .cse18 .cse4 .cse3 .cse6 .cse7 .cse8 .cse9 .cse10))) [2019-12-07 12:09:36,155 INFO L242 CegarLoopResult]: At program point L174-2(lines 169 177) the Hoare annotation is: false [2019-12-07 12:09:36,155 INFO L242 CegarLoopResult]: At program point L174-3(lines 169 177) the Hoare annotation is: false [2019-12-07 12:09:36,155 INFO L242 CegarLoopResult]: At program point L174-4(lines 169 177) the Hoare annotation is: false [2019-12-07 12:09:36,155 INFO L242 CegarLoopResult]: At program point L174-5(lines 169 177) the Hoare annotation is: false [2019-12-07 12:09:36,155 INFO L242 CegarLoopResult]: At program point L703(lines 698 705) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 12:09:36,156 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 850) no Hoare annotation was computed. [2019-12-07 12:09:36,156 INFO L246 CegarLoopResult]: For program point L308(lines 308 314) no Hoare annotation was computed. [2019-12-07 12:09:36,156 INFO L242 CegarLoopResult]: At program point L308-1(lines 1 982) the Hoare annotation is: (let ((.cse16 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse4 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse3 (= ~waterLevel~0 (_ bv2 32))) (.cse7 (= (_ bv0 32) ~pumpRunning~0)) (.cse18 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse17 (= ~waterLevel~0 (_ bv1 32))) (.cse13 (or .cse16 .cse4)) (.cse14 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32)))) (.cse15 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7))) (.cse8 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse9 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse19 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse10 (= ~waterLevel~0 (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse12 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse11 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse20 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse6 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse21 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse3 .cse8 .cse5 .cse6) (and .cse9 .cse10 .cse7 .cse2 .cse11 .cse5 .cse6) (and .cse0 .cse9 .cse1 .cse10 .cse12 .cse13 .cse11 .cse8 .cse5 .cse6 .cse14 .cse15) (and .cse7 .cse2 .cse3 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse16 .cse17 .cse4 .cse5 .cse6 .cse15) (and .cse9 .cse10 .cse7 .cse11 .cse8 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse8 .cse4 .cse5 .cse6) (and .cse7 .cse18 .cse8 .cse5 .cse6) (and .cse7 .cse18 .cse2 .cse5 .cse6) (and .cse0 .cse1 .cse16 .cse8 .cse17 .cse4 .cse5 .cse6 .cse15) (and .cse0 .cse9 .cse1 .cse10 .cse12 .cse2 .cse11 .cse13 .cse5 .cse6 .cse14 .cse15) (and .cse0 .cse9 .cse1 .cse19 .cse10 .cse12 .cse11 .cse8 .cse5 .cse20 .cse6 .cse21) (and .cse0 .cse9 .cse1 .cse19 .cse10 .cse2 .cse12 .cse11 .cse5 .cse20 .cse6 .cse21)))) [2019-12-07 12:09:36,156 INFO L242 CegarLoopResult]: At program point L805(lines 801 807) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 12:09:36,156 INFO L246 CegarLoopResult]: For program point L973(lines 973 979) no Hoare annotation was computed. [2019-12-07 12:09:36,156 INFO L246 CegarLoopResult]: For program point L973-1(lines 973 979) no Hoare annotation was computed. [2019-12-07 12:09:36,156 INFO L246 CegarLoopResult]: For program point L973-2(lines 973 979) no Hoare annotation was computed. [2019-12-07 12:09:36,156 INFO L246 CegarLoopResult]: For program point L973-3(lines 973 979) no Hoare annotation was computed. [2019-12-07 12:09:36,157 INFO L246 CegarLoopResult]: For program point L973-4(lines 973 979) no Hoare annotation was computed. [2019-12-07 12:09:36,157 INFO L249 CegarLoopResult]: At program point L841(lines 822 844) the Hoare annotation is: true [2019-12-07 12:09:36,157 INFO L246 CegarLoopResult]: For program point L973-5(lines 973 979) no Hoare annotation was computed. [2019-12-07 12:09:36,157 INFO L246 CegarLoopResult]: For program point L280(lines 280 286) no Hoare annotation was computed. [2019-12-07 12:09:36,157 INFO L242 CegarLoopResult]: At program point L280-1(lines 280 286) the Hoare annotation is: (let ((.cse17 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse18 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (let ((.cse8 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse9 (not .cse18)) (.cse11 (= ~waterLevel~0 (_ bv1 32))) (.cse13 (not .cse17)) (.cse3 (= (_ bv0 32) ~pumpRunning~0)) (.cse15 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse16 (= ~waterLevel~0 (_ bv2 32))) (.cse10 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse12 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse14 (= (_ bv1 32) ~pumpRunning~0)) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse4 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse5 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse3 .cse9 .cse10 .cse5 .cse11 .cse6 .cse12 .cse7 .cse13) (and .cse0 .cse14 .cse15 .cse16 .cse6 .cse7 .cse17 .cse18) (and .cse1 .cse2 .cse3 .cse15 .cse4 .cse10 .cse6 .cse7) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse10 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse15 .cse4 .cse6 .cse7) (and .cse0 .cse14 .cse16 .cse5 .cse6 .cse7) (and .cse3 .cse16 .cse10 .cse5 .cse6 .cse12 .cse7) (and .cse0 .cse3 .cse15 .cse9 .cse11 .cse6 .cse12 .cse7 .cse13) (and .cse0 .cse3 .cse16 .cse5 .cse6 .cse12 .cse7) (and .cse3 .cse15 .cse9 .cse10 .cse11 .cse6 .cse12 .cse7 .cse13) (and .cse0 .cse3 .cse15 .cse16 .cse6 .cse12 .cse7) (and .cse0 .cse3 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse14 .cse9 .cse11 .cse5 .cse6 .cse7 .cse13) (and .cse3 .cse15 .cse16 .cse10 .cse6 .cse12 .cse7) (and .cse0 .cse1 .cse14 .cse2 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|) .cse4 .cse5 .cse6 .cse7 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32))))))) [2019-12-07 12:09:36,157 INFO L246 CegarLoopResult]: For program point L908(lines 908 912) no Hoare annotation was computed. [2019-12-07 12:09:36,157 INFO L242 CegarLoopResult]: At program point L877(lines 1 982) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 12:09:36,158 INFO L242 CegarLoopResult]: At program point L713(lines 63 69) the Hoare annotation is: (let ((.cse13 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse16 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse11 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32)))) (.cse20 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse3 (or .cse13 .cse16)) (.cse6 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse9 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse14 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse17 (= ULTIMATE.start_processEnvironment_~tmp~1 (_ bv0 32))) (.cse18 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse19 (= (_ bv0 32) ~pumpRunning~0)) (.cse22 (= ~waterLevel~0 (_ bv2 32))) (.cse21 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (not (= ~systemActive~0 (_ bv0 32)))) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse1 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse8 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse7 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse15 (= ~waterLevel~0 (_ bv1 32))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse12 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse5 .cse0 .cse1 .cse8 .cse13 .cse14 .cse15 .cse4 .cse16 .cse10 .cse12) (and .cse5 .cse6 .cse0 .cse1 .cse2 .cse7 .cse8 .cse9 .cse17 .cse4 .cse10 .cse18) (and .cse19 .cse7 .cse20 .cse21 .cse4 .cse10) (and .cse6 .cse2 .cse19 .cse7 .cse9 .cse3 .cse21 .cse4 .cse10 .cse12) (and .cse0 .cse1 .cse2 .cse3 .cse14 .cse4 .cse5 .cse6 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse19 .cse20 .cse14 .cse21 .cse4 .cse10) (and .cse5 .cse0 .cse1 .cse7 .cse8 .cse22 .cse4 .cse10) (and .cse19 .cse22 .cse21 .cse14 .cse4 .cse16 .cse10) (and .cse6 .cse2 .cse19 .cse3 .cse9 .cse14 .cse21 .cse4 .cse10 .cse12) (and .cse5 .cse0 .cse1 .cse8 .cse22 .cse14 .cse4 .cse10) (and .cse5 .cse6 .cse0 .cse1 .cse2 .cse8 .cse9 .cse14 .cse17 .cse4 .cse10 .cse18) (and .cse19 .cse7 .cse22 .cse21 .cse4 .cse16 .cse10) (and .cse5 .cse0 .cse1 .cse8 .cse7 .cse13 .cse15 .cse4 .cse16 .cse10 .cse12)))) [2019-12-07 12:09:36,158 INFO L242 CegarLoopResult]: At program point L713-1(lines 63 69) the Hoare annotation is: false [2019-12-07 12:09:36,158 INFO L242 CegarLoopResult]: At program point L713-2(lines 63 69) the Hoare annotation is: false [2019-12-07 12:09:36,158 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-12-07 12:09:36,158 INFO L242 CegarLoopResult]: At program point L978(lines 969 982) the Hoare annotation is: false [2019-12-07 12:09:36,159 INFO L242 CegarLoopResult]: At program point L978-1(lines 969 982) the Hoare annotation is: (let ((.cse3 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse11 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse0 (= (_ bv1 32) |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse8 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse9 (= ~waterLevel~0 (_ bv0 32))) (.cse10 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse7 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse1 (not (= ~systemActive~0 (_ bv0 32)))) (.cse2 (= (_ bv0 32) ~pumpRunning~0)) (.cse4 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse12 (= ~waterLevel~0 (_ bv2 32))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse8 .cse9 .cse2 .cse10 .cse11 .cse5 .cse6 .cse7) (and .cse1 .cse2 .cse12 .cse11 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse11 .cse5 .cse6 .cse7) (and .cse0 .cse1 .cse8 .cse9 .cse2 .cse4 .cse10 .cse5 .cse6 .cse7) (and .cse1 .cse2 .cse4 .cse12 .cse5 .cse6))) [2019-12-07 12:09:36,159 INFO L242 CegarLoopResult]: At program point L978-2(lines 969 982) the Hoare annotation is: false [2019-12-07 12:09:36,159 INFO L242 CegarLoopResult]: At program point L978-3(lines 969 982) the Hoare annotation is: false [2019-12-07 12:09:36,159 INFO L242 CegarLoopResult]: At program point L978-4(lines 969 982) the Hoare annotation is: false [2019-12-07 12:09:36,159 INFO L242 CegarLoopResult]: At program point L978-5(lines 969 982) the Hoare annotation is: false [2019-12-07 12:09:36,159 INFO L246 CegarLoopResult]: For program point L121(lines 121 138) no Hoare annotation was computed. [2019-12-07 12:09:36,159 INFO L246 CegarLoopResult]: For program point L121-1(lines 121 138) no Hoare annotation was computed. [2019-12-07 12:09:36,159 INFO L246 CegarLoopResult]: For program point L121-2(lines 121 138) no Hoare annotation was computed. [2019-12-07 12:09:36,159 INFO L242 CegarLoopResult]: At program point L320(lines 269 321) the Hoare annotation is: false [2019-12-07 12:09:36,159 INFO L246 CegarLoopResult]: For program point L850(line 850) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point L850-1(line 850) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point L850-2(line 850) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point L223(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point L223-2(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point L223-3(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point L223-5(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point L223-6(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point L223-8(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point L223-9(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point L223-11(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,160 INFO L246 CegarLoopResult]: For program point L223-12(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,161 INFO L246 CegarLoopResult]: For program point L223-14(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,161 INFO L246 CegarLoopResult]: For program point L223-15(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,161 INFO L246 CegarLoopResult]: For program point L223-17(lines 223 227) no Hoare annotation was computed. [2019-12-07 12:09:36,161 INFO L246 CegarLoopResult]: For program point L290(lines 290 296) no Hoare annotation was computed. [2019-12-07 12:09:36,161 INFO L242 CegarLoopResult]: At program point L290-1(lines 290 296) the Hoare annotation is: (let ((.cse18 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse7 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse8 (= ~waterLevel~0 (_ bv1 32))) (.cse9 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7))) (.cse10 (= (_ bv0 32) ~pumpRunning~0)) (.cse2 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse3 (= ~waterLevel~0 (_ bv2 32))) (.cse11 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse4 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse13 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse14 (= ~waterLevel~0 (_ bv0 32))) (.cse16 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse15 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse12 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse6 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse17 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 .cse8 .cse4 .cse5 .cse6 .cse9) (and .cse10 .cse7 .cse11 .cse12 .cse8 .cse5 .cse4 .cse6 .cse9) (and .cse0 .cse1 .cse3 .cse12 .cse4 .cse5 .cse6) (and .cse0 .cse13 .cse14 .cse10 .cse15 .cse12 .cse5 .cse6) (and .cse13 .cse14 .cse10 .cse2 .cse15 .cse11 .cse5 .cse6) (and .cse0 .cse13 .cse1 .cse14 .cse2 .cse16 .cse15 .cse5 .cse6 .cse17) (and .cse13 .cse14 .cse10 .cse15 .cse12 .cse11 .cse5 .cse6) (and .cse0 .cse13 .cse14 .cse10 .cse2 .cse15 .cse5 .cse6) (and .cse0 .cse10 .cse18 .cse12 .cse5 .cse6) (and .cse10 .cse3 .cse11 .cse12 .cse5 .cse4 .cse6) (and .cse0 .cse10 .cse3 .cse12 .cse5 .cse4 .cse6) (and .cse0 .cse1 .cse7 .cse12 .cse8 .cse4 .cse5 .cse6 .cse9) (and .cse0 .cse10 .cse2 .cse18 .cse5 .cse6) (and .cse10 .cse2 .cse7 .cse11 .cse8 .cse5 .cse4 .cse6 .cse9) (and .cse0 .cse10 .cse2 .cse3 .cse5 .cse4 .cse6) (and .cse10 .cse2 .cse3 .cse11 .cse5 .cse4 .cse6) (and .cse0 .cse13 .cse1 .cse14 .cse16 .cse15 .cse12 .cse5 .cse6 .cse17))) [2019-12-07 12:09:36,161 INFO L246 CegarLoopResult]: For program point L125(lines 125 133) no Hoare annotation was computed. [2019-12-07 12:09:36,161 INFO L246 CegarLoopResult]: For program point L125-1(lines 125 133) no Hoare annotation was computed. [2019-12-07 12:09:36,162 INFO L246 CegarLoopResult]: For program point L125-2(lines 125 133) no Hoare annotation was computed. [2019-12-07 12:09:36,162 INFO L242 CegarLoopResult]: At program point L885(lines 880 888) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 12:09:36,162 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-12-07 12:09:36,162 INFO L246 CegarLoopResult]: For program point L920(lines 920 924) no Hoare annotation was computed. [2019-12-07 12:09:36,162 INFO L246 CegarLoopResult]: For program point L95(lines 95 112) no Hoare annotation was computed. [2019-12-07 12:09:36,162 INFO L246 CegarLoopResult]: For program point L95-1(lines 95 112) no Hoare annotation was computed. [2019-12-07 12:09:36,162 INFO L246 CegarLoopResult]: For program point L95-2(lines 95 112) no Hoare annotation was computed. [2019-12-07 12:09:36,162 INFO L246 CegarLoopResult]: For program point L95-3(lines 95 112) no Hoare annotation was computed. [2019-12-07 12:09:36,162 INFO L246 CegarLoopResult]: For program point L95-4(lines 95 112) no Hoare annotation was computed. [2019-12-07 12:09:36,162 INFO L246 CegarLoopResult]: For program point L95-5(lines 95 112) no Hoare annotation was computed. [2019-12-07 12:09:36,163 INFO L242 CegarLoopResult]: At program point L63(lines 59 81) the Hoare annotation is: (let ((.cse8 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse3 (= (_ bv0 32) ~pumpRunning~0)) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse22 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse21 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse16 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse12 (or .cse21 .cse16)) (.cse5 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse15 (or (and .cse0 .cse3 .cse7 .cse8) (and .cse0 .cse3 .cse7 .cse22))) (.cse10 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse18 (= (_ bv1 32) ~pumpRunning~0)) (.cse19 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse20 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse14 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse17 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse13 (not .cse22)) (.cse4 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse9 (= ~waterLevel~0 (_ bv2 32))) (.cse11 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse3 .cse4 .cse9 .cse6 .cse7) (and .cse3 .cse4 .cse10 .cse11 .cse6 .cse7) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse12 .cse11 .cse6 .cse7 .cse13) (and .cse10 .cse14 .cse15 .cse6 .cse16 .cse17) (and .cse3 .cse10 .cse14 .cse11 .cse6 .cse7) (and .cse0 .cse1 .cse2 .cse3 .cse5 .cse14 .cse6 .cse7) (and .cse0 .cse18 .cse19 .cse10 .cse20 .cse14 .cse6 .cse17 .cse7) (and .cse3 .cse9 .cse11 .cse14 .cse6 .cse16 .cse7) (and .cse1 .cse2 .cse3 .cse12 .cse5 .cse14 .cse11 .cse6 .cse7 .cse13) (and .cse0 .cse3 .cse9 .cse14 .cse6 .cse7) (and .cse10 .cse4 .cse15 .cse6 .cse16 .cse17) (and .cse0 .cse18 .cse19 .cse4 .cse20 .cse10 .cse6 .cse7) (and .cse0 .cse18 .cse19 .cse2 .cse20 .cse4 .cse21 .cse6 .cse17 .cse7 .cse13) (and .cse0 .cse18 .cse19 .cse2 .cse20 .cse21 .cse14 .cse6 .cse17 .cse7 .cse13) (and .cse3 .cse4 .cse9 .cse11 .cse6 .cse16 .cse7)))) [2019-12-07 12:09:36,163 INFO L242 CegarLoopResult]: At program point L63-1(lines 59 81) the Hoare annotation is: false [2019-12-07 12:09:36,163 INFO L242 CegarLoopResult]: At program point L63-2(lines 59 81) the Hoare annotation is: false [2019-12-07 12:09:36,163 INFO L246 CegarLoopResult]: For program point L724(lines 724 741) no Hoare annotation was computed. [2019-12-07 12:09:36,164 INFO L242 CegarLoopResult]: At program point L724-1(lines 1 982) the Hoare annotation is: (let ((.cse5 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse6 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (let ((.cse18 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse8 (= ~waterLevel~0 (_ bv0 32))) (.cse12 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse7 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse16 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse10 (not .cse6)) (.cse17 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~2 (_ bv4294967295 32)))) (.cse13 (not .cse5)) (.cse2 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse15 (= (_ bv1 32) ~pumpRunning~0)) (.cse19 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse14 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse9 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse11 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse3 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (= ~waterLevel~0 (_ bv2 32)) .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse1 .cse9 .cse10 .cse11 .cse12 .cse3 .cse4 .cse13 .cse14) (and .cse0 .cse7 .cse15 .cse8 .cse16 .cse10 .cse9 .cse11 .cse3 .cse4 .cse17 .cse13) (and .cse1 .cse2 .cse9 .cse12 .cse3 .cse18 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse8 .cse1 .cse2 .cse10 .cse9 .cse3 .cse4 .cse13) (and .cse0 .cse7 .cse8 .cse1 .cse9 .cse11 .cse3 .cse4 .cse14) (and .cse7 .cse1 .cse19 .cse2 .cse9 .cse12 .cse3 .cse4) (and .cse1 .cse9 .cse11 .cse12 .cse3 .cse18 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse19 .cse9 .cse10 .cse11 .cse12 .cse3 .cse4 .cse13 .cse14) (and .cse7 .cse8 .cse1 .cse2 .cse9 .cse10 .cse12 .cse3 .cse4 .cse13 .cse14) (and .cse0 .cse7 .cse1 .cse2 .cse19 .cse10 .cse9 .cse3 .cse4 .cse13) (and .cse0 .cse7 .cse15 .cse16 .cse19 .cse10 .cse9 .cse11 .cse3 .cse4 .cse17 .cse13) (and .cse0 .cse15 .cse2 .cse9 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse15 .cse9 .cse11 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse19 .cse11 .cse3 .cse4 .cse14) (and .cse0 .cse1 .cse9 .cse11 .cse3 .cse4 .cse5 .cse6)))) [2019-12-07 12:09:36,164 INFO L242 CegarLoopResult]: At program point L757-2(lines 757 771) the Hoare annotation is: false [2019-12-07 12:09:36,164 INFO L246 CegarLoopResult]: For program point L724-2(lines 724 741) no Hoare annotation was computed. [2019-12-07 12:09:36,164 INFO L242 CegarLoopResult]: At program point L724-3(lines 1 982) the Hoare annotation is: false [2019-12-07 12:09:36,164 INFO L246 CegarLoopResult]: For program point L724-4(lines 724 741) no Hoare annotation was computed. [2019-12-07 12:09:36,164 INFO L242 CegarLoopResult]: At program point L724-5(lines 1 982) the Hoare annotation is: false [2019-12-07 12:09:36,164 INFO L242 CegarLoopResult]: At program point L229(lines 214 232) the Hoare annotation is: false [2019-12-07 12:09:36,164 INFO L242 CegarLoopResult]: At program point L229-1(lines 214 232) the Hoare annotation is: (let ((.cse12 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse13 (= ~waterLevel~0 (_ bv0 32))) (.cse14 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7)) (.cse3 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse10 (= ~waterLevel~0 (_ bv2 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse1 (not (= ULTIMATE.start_isHighWaterLevel_~tmp~2 (_ bv0 32)))) (.cse2 (= (_ bv0 32) ~pumpRunning~0)) (.cse4 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse5 (= |ULTIMATE.start_isHighWaterLevel_#res| (_ bv0 32))) (.cse11 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse6 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~0 (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse9 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse2 .cse10 .cse11 .cse7 .cse8) (and .cse0 .cse12 .cse1 .cse13 .cse2 .cse5 .cse14 .cse11 .cse7 .cse6 .cse8 .cse9) (and .cse0 .cse12 .cse1 .cse13 .cse2 .cse3 .cse5 .cse14 .cse7 .cse6 .cse8 .cse9) (and .cse0 .cse2 .cse3 .cse10 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse11 .cse6 .cse7 .cse8 .cse9))) [2019-12-07 12:09:36,164 INFO L242 CegarLoopResult]: At program point L229-2(lines 214 232) the Hoare annotation is: false [2019-12-07 12:09:36,165 INFO L242 CegarLoopResult]: At program point L229-3(lines 214 232) the Hoare annotation is: false [2019-12-07 12:09:36,165 INFO L242 CegarLoopResult]: At program point L229-4(lines 214 232) the Hoare annotation is: false [2019-12-07 12:09:36,165 INFO L242 CegarLoopResult]: At program point L229-5(lines 214 232) the Hoare annotation is: false [2019-12-07 12:09:36,165 INFO L246 CegarLoopResult]: For program point L758(line 758) no Hoare annotation was computed. [2019-12-07 12:09:36,165 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-12-07 12:09:36,165 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 850) no Hoare annotation was computed. [2019-12-07 12:09:36,165 INFO L242 CegarLoopResult]: At program point L165(lines 158 168) the Hoare annotation is: (let ((.cse4 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse9 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse3 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse6 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv1 32))) (.cse0 (not (= ~systemActive~0 (_ bv0 32)))) (.cse11 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse2 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse14 (= ~waterLevel~0 (_ bv0 32))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse15 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse12 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse16 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~7))) (.cse13 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse11 .cse1 .cse2 .cse4 .cse5 .cse12 .cse7 .cse8 .cse9 .cse13) (and .cse0 .cse1 .cse2 .cse14 .cse5 .cse3 .cse15 .cse6 .cse7 .cse8 .cse10 .cse16) (and .cse0 .cse11 .cse1 .cse2 .cse14 .cse5 .cse15 .cse12 .cse7 .cse8 .cse16 .cse13))) [2019-12-07 12:09:36,165 INFO L242 CegarLoopResult]: At program point L165-1(lines 158 168) the Hoare annotation is: false [2019-12-07 12:09:36,166 INFO L246 CegarLoopResult]: For program point L99(lines 99 107) no Hoare annotation was computed. [2019-12-07 12:09:36,166 INFO L242 CegarLoopResult]: At program point L165-2(lines 158 168) the Hoare annotation is: false [2019-12-07 12:09:36,166 INFO L246 CegarLoopResult]: For program point L99-1(lines 99 107) no Hoare annotation was computed. [2019-12-07 12:09:36,166 INFO L246 CegarLoopResult]: For program point L99-2(lines 99 107) no Hoare annotation was computed. [2019-12-07 12:09:36,166 INFO L246 CegarLoopResult]: For program point L99-3(lines 99 107) no Hoare annotation was computed. [2019-12-07 12:09:36,166 INFO L246 CegarLoopResult]: For program point L99-4(lines 99 107) no Hoare annotation was computed. [2019-12-07 12:09:36,166 INFO L246 CegarLoopResult]: For program point L99-5(lines 99 107) no Hoare annotation was computed. [2019-12-07 12:09:36,166 INFO L246 CegarLoopResult]: For program point L761(lines 761 765) no Hoare annotation was computed. [2019-12-07 12:09:36,166 INFO L246 CegarLoopResult]: For program point L728(lines 728 738) no Hoare annotation was computed. [2019-12-07 12:09:36,166 INFO L246 CegarLoopResult]: For program point L761-1(lines 761 765) no Hoare annotation was computed. [2019-12-07 12:09:36,166 INFO L246 CegarLoopResult]: For program point L728-2(lines 728 738) no Hoare annotation was computed. [2019-12-07 12:09:36,166 INFO L246 CegarLoopResult]: For program point L728-4(lines 728 738) no Hoare annotation was computed. [2019-12-07 12:09:36,231 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 12:09:36 BoogieIcfgContainer [2019-12-07 12:09:36,231 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-12-07 12:09:36,231 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 12:09:36,231 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 12:09:36,231 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 12:09:36,232 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 12:08:08" (3/4) ... [2019-12-07 12:09:36,234 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-12-07 12:09:36,246 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2019-12-07 12:09:36,246 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2019-12-07 12:09:36,247 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2019-12-07 12:09:36,248 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2019-12-07 12:09:36,248 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-12-07 12:09:36,249 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 12:09:36,250 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 12:09:36,268 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result [2019-12-07 12:09:36,269 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result [2019-12-07 12:09:36,269 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result [2019-12-07 12:09:36,269 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result) || ((((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result)) || (((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((0bv32 == pumpRunning && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result)) || ((((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && waterLevel == tmp) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && !(2bv32 == \result)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32))) || (((((((((!(systemActive == 0bv32) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result) [2019-12-07 12:09:36,269 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result)) || (((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) [2019-12-07 12:09:36,269 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((((0bv32 == pumpRunning && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || (((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) [2019-12-07 12:09:36,269 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == tmp) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 12:09:36,270 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 12:09:36,270 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == tmp) && tmp == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == \result)) && waterLevel == tmp) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) [2019-12-07 12:09:36,270 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 1bv32 == \result) && !(systemActive == 0bv32)) && waterLevel == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp)) || ((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == tmp) && tmp == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(systemActive == 0bv32)) && waterLevel == \result) && 1bv32 == \result) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) [2019-12-07 12:09:36,270 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && methaneLevelCritical == 0bv32) && ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && splverifierCounter == 0bv32) && 2bv32 == tmp))) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && splverifierCounter == 0bv32) && 2bv32 == tmp))) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) [2019-12-07 12:09:36,270 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && !(systemActive == 0bv32)) && \result == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) [2019-12-07 12:09:36,271 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((!(systemActive == 0bv32) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 12:09:36,271 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || (((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 12:09:36,272 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 1bv32) || ((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32)) || (((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 1bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && \result == 0bv32) [2019-12-07 12:09:36,272 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1bv32 == \result && !(systemActive == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((1bv32 == \result && !(systemActive == 0bv32)) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == \result && !(systemActive == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((1bv32 == \result && !(systemActive == 0bv32)) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 12:09:36,272 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && !(systemActive == 0bv32)) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32))) || (((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && !(systemActive == 0bv32)) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 12:09:36,273 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(systemActive == 0bv32) && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && !(tmp == 0bv32)) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && \result == 0bv32) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && !(tmp == 0bv32)) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && \result == 0bv32) && waterLevel == tmp) && 1bv32 == \result) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && methaneLevelCritical == 0bv32) && tmp___0 == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 12:09:36,307 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/run_dir_4844c503-727c-4e4b-8bb7-03cfadea1e99/bin/utaipan/witness.graphml [2019-12-07 12:09:36,307 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 12:09:36,308 INFO L168 Benchmark]: Toolchain (without parser) took 89150.48 ms. Allocated memory was 1.0 GB in the beginning and 1.7 GB in the end (delta: 696.8 MB). Free memory was 952.4 MB in the beginning and 1.2 GB in the end (delta: -278.5 MB). Peak memory consumption was 418.2 MB. Max. memory is 11.5 GB. [2019-12-07 12:09:36,308 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 12:09:36,308 INFO L168 Benchmark]: CACSL2BoogieTranslator took 423.91 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 126.4 MB). Free memory was 947.0 MB in the beginning and 1.1 GB in the end (delta: -154.4 MB). Peak memory consumption was 26.2 MB. Max. memory is 11.5 GB. [2019-12-07 12:09:36,309 INFO L168 Benchmark]: Boogie Procedure Inliner took 48.22 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.9 MB). Peak memory consumption was 6.9 MB. Max. memory is 11.5 GB. [2019-12-07 12:09:36,309 INFO L168 Benchmark]: Boogie Preprocessor took 33.26 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 12:09:36,309 INFO L168 Benchmark]: RCFGBuilder took 591.08 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 82.5 MB). Peak memory consumption was 82.5 MB. Max. memory is 11.5 GB. [2019-12-07 12:09:36,309 INFO L168 Benchmark]: TraceAbstraction took 87975.05 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 570.4 MB). Free memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: -237.2 MB). Peak memory consumption was 1.0 GB. Max. memory is 11.5 GB. [2019-12-07 12:09:36,309 INFO L168 Benchmark]: Witness Printer took 75.92 ms. Allocated memory is still 1.7 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 18.3 MB). Peak memory consumption was 18.3 MB. Max. memory is 11.5 GB. [2019-12-07 12:09:36,311 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 423.91 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 126.4 MB). Free memory was 947.0 MB in the beginning and 1.1 GB in the end (delta: -154.4 MB). Peak memory consumption was 26.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 48.22 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.9 MB). Peak memory consumption was 6.9 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 33.26 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 591.08 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 82.5 MB). Peak memory consumption was 82.5 MB. Max. memory is 11.5 GB. * TraceAbstraction took 87975.05 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 570.4 MB). Free memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: -237.2 MB). Peak memory consumption was 1.0 GB. Max. memory is 11.5 GB. * Witness Printer took 75.92 ms. Allocated memory is still 1.7 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 18.3 MB). Peak memory consumption was 18.3 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 850]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 850]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 850]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 1bv32 == \result) && !(systemActive == 0bv32)) && waterLevel == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp)) || ((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == tmp) && tmp == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(systemActive == 0bv32)) && waterLevel == \result) && 1bv32 == \result) && waterLevel == tmp) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result) || ((((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result)) || (((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((0bv32 == pumpRunning && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result)) || ((((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && waterLevel == tmp) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && !(2bv32 == \result)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32))) || (((((((((!(systemActive == 0bv32) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result) - InvariantResult [Line: 757]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 237]: Loop Invariant Derived loop invariant: ((((((((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((!(systemActive == 0bv32) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((!(systemActive == 0bv32) && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 70]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 158]: Loop Invariant Derived loop invariant: ((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 1bv32) || ((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32)) || (((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 1bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && \result == 0bv32) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 70]: Loop Invariant Derived loop invariant: (((((((((((((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && !(systemActive == 0bv32)) && \result == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((0bv32 == pumpRunning && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == tmp) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 158]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 801]: Loop Invariant Derived loop invariant: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: (((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || (((((((((((!(systemActive == 0bv32) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 158]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 70]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 698]: Loop Invariant Derived loop invariant: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && methaneLevelCritical == 0bv32) && ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && splverifierCounter == 0bv32) && 2bv32 == tmp))) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && splverifierCounter == 0bv32) && 2bv32 == tmp))) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((((0bv32 == pumpRunning && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32))) || (((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: (((((((((((1bv32 == \result && !(systemActive == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((1bv32 == \result && !(systemActive == 0bv32)) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == \result && !(systemActive == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((1bv32 == \result && !(systemActive == 0bv32)) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 269]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 832]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 280]: Loop Invariant Derived loop invariant: ((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == tmp) && 2bv32 == \result)) || (((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: ((((((((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && waterLevel == tmp) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && !(systemActive == 0bv32)) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32))) || (((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && !(systemActive == 0bv32)) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(2bv32 == tmp)) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == tmp) && tmp == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == tmp) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == pumpRunning) && !(2bv32 == \result)) && waterLevel == tmp) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == \result)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && waterLevel == tmp) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && tmp == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == \result) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && !(2bv32 == tmp))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((!(systemActive == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: (((((((((((((!(systemActive == 0bv32) && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && !(tmp == 0bv32)) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && \result == 0bv32) && waterLevel == tmp) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((!(systemActive == 0bv32) && waterLevel == \result) && !(tmp == 0bv32)) && waterLevel == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && \result == 0bv32) && waterLevel == tmp) && 1bv32 == \result) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((!(systemActive == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((!(systemActive == 0bv32) && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && methaneLevelCritical == 0bv32) && tmp___0 == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 122 locations, 3 error locations. Result: SAFE, OverallTime: 13.7s, OverallIterations: 15, TraceHistogramMax: 4, AutomataDifference: 2.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 74.1s, HoareTripleCheckerStatistics: 1774 SDtfs, 3764 SDslu, 4867 SDs, 0 SdLazy, 684 SolverSat, 160 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 3128 GetRequests, 2994 SyntacticMatches, 3 SemanticMatches, 131 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 247 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1125occurred in iteration=13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 15 MinimizatonAttempts, 4699 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 51 PreInvPairs, 722 NumberOfFragments, 5394 HoareAnnotationTreeSize, 51 FomulaSimplifications, 36474385 FormulaSimplificationTreeSizeReduction, 7.3s HoareSimplificationTime, 51 FomulaSimplificationsInter, 40194469 FormulaSimplificationTreeSizeReductionInter, 66.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.4s SsaConstructionTime, 3.5s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 1543 NumberOfCodeBlocks, 1543 NumberOfCodeBlocksAsserted, 26 NumberOfCheckSat, 3040 ConstructedInterpolants, 0 QuantifiedInterpolants, 575083 SizeOfPredicates, 87 NumberOfNonLiveVariables, 5689 ConjunctsInSsa, 124 ConjunctsInUnsatCore, 46 InterpolantComputations, 23 PerfectInterpolantSequences, 2266/2496 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...